Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M-tQla20v9KKhjMDu16ZZ4JiCnY.roa
File: M-tQla20v9KKhjMDu16ZZ4JiCnY.roa (raw, json)
Hash identifier: C/2s68iEAQZIo/me+LEVw8MLfWHVgXX7ht08Kco5qf8=
Subject key identifier: 33:EB:50:95:AD:B4:BF:D2:8A:86:33:03:BB:5E:99:67:82:62:0A:76
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12D7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M-tQla20v9KKhjMDu16ZZ4JiCnY.roa
Signing time: Wed 29 Sep 2021 02:55:03 +0000
ROA not before: Wed 29 Sep 2021 02:55:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 115.165.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4823 (0x12d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=33EB5095ADB4BFD28A863303BB5E996782620A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:17:dd:e4:46:ba:7c:96:50:5a:6a:e4:ec:
d4:ea:17:e5:16:87:b0:45:aa:ba:e3:12:77:45:f1:
99:37:df:f1:49:3e:86:8b:4b:71:68:18:df:b4:af:
62:44:e5:51:1b:08:7a:eb:bb:a2:df:1b:84:d0:4b:
80:61:b4:4f:ba:25:0c:e7:fc:8f:09:30:24:3a:01:
58:fe:83:ef:45:0f:9f:23:c6:8d:85:79:5e:b0:2f:
29:a1:3b:ac:0f:f1:0a:e4:6b:c0:fb:6d:14:91:7a:
70:eb:86:16:63:3d:5c:b7:e5:01:7a:eb:1a:b5:0a:
70:4a:0a:f3:8c:b2:81:69:9a:88:76:f5:b8:fc:67:
b0:61:b3:3a:53:70:dc:57:cb:ea:77:af:36:99:70:
f2:47:9c:d7:07:ca:33:a6:90:75:e4:7b:69:e2:cd:
dc:a8:1d:47:58:1e:93:cb:af:7e:62:14:54:97:1c:
4a:5f:2e:56:9e:3b:e9:e2:20:f2:8e:6c:c9:58:46:
54:45:9a:e5:13:e4:fd:f1:88:26:63:0e:d8:32:c3:
33:32:49:27:4d:41:c4:2d:81:4e:9d:56:b6:88:f9:
a2:03:38:18:b9:f6:b0:e6:01:d4:fa:4d:14:c2:f0:
d8:66:80:7b:fc:d5:39:a6:4f:fc:51:f7:21:5a:ec:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:50:95:AD:B4:BF:D2:8A:86:33:03:BB:5E:99:67:82:62:0A:76
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M-tQla20v9KKhjMDu16ZZ4JiCnY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.218.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:11:1e:80:1f:a5:51:f0:a5:58:d5:55:54:fa:c9:3e:b5:1f:
c9:bd:65:71:12:30:a1:f8:8e:08:1a:94:a8:38:c5:01:6d:b9:
8b:8d:42:62:c1:b2:85:91:66:a5:b9:10:af:43:2b:e5:2f:69:
68:04:4e:1f:6d:a3:c5:5b:eb:56:8f:14:4b:33:ea:8c:fa:79:
ca:12:a1:09:25:a8:a3:f8:d2:f7:f2:3a:27:56:a9:ed:cb:5e:
b8:1f:6f:22:50:3e:43:3b:71:85:9c:b5:37:68:83:3b:2e:6b:
9a:21:20:ad:d3:92:24:a2:60:14:ce:d1:68:7b:a5:62:68:69:
fe:ba:6a:1f:24:bd:e8:5e:b9:d4:2e:c2:34:6a:52:d6:1f:de:
4e:94:98:48:7a:82:dc:b1:25:10:b1:90:d9:02:7c:d9:c9:16:
43:4a:17:08:55:1f:2d:35:a1:f8:e3:ab:d2:2d:a7:f2:82:9e:
bc:f6:3b:92:0b:e6:9c:fa:cc:18:6b:c6:bc:ca:90:7d:28:20:
80:14:e5:4e:30:d7:b8:69:d0:7b:d7:b3:97:ec:0d:f4:d4:31:
70:00:48:2d:76:f8:1f:ab:84:7c:66:94:8e:8a:12:55:3f:8a:
4d:a0:c5:39:00:d0:72:f9:22:46:5f:32:ef:4f:e4:e9:b5:30:
ac:00:ce:50
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDMzRUI1MDk1QURCNEJG
RDI4QTg2MzMwM0JCNUU5OTY3ODI2MjBBNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCUThfd5Ea6fJZQWmrk7NTqF+UWh7BFqrrjEndF8Zk33/FJPoaL
S3FoGN+0r2JE5VEbCHrru6LfG4TQS4BhtE+6JQzn/I8JMCQ6AVj+g+9FD58jxo2F
eV6wLymhO6wP8Qrka8D7bRSRenDrhhZjPVy35QF66xq1CnBKCvOMsoFpmoh29bj8
Z7BhszpTcNxXy+p3rzaZcPJHnNcHyjOmkHXke2nizdyoHUdYHpPLr35iFFSXHEpf
LlaeO+niIPKObMlYRlRFmuUT5P3xiCZjDtgywzMySSdNQcQtgU6dVraI+aIDOBi5
9rDmAdT6TRTC8NhmgHv81TmmT/xR9yFa7D55AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUM+tQla20v9KKhjMDu16ZZ4JiCnYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL00tdFFsYTIwdjlLS2hqTUR1
MTZaWjRKaUNuWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFz
pdowDQYJKoZIhvcNAQELBQADggEBAD8RHoAfpVHwpVjVVVT6yT61H8m9ZXESMKH4
jggalKg4xQFtuYuNQmLBsoWRZqW5EK9DK+UvaWgETh9to8Vb61aPFEsz6oz6ecoS
oQklqKP40vfyOidWqe3LXrgfbyJQPkM7cYWctTdogzsua5ohIK3TkiSiYBTO0Wh7
pWJoaf66ah8kveheudQuwjRqUtYf3k6UmEh6gtyxJRCxkNkCfNnJFkNKFwhVHy01
ofjjq9Itp/KCnrz2O5IL5pz6zBhrxrzKkH0oIIAU5U4w17hp0HvXs5fsDfTUMXAA
SC12+B+rhHxmlI6KElU/ik2gxTkA0HL5IkZfMu9P5Om1MKwAzlA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org