Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MB9vO3xVt4pqWINKOyxTpmOavx8.roa
File: MB9vO3xVt4pqWINKOyxTpmOavx8.roa (raw, json)
Hash identifier: WXo2PZBflpqN+o5AbRd2C6qERejFdJ1uDPPj9XX5QRM=
Subject key identifier: 30:1F:6F:3B:7C:55:B7:8A:6A:58:83:4A:3B:2C:53:A6:63:9A:BF:1F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AE4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MB9vO3xVt4pqWINKOyxTpmOavx8.roa
Signing time: Tue 29 Sep 2020 10:07:45 +0000
ROA not before: Tue 29 Sep 2020 10:07:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.60.215.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2788 (0xae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=301F6F3B7C55B78A6A58834A3B2C53A6639ABF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:bf:fd:97:df:b2:0b:b6:51:21:8e:22:94:
f4:5a:bf:17:33:57:54:2f:bf:f9:af:a7:c1:e2:d4:
5a:d6:9a:08:bb:02:d1:0c:8c:fd:d7:80:dc:73:f8:
84:b4:80:f6:ce:11:fe:4f:e3:f5:ef:b6:17:57:24:
d9:8d:55:de:af:63:aa:a4:ba:a8:1f:c0:12:7a:4e:
4f:79:5e:75:c0:7c:86:13:10:b7:30:f1:15:63:6f:
45:5e:05:8c:af:e8:22:8b:41:97:96:b7:c8:5c:99:
44:0e:bd:4e:7b:cf:88:5a:34:5c:76:e3:c7:b7:e1:
2b:de:1e:42:8c:90:a0:ad:78:2b:4e:b5:ca:4b:99:
cf:6d:0b:d3:3a:2a:f2:2b:0b:82:17:78:da:85:37:
c8:18:00:37:a7:75:a2:8e:00:0b:0e:c3:00:c6:93:
cc:8d:b6:8e:77:8e:d4:58:f8:66:80:6f:7f:d6:a6:
18:f3:eb:30:b8:0f:49:6b:57:80:6a:ee:fc:fb:9d:
89:41:5e:f0:20:68:93:ea:54:99:8a:dd:9a:50:35:
6f:45:1a:8d:a0:89:c9:4b:bc:b8:3c:27:20:eb:95:
67:95:36:b3:77:df:c1:eb:74:3e:c8:b5:53:19:19:
bd:5d:46:d0:70:87:80:be:1c:32:ec:67:65:8c:ef:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:6F:3B:7C:55:B7:8A:6A:58:83:4A:3B:2C:53:A6:63:9A:BF:1F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MB9vO3xVt4pqWINKOyxTpmOavx8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.0/25
Signature Algorithm: sha256WithRSAEncryption
3d:2d:32:2b:be:8f:4e:ee:d2:11:35:01:82:5a:11:bd:96:56:
14:0b:d3:34:08:0d:90:46:74:79:eb:bc:1d:c2:44:bd:f9:7c:
1c:7d:e8:69:a8:aa:f6:de:95:32:4b:b4:4d:b5:32:b4:25:af:
50:b5:b6:6f:13:67:22:48:e1:8e:b6:4d:8d:2c:fb:84:5e:5e:
5e:1c:f6:05:17:36:53:08:56:bf:7e:e7:ff:83:ce:64:3c:1b:
d3:6b:03:33:e0:2b:25:4c:67:d1:f4:87:8c:37:f1:22:c8:f8:
fd:e6:e5:a7:12:23:92:e1:b5:ee:d8:6f:c3:e5:fa:9f:1a:e9:
8a:1c:6f:b3:29:64:5f:d6:19:f9:08:85:fa:bc:ad:e1:b4:8a:
a5:c0:e8:7b:9e:46:fa:38:99:10:ed:e0:bb:dd:90:e7:da:08:
96:84:ca:99:27:da:4c:0e:75:ae:fc:ec:ff:b4:d3:a3:b1:48:
d8:df:bc:aa:1d:e6:4b:2d:2e:fa:a0:77:bb:b3:ec:cf:c9:c9:
37:2f:da:91:79:70:eb:c3:76:31:13:5b:76:51:a9:45:e2:8c:
26:64:4d:41:4b:2b:15:74:fc:2b:79:92:b0:8a:97:fd:d6:0e:
53:df:85:35:2b:70:b1:fb:36:72:07:35:b2:51:16:ac:f9:43:
7b:80:b7:66
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMwMUY2RjNCN0M1NUI3
OEE2QTU4ODM0QTNCMkM1M0E2NjM5QUJGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmTb/9l9+yC7ZRIY4ilPRavxczV1Qvv/mvp8Hi1FrWmgi7AtEM
jP3XgNxz+IS0gPbOEf5P4/XvthdXJNmNVd6vY6qkuqgfwBJ6Tk95XnXAfIYTELcw
8RVjb0VeBYyv6CKLQZeWt8hcmUQOvU57z4haNFx248e34SveHkKMkKCteCtOtcpL
mc9tC9M6KvIrC4IXeNqFN8gYADendaKOAAsOwwDGk8yNto53jtRY+GaAb3/Wphjz
6zC4D0lrV4Bq7vz7nYlBXvAgaJPqVJmK3ZpQNW9FGo2giclLvLg8JyDrlWeVNrN3
38HrdD7ItVMZGb1dRtBwh4C+HDLsZ2WM71qBAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUMB9vO3xVt4pqWINKOyxTpmOavx8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01COXZPM3hWdDRwcVdJTktP
eXhUcG1PYXZ4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQc9
PNcAMA0GCSqGSIb3DQEBCwUAA4IBAQA9LTIrvo9O7tIRNQGCWhG9llYUC9M0CA2Q
RnR567wdwkS9+XwcfehpqKr23pUyS7RNtTK0Ja9QtbZvE2ciSOGOtk2NLPuEXl5e
HPYFFzZTCFa/fuf/g85kPBvTawMz4CslTGfR9IeMN/EiyPj95uWnEiOS4bXu2G/D
5fqfGumKHG+zKWRf1hn5CIX6vK3htIqlwOh7nkb6OJkQ7eC73ZDn2giWhMqZJ9pM
DnWu/Oz/tNOjsUjY37yqHeZLLS76oHe7s+zPyck3L9qReXDrw3YxE1t2UalF4owm
ZE1BSysVdPwreZKwipf91g5T34U1K3Cx+zZyBzWyURas+UN7gLdm
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org