Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M_7a-tV-QT6-VF4uJNkDg9zqQx4.roa
File: M_7a-tV-QT6-VF4uJNkDg9zqQx4.roa (raw, json)
Hash identifier: 10W+acAwdmhJfHCsSbCdty9CiFrnlO0mK4ejWvyRcYw=
Subject key identifier: 33:FE:DA:FA:D5:7E:41:3E:BE:54:5E:2E:24:D9:03:83:DC:EA:43:1E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F47
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M_7a-tV-QT6-VF4uJNkDg9zqQx4.roa
Signing time: Sun 07 Feb 2021 12:33:31 +0000
ROA not before: Sun 07 Feb 2021 12:33:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3911 (0xf47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=33FEDAFAD57E413EBE545E2E24D90383DCEA431E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:a5:90:86:be:63:75:3f:83:5f:8e:b0:fb:
db:ba:c4:65:32:85:0e:84:0f:ac:ff:aa:39:da:92:
13:d6:31:6e:7b:67:f9:21:59:aa:e9:a7:e0:e0:fa:
c4:28:b4:39:16:00:be:f3:d5:db:f5:4f:9e:b6:13:
53:92:52:df:76:07:39:74:1a:c7:7e:fc:93:0c:f9:
28:cd:07:23:7f:07:57:f9:53:4f:f1:2a:13:e1:b5:
d3:04:3d:c8:8e:2f:3f:85:31:50:ad:8b:1d:09:7f:
9a:27:02:86:d4:a8:37:41:03:f6:82:cb:a0:ef:6e:
c8:7b:02:59:d2:36:46:bf:d9:b5:ec:34:b5:91:cd:
56:99:a3:05:76:8e:21:7d:1d:a2:16:1b:ee:04:f4:
8d:23:98:f0:7d:8d:09:16:93:6f:47:9f:23:46:89:
1c:cd:da:b0:7f:6d:a7:1d:aa:e3:69:9f:9d:06:e2:
4e:ef:d8:e3:2d:e3:f6:81:4d:fc:57:c9:3e:c7:86:
63:c3:4e:97:ce:a6:2f:55:49:5e:03:cf:0e:bf:0f:
33:e9:2a:26:3c:39:4d:1e:77:3e:19:fa:0d:7e:03:
f2:f8:15:dc:92:24:93:3c:59:f8:db:0e:42:f1:6f:
b8:3e:25:7b:dc:be:04:49:ed:fa:9c:c5:d8:c2:04:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:DA:FA:D5:7E:41:3E:BE:54:5E:2E:24:D9:03:83:DC:EA:43:1E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M_7a-tV-QT6-VF4uJNkDg9zqQx4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.110.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:9e:3e:02:6f:f3:54:f7:0e:a7:12:5b:a1:ac:38:cd:71:25:
1f:92:11:2e:aa:57:5f:00:3d:a1:7b:68:e7:da:11:bd:5a:a2:
81:dd:95:0b:fa:67:85:30:3c:5a:29:cb:c5:60:c8:21:7a:4b:
1c:e5:fe:45:9e:22:45:07:b3:1e:1e:54:26:64:c6:42:25:3e:
d3:fb:76:33:1f:e2:f3:8a:c8:c0:09:35:0e:88:bc:44:85:cc:
76:be:86:9d:03:b9:02:94:d3:90:9b:1d:ad:7b:bd:ef:58:6c:
bd:e6:04:82:43:46:32:5e:38:9d:fd:91:3a:a1:cf:c8:4c:9e:
b8:55:b9:fa:65:e9:17:1e:55:ad:45:16:e2:1e:d8:66:2a:74:
23:72:67:cf:9f:0c:69:0c:0c:ca:22:78:ac:b5:46:db:9b:9f:
f5:e3:25:79:1e:55:9c:ad:8c:91:11:7a:ec:a0:7c:66:bc:7f:
f2:3b:6d:b3:0d:07:ff:25:0f:35:ad:7d:c4:7f:57:c7:c9:5d:
6e:a7:9d:66:31:06:58:ae:73:37:98:39:8e:10:2b:d0:e9:03:
61:47:79:01:9c:f7:16:74:d6:5c:2b:09:e7:7b:28:57:19:85:
d2:ee:8c:86:5c:07:9a:7d:6d:0a:be:af:69:2d:f6:9d:0d:c4:
2c:27:7e:3c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMzMzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMzRkVEQUZBRDU3RTQx
M0VCRTU0NUUyRTI0RDkwMzgzRENFQTQzMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgdaWQhr5jdT+DX46w+9u6xGUyhQ6ED6z/qjnakhPWMW57Z/kh
Warpp+Dg+sQotDkWAL7z1dv1T562E1OSUt92Bzl0Gsd+/JMM+SjNByN/B1f5U0/x
KhPhtdMEPciOLz+FMVCtix0Jf5onAobUqDdBA/aCy6Dvbsh7AlnSNka/2bXsNLWR
zVaZowV2jiF9HaIWG+4E9I0jmPB9jQkWk29HnyNGiRzN2rB/bacdquNpn50G4k7v
2OMt4/aBTfxXyT7HhmPDTpfOpi9VSV4Dzw6/DzPpKiY8OU0edz4Z+g1+A/L4FdyS
JJM8WfjbDkLxb7g+JXvcvgRJ7fqcxdjCBKZRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUM/7a+tV+QT6+VF4uJNkDg9zqQx4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01fN2EtdFYtUVQ2LVZGNHVK
TmtEZzl6cVF4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF6
ZG4wDQYJKoZIhvcNAQELBQADggEBAF6ePgJv81T3DqcSW6GsOM1xJR+SES6qV18A
PaF7aOfaEb1aooHdlQv6Z4UwPFopy8VgyCF6Sxzl/kWeIkUHsx4eVCZkxkIlPtP7
djMf4vOKyMAJNQ6IvESFzHa+hp0DuQKU05CbHa17ve9YbL3mBIJDRjJeOJ39kTqh
z8hMnrhVufpl6RceVa1FFuIe2GYqdCNyZ8+fDGkMDMoieKy1Rtubn/XjJXkeVZyt
jJEReuygfGa8f/I7bbMNB/8lDzWtfcR/V8fJXW6nnWYxBliuczeYOY4QK9DpA2FH
eQGc9xZ01lwrCed7KFcZhdLujIZcB5p9bQq+r2kt9p0NxCwnfjw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org