Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P5lfDVkl_vZH8hwd2Ix6c-dLs0U.roa
File: P5lfDVkl_vZH8hwd2Ix6c-dLs0U.roa (raw, json)
Hash identifier: DudKyDU68zRhJN9HXJmIIKFntqyxsEwViGm0K5SEK6U=
Subject key identifier: 3F:99:5F:0D:59:25:FE:F6:47:F2:1C:1D:D8:8C:7A:73:E7:4B:B3:45
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B56
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P5lfDVkl_vZH8hwd2Ix6c-dLs0U.roa
Signing time: Tue 29 Sep 2020 10:08:18 +0000
ROA not before: Tue 29 Sep 2020 10:08:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2902 (0xb56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:18 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3F995F0D5925FEF647F21C1DD88C7A73E74BB345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:eb:fa:94:3e:eb:1e:8d:d7:5f:12:53:fc:
e9:8f:55:79:5d:ab:38:75:f7:7d:e3:33:45:52:fc:
26:24:9e:e4:f1:3b:1c:2d:f6:e0:f1:7c:33:1a:3d:
48:ed:9e:f3:f2:bf:00:b0:5e:95:b0:f5:e0:fc:3c:
e3:be:6e:a7:8a:48:6b:38:6e:23:2c:f2:d2:c4:08:
db:e9:81:ea:e0:71:e6:f1:d9:a1:9c:14:dd:82:23:
93:53:f5:6b:5f:c1:a2:30:46:6f:91:6b:2f:5c:dc:
19:31:fa:e2:2c:56:0e:59:63:ad:9d:ac:a4:da:5e:
d1:88:34:4e:42:ec:61:fa:80:cc:cd:0f:72:22:92:
45:77:b7:65:27:b0:d2:c7:36:c3:29:f5:bf:57:93:
60:16:3c:8f:a8:00:5f:a4:9e:cc:c0:5b:77:4a:73:
d5:fa:15:22:35:fb:a8:82:bc:03:28:f1:f4:94:88:
bc:03:a1:1a:7a:6b:5a:7a:f8:27:c0:c1:59:ec:5b:
6b:f4:aa:0c:64:cd:e7:9f:70:8f:b6:37:c9:36:73:
f7:5b:e9:89:42:87:e4:5a:83:51:c3:c0:78:a3:61:
88:b0:29:71:91:fb:83:f9:7b:0a:df:83:91:2f:9f:
c3:0d:83:83:a8:1d:ee:5e:cf:3e:29:5c:8e:8c:48:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:99:5F:0D:59:25:FE:F6:47:F2:1C:1D:D8:8C:7A:73:E7:4B:B3:45
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P5lfDVkl_vZH8hwd2Ix6c-dLs0U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.48.0/21
Signature Algorithm: sha256WithRSAEncryption
77:43:9c:fc:1f:88:3c:47:c1:07:c1:32:d5:6d:4b:5d:f0:f2:
8f:ed:87:7d:80:07:a2:8d:fb:73:fb:06:41:46:bb:5b:5d:7b:
a5:86:17:99:04:ab:e2:87:64:ec:de:5f:48:5f:f6:e4:31:af:
5f:01:91:4e:ee:d9:76:67:bc:c0:6b:d2:a7:f4:f5:ab:81:f5:
0a:5d:fb:d2:70:34:f4:ed:79:3e:c9:6f:9d:fa:e5:f6:ad:ab:
a3:40:83:af:72:76:ed:48:83:2c:e3:9c:82:7f:37:39:1f:49:
de:2d:56:e4:b7:6b:b7:f0:cb:84:92:7f:90:c1:b7:ec:c5:88:
e8:7c:10:6d:71:3c:f1:bc:be:2d:7f:d6:fe:d0:56:83:59:57:
7d:13:81:1e:b0:6f:01:ff:65:3d:66:3e:85:9d:e1:17:bf:26:
62:78:d7:fa:de:f5:5a:82:42:62:d9:4c:a6:36:5e:d6:b8:db:
3f:96:b9:43:90:bb:e9:ec:eb:16:8e:cb:2d:2e:df:ca:77:3e:
98:b3:a2:95:d3:49:0c:2b:09:37:a8:78:50:ec:2f:08:89:68:
84:44:95:f4:dd:65:4a:93:c4:ec:b7:d8:6f:4a:5e:23:31:fc:
6d:e7:59:a9:f6:46:15:ed:0f:85:65:d3:5b:fa:98:e2:e2:69:
df:02:d3:16
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNGOTk1RjBENTkyNUZF
RjY0N0YyMUMxREQ4OEM3QTczRTc0QkIzNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlN+v6lD7rHo3XXxJT/OmPVXldqzh1933jM0VS/CYknuTxOxwt
9uDxfDMaPUjtnvPyvwCwXpWw9eD8POO+bqeKSGs4biMs8tLECNvpgergcebx2aGc
FN2CI5NT9WtfwaIwRm+Ray9c3Bkx+uIsVg5ZY62drKTaXtGINE5C7GH6gMzND3Ii
kkV3t2UnsNLHNsMp9b9Xk2AWPI+oAF+knszAW3dKc9X6FSI1+6iCvAMo8fSUiLwD
oRp6a1p6+CfAwVnsW2v0qgxkzeefcI+2N8k2c/db6YlCh+Rag1HDwHijYYiwKXGR
+4P5ewrfg5Evn8MNg4OoHe5ezz4pXI6MSDBvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUP5lfDVkl/vZH8hwd2Ix6c+dLs0UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1A1bGZEVmtsX3ZaSDhod2Qy
SXg2Yy1kTHMwVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
njAwDQYJKoZIhvcNAQELBQADggEBAHdDnPwfiDxHwQfBMtVtS13w8o/th32AB6KN
+3P7BkFGu1tde6WGF5kEq+KHZOzeX0hf9uQxr18BkU7u2XZnvMBr0qf09auB9Qpd
+9JwNPTteT7Jb5365fatq6NAg69ydu1IgyzjnIJ/NzkfSd4tVuS3a7fwy4SSf5DB
t+zFiOh8EG1xPPG8vi1/1v7QVoNZV30TgR6wbwH/ZT1mPoWd4Re/JmJ41/re9VqC
QmLZTKY2Xta42z+WuUOQu+ns6xaOyy0u38p3PpizopXTSQwrCTeoeFDsLwiJaIRE
lfTdZUqTxOy32G9KXiMx/G3nWan2RhXtD4Vl01v6mOLiad8C0xY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org