Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PHv_mnVCrkwV2e1j-3J3ygPa32Q.roa
File: PHv_mnVCrkwV2e1j-3J3ygPa32Q.roa (raw, json)
Hash identifier: 4dnoG3xepc22AgFJOuz0PRtrQlIJzVWgUSjTRtZwog0=
Subject key identifier: 3C:7B:FF:9A:75:42:AE:4C:15:D9:ED:63:FB:72:77:CA:03:DA:DF:64
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1017
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PHv_mnVCrkwV2e1j-3J3ygPa32Q.roa
Signing time: Sun 07 Feb 2021 12:37:34 +0000
ROA not before: Sun 07 Feb 2021 12:37:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 61.58.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4119 (0x1017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C7BFF9A7542AE4C15D9ED63FB7277CA03DADF64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:f2:7b:fb:cd:d6:bf:ba:bd:0d:cc:c3:6e:
f5:51:46:d3:af:a8:d8:ba:c8:25:f7:ee:b5:91:83:
24:cd:17:16:d5:aa:36:85:7a:10:6d:2f:7f:cc:97:
99:e7:a1:aa:6b:1c:a5:7c:86:8f:21:6b:c3:c0:d4:
ac:f7:52:32:18:bf:f5:c2:cf:f9:43:b4:d5:fe:15:
70:cf:98:40:cd:2d:90:c4:31:29:97:49:33:15:21:
3c:0a:d7:a7:78:e2:25:93:49:84:d5:39:fa:4d:2c:
42:2d:7b:6f:59:c3:89:52:22:0f:01:90:53:eb:4b:
a8:4a:14:b1:7a:aa:3c:88:04:6c:e3:78:f7:ec:22:
36:10:27:34:fc:41:1d:e6:84:35:11:14:00:72:59:
a6:dc:51:06:5b:13:61:d5:39:d7:a4:18:e5:9f:36:
65:7e:f6:58:55:b4:94:c6:e7:7a:6f:0a:9c:8d:9e:
f8:7d:ec:18:df:5e:dd:3f:2a:3f:45:3f:ac:6e:53:
7c:cf:03:3b:66:db:c2:8a:ca:df:d1:a9:ef:d9:2b:
03:ae:33:c5:e6:d4:e9:62:84:20:c6:30:f2:a3:99:
f5:7a:d3:48:1b:e8:32:f6:54:d0:15:ce:94:c4:dd:
a7:5a:a4:52:c6:26:32:64:01:80:40:90:68:8f:f9:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7B:FF:9A:75:42:AE:4C:15:D9:ED:63:FB:72:77:CA:03:DA:DF:64
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PHv_mnVCrkwV2e1j-3J3ygPa32Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/21
Signature Algorithm: sha256WithRSAEncryption
72:56:a8:90:a5:cc:da:6c:99:8d:0b:df:c6:f9:fd:af:70:f6:
db:0b:1a:ec:63:a8:92:4b:37:03:76:1e:40:b4:c8:37:00:5e:
fb:72:b2:97:88:f9:cb:fd:c4:7c:1d:c0:ba:8d:b4:40:de:32:
b2:43:f1:43:53:54:bd:6b:05:1e:21:01:59:0e:5c:27:29:b4:
09:73:b0:8e:b6:a4:a1:24:82:eb:bf:7c:23:ba:f5:1d:bd:8b:
f7:b4:1c:d6:16:f4:f8:20:a9:29:57:7c:7d:8b:dd:30:7f:41:
ce:f4:83:36:7f:2d:83:66:e1:94:68:4c:43:71:97:b9:15:b1:
40:63:47:37:23:3f:80:94:76:a3:1e:08:5f:ba:d8:15:d9:fd:
75:3f:58:d6:16:3f:94:36:93:f9:0e:d5:e8:d0:b2:60:98:ef:
77:ee:95:c7:3a:f4:9e:fd:5e:03:68:cd:c8:af:04:43:bd:06:
76:35:e0:89:81:08:67:78:e0:8c:c0:41:ca:06:b3:1f:ac:0a:
bf:85:9b:fa:25:51:b4:a0:3c:d0:38:41:df:73:e2:d6:2e:8a:
dd:75:d8:32:b2:cd:e5:23:02:6a:8b:9c:90:f8:59:24:13:0d:
06:0c:c8:31:61:fd:72:7a:57:04:1a:01:f8:7f:60:45:92:77:
00:9c:f3:9b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM3MzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNDN0JGRjlBNzU0MkFF
NEMxNUQ5RUQ2M0ZCNzI3N0NBMDNEQURGNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUw/J7+83Wv7q9DczDbvVRRtOvqNi6yCX37rWRgyTNFxbVqjaF
ehBtL3/Ml5nnoaprHKV8ho8ha8PA1Kz3UjIYv/XCz/lDtNX+FXDPmEDNLZDEMSmX
STMVITwK16d44iWTSYTVOfpNLEIte29Zw4lSIg8BkFPrS6hKFLF6qjyIBGzjePfs
IjYQJzT8QR3mhDURFAByWabcUQZbE2HVOdekGOWfNmV+9lhVtJTG53pvCpyNnvh9
7BjfXt0/Kj9FP6xuU3zPAztm28KKyt/Rqe/ZKwOuM8Xm1OlihCDGMPKjmfV600gb
6DL2VNAVzpTE3adapFLGJjJkAYBAkGiP+fDVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPHv/mnVCrkwV2e1j+3J3ygPa32QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BIdl9tblZDcmt3VjJlMWot
M0ozeWdQYTMyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
OnAwDQYJKoZIhvcNAQELBQADggEBAHJWqJClzNpsmY0L38b5/a9w9tsLGuxjqJJL
NwN2HkC0yDcAXvtyspeI+cv9xHwdwLqNtEDeMrJD8UNTVL1rBR4hAVkOXCcptAlz
sI62pKEkguu/fCO69R29i/e0HNYW9PggqSlXfH2L3TB/Qc70gzZ/LYNm4ZRoTENx
l7kVsUBjRzcjP4CUdqMeCF+62BXZ/XU/WNYWP5Q2k/kO1ejQsmCY73fulcc69J79
XgNozcivBEO9BnY14ImBCGd44IzAQcoGsx+sCr+Fm/olUbSgPNA4Qd9z4tYuit11
2DKyzeUjAmqLnJD4WSQTDQYMyDFh/XJ6VwQaAfh/YEWSdwCc85s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org