Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rjf2xPh5wB7tg__d7arX5Wthzrs.roa
File: Rjf2xPh5wB7tg__d7arX5Wthzrs.roa (raw, json)
Hash identifier: HeHf4p7JEVNk8SCChNjtuf6K+tS1dshkDHsWOI3x4Jw=
Subject key identifier: 46:37:F6:C4:F8:79:C0:1E:ED:83:FF:DD:ED:AA:D7:E5:6B:61:CE:BB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F2F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rjf2xPh5wB7tg__d7arX5Wthzrs.roa
Signing time: Sun 07 Feb 2021 12:33:11 +0000
ROA not before: Sun 07 Feb 2021 12:33:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3887 (0xf2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4637F6C4F879C01EED83FFDDEDAAD7E56B61CEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:9f:b3:18:f6:60:4b:b9:15:79:d9:18:dc:
e4:3d:dd:04:d5:7b:bc:7b:85:94:dc:9c:7e:25:cc:
84:70:b0:be:bc:41:54:e9:a4:c3:84:0c:0d:b3:e9:
ea:bd:82:48:b1:fd:35:79:4f:d1:50:7b:d8:93:7c:
76:be:4d:a5:25:a3:28:ff:b7:04:ca:55:a1:2d:7c:
b0:a0:31:a9:ef:e7:d2:a6:ab:b6:94:48:cc:2b:af:
7f:f2:b3:9a:f7:85:16:8d:30:f5:9c:2b:4d:a9:1a:
23:d5:f9:18:e0:25:53:12:b2:17:a1:5b:f8:c4:ff:
31:39:8f:99:63:58:04:f9:a9:02:55:ae:20:7b:ba:
f3:de:10:b9:14:cf:b9:f8:b3:87:21:73:37:2d:79:
1e:b4:4d:1d:1c:ff:d5:eb:aa:8e:4d:2e:26:f8:f0:
21:bf:4a:4d:c4:de:d2:a4:1b:af:41:c8:3e:e0:b1:
86:cd:9e:cf:5c:74:1d:d5:8a:a1:5c:d9:5c:bd:48:
19:8e:11:ac:f3:31:3c:33:e3:07:0c:d1:53:e4:ec:
25:89:87:cb:78:63:4a:96:3d:cf:7c:9d:b1:c6:6f:
5b:9c:ae:0a:b1:fb:33:df:20:38:d5:e4:65:e1:b8:
ed:9a:06:f8:67:b3:e4:05:3f:5f:96:f4:3b:ba:9d:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:37:F6:C4:F8:79:C0:1E:ED:83:FF:DD:ED:AA:D7:E5:6B:61:CE:BB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rjf2xPh5wB7tg__d7arX5Wthzrs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:f2:8a:95:e2:48:bb:42:12:5c:9a:ca:e9:61:a5:16:86:c3:
08:8b:17:f3:21:ca:34:2d:19:8a:8e:72:8d:f0:39:05:d8:50:
03:cd:d3:cf:5a:e8:c8:84:62:10:f3:1a:ed:0e:38:80:91:cf:
13:9d:88:ca:7f:cd:68:33:ae:21:7f:4e:96:36:b2:4c:cf:43:
78:14:58:1f:70:88:85:68:03:6e:5c:64:69:cb:41:1b:fd:9e:
a4:b9:ba:ba:9d:54:bd:b5:3c:7f:2e:72:07:cf:e6:f1:29:f7:
34:01:fc:13:a9:ac:70:25:17:17:9d:4f:cb:53:47:63:03:30:
a9:10:38:6d:ad:91:94:e3:fe:58:2b:4f:d7:32:86:f5:57:38:
95:05:d8:d6:d1:b3:ae:64:0f:f5:74:7a:e7:fb:53:6c:42:a9:
a8:fe:66:4c:00:a5:51:71:ee:6f:47:84:7d:0f:8f:21:93:87:
6d:a1:4d:7d:1c:cd:d5:2e:50:da:e4:c6:b6:88:17:dd:7a:64:
67:d1:0d:71:ec:5d:69:6f:fd:b3:bf:50:32:e7:81:50:37:ac:
46:d4:7f:fd:22:c9:c7:60:e9:d4:99:a7:67:47:c8:1d:14:81:
7e:db:fe:6e:86:90:c9:58:7d:c4:28:70:b6:63:98:10:b8:46:
b4:ea:e8:9c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMzMTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQ2MzdGNkM0Rjg3OUMw
MUVFRDgzRkZEREVEQUFEN0U1NkI2MUNFQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLdZ+zGPZgS7kVedkY3OQ93QTVe7x7hZTcnH4lzIRwsL68QVTp
pMOEDA2z6eq9gkix/TV5T9FQe9iTfHa+TaUloyj/twTKVaEtfLCgManv59Kmq7aU
SMwrr3/ys5r3hRaNMPWcK02pGiPV+RjgJVMSshehW/jE/zE5j5ljWAT5qQJVriB7
uvPeELkUz7n4s4chczcteR60TR0c/9Xrqo5NLib48CG/Sk3E3tKkG69ByD7gsYbN
ns9cdB3ViqFc2Vy9SBmOEazzMTwz4wcM0VPk7CWJh8t4Y0qWPc98nbHGb1ucrgqx
+zPfIDjV5GXhuO2aBvhns+QFP1+W9Du6nYB9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURjf2xPh5wB7tg//d7arX5WthzrswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1JqZjJ4UGg1d0I3dGdfX2Q3
YXJYNVd0aHpycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANz
pdAwDQYJKoZIhvcNAQELBQADggEBACzyipXiSLtCElyayulhpRaGwwiLF/MhyjQt
GYqOco3wOQXYUAPN089a6MiEYhDzGu0OOICRzxOdiMp/zWgzriF/TpY2skzPQ3gU
WB9wiIVoA25cZGnLQRv9nqS5urqdVL21PH8ucgfP5vEp9zQB/BOprHAlFxedT8tT
R2MDMKkQOG2tkZTj/lgrT9cyhvVXOJUF2NbRs65kD/V0euf7U2xCqaj+ZkwApVFx
7m9HhH0PjyGTh22hTX0czdUuUNrkxraIF916ZGfRDXHsXWlv/bO/UDLngVA3rEbU
f/0iycdg6dSZp2dHyB0UgX7b/m6GkMlYfcQocLZjmBC4RrTq6Jw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org