Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TCl81QlAFBhTI7UD5M0WvfSQLNI.roa
File: TCl81QlAFBhTI7UD5M0WvfSQLNI.roa (raw, json)
Hash identifier: BqEz/5g56HVTFdGGyYdChcV5GqD0Tngdxndbdv6pQ5Y=
Subject key identifier: 4C:29:7C:D5:09:40:14:18:53:23:B5:03:E4:CD:16:BD:F4:90:2C:D2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10E9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TCl81QlAFBhTI7UD5M0WvfSQLNI.roa
Signing time: Sun 07 Feb 2021 12:49:40 +0000
ROA not before: Sun 07 Feb 2021 12:49:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 122.254.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4329 (0x10e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4C297CD5094014185323B503E4CD16BDF4902CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:7f:ae:28:14:f3:19:82:28:cc:22:91:12:
b3:ff:75:4b:f3:e8:2e:38:c7:63:e3:95:9a:d0:65:
5c:61:4a:82:ea:04:d1:fe:42:4a:a9:a4:cf:24:43:
7e:37:40:df:96:5c:ec:4a:f0:88:02:2b:f0:b8:15:
17:e8:4c:aa:d4:a0:0d:f9:62:da:1c:fb:4c:71:06:
f5:9b:09:d3:06:bb:cb:5e:6e:b0:dd:c7:2b:ab:e9:
61:a1:dc:64:64:ce:39:9a:d2:92:03:2c:de:a0:b8:
73:8e:7c:f1:bd:04:e8:fb:5b:f4:5a:20:ea:2a:3d:
e8:55:f2:79:d1:ea:ac:57:ad:32:a3:6d:d8:70:a8:
6d:c5:9b:2e:2d:4d:17:81:2a:df:a7:de:8f:d2:53:
d2:87:9c:59:3f:64:ed:7f:8c:3c:38:a8:f1:d0:cd:
76:6a:58:00:83:ac:de:a2:4a:e6:6a:60:13:22:ce:
0a:4b:f9:8e:a6:e6:09:99:99:3d:be:95:33:a2:e8:
ad:46:cf:f2:5e:e9:18:49:da:92:10:95:71:44:20:
11:7c:60:37:ad:51:7f:53:8b:eb:af:c8:71:2f:a6:
fe:97:42:de:75:02:e4:82:fe:2e:f9:33:a6:2e:a6:
49:b2:ce:31:70:b0:11:4f:f7:80:6b:30:0d:3d:2c:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:7C:D5:09:40:14:18:53:23:B5:03:E4:CD:16:BD:F4:90:2C:D2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TCl81QlAFBhTI7UD5M0WvfSQLNI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.0.0/18
Signature Algorithm: sha256WithRSAEncryption
49:6c:73:6c:e4:cb:70:c1:6f:bb:aa:d2:30:9c:08:b5:be:88:
15:7c:f3:5a:a1:b7:54:7e:2f:8c:fe:1f:ff:64:de:47:0c:01:
04:b0:c0:c3:12:40:69:53:7a:85:02:93:44:17:d6:f7:24:41:
94:4c:5c:fb:4c:46:fb:44:69:91:94:99:ea:0a:3f:a4:cb:fe:
fd:64:38:a5:78:45:af:fa:59:2f:f5:03:cc:9a:0e:72:9d:04:
68:ac:1f:01:18:5b:e8:d0:27:2f:f3:77:38:8c:be:5a:f6:33:
61:83:e4:1f:25:e2:48:6c:f3:0f:81:b5:c1:ff:19:23:c6:94:
61:9f:5b:29:3a:93:ad:0b:ae:9f:28:ef:4b:ca:47:15:97:67:
30:e1:8f:34:c8:f5:95:b9:e4:32:73:67:16:9b:7a:d2:c6:5f:
6b:cb:39:a9:c4:8e:5b:ac:ba:d5:29:9a:c3:53:72:57:54:6c:
2d:da:fd:e5:61:d1:03:fe:6f:54:7d:41:77:eb:65:01:f7:c9:
7b:7c:05:98:5f:8f:79:00:09:34:f3:39:3f:50:37:02:e7:df:
2a:73:cb:26:12:fc:56:0c:c1:c7:5c:b3:4b:ad:b9:ec:b8:2e:
9b:49:29:9d:62:28:47:75:75:0d:fe:2f:99:9b:21:14:03:33:
4e:65:40:94
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ5NDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRDMjk3Q0Q1MDk0MDE0
MTg1MzIzQjUwM0U0Q0QxNkJERjQ5MDJDRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5CX+uKBTzGYIozCKRErP/dUvz6C44x2PjlZrQZVxhSoLqBNH+
QkqppM8kQ343QN+WXOxK8IgCK/C4FRfoTKrUoA35Ytoc+0xxBvWbCdMGu8tebrDd
xyur6WGh3GRkzjma0pIDLN6guHOOfPG9BOj7W/RaIOoqPehV8nnR6qxXrTKjbdhw
qG3Fmy4tTReBKt+n3o/SU9KHnFk/ZO1/jDw4qPHQzXZqWACDrN6iSuZqYBMizgpL
+Y6m5gmZmT2+lTOi6K1Gz/Je6RhJ2pIQlXFEIBF8YDetUX9Ti+uvyHEvpv6XQt51
AuSC/i75M6YupkmyzjFwsBFP94BrMA09LAShAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTCl81QlAFBhTI7UD5M0WvfSQLNIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1RDbDgxUWxBRkJoVEk3VUQ1
TTBXdmZTUUxOSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6
/gAwDQYJKoZIhvcNAQELBQADggEBAElsc2zky3DBb7uq0jCcCLW+iBV881qht1R+
L4z+H/9k3kcMAQSwwMMSQGlTeoUCk0QX1vckQZRMXPtMRvtEaZGUmeoKP6TL/v1k
OKV4Ra/6WS/1A8yaDnKdBGisHwEYW+jQJy/zdziMvlr2M2GD5B8l4khs8w+BtcH/
GSPGlGGfWyk6k60Lrp8o70vKRxWXZzDhjzTI9ZW55DJzZxabetLGX2vLOanEjlus
utUpmsNTcldUbC3a/eVh0QP+b1R9QXfrZQH3yXt8BZhfj3kACTTzOT9QNwLn3ypz
yyYS/FYMwcdcs0utuey4LptJKZ1iKEd1dQ3+L5mbIRQDM05lQJQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org