Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zr6swTDr5gbwxUdCaGuQhpfhoFk.roa
File: Zr6swTDr5gbwxUdCaGuQhpfhoFk.roa (raw, json)
Hash identifier: HR5GHhDFiOmZW93BFo+MC+UPWh+OKyqMq/Ce2uR2y4Q=
Subject key identifier: 66:BE:AC:C1:30:EB:E6:06:F0:C5:47:42:68:6B:90:86:97:E1:A0:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F03
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zr6swTDr5gbwxUdCaGuQhpfhoFk.roa
Signing time: Sun 07 Feb 2021 12:32:34 +0000
ROA not before: Sun 07 Feb 2021 12:32:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3843 (0xf03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=66BEACC130EBE606F0C54742686B908697E1A059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:22:9b:e6:90:5e:5d:47:50:0c:c0:98:9a:
28:9f:16:48:b3:b1:7a:d4:73:e5:d2:be:10:64:42:
00:95:05:e6:23:45:a1:bc:23:ac:2e:70:b9:67:d7:
57:6e:d8:b4:98:22:59:b6:c2:15:a7:9e:d0:f4:0d:
39:39:4d:e0:d2:ab:bd:e1:87:93:ed:7a:6b:a1:7e:
4d:65:04:8c:b7:33:b7:e8:7c:0a:1e:c1:ae:38:5e:
a5:71:75:0d:37:7f:cc:40:61:67:86:69:85:16:57:
76:92:b6:d3:e5:34:b2:19:e0:64:26:1c:f6:8b:36:
55:5c:76:92:26:2a:e0:d7:2e:0d:fa:69:57:68:c1:
d7:ff:0e:04:c9:34:40:e6:62:f6:d4:12:0d:3f:63:
56:dc:63:a8:46:34:ec:37:26:6e:95:06:64:b0:ee:
74:e2:c2:df:9f:27:71:94:e3:9a:ce:44:81:04:9d:
a0:ea:fb:a1:15:12:71:71:d8:8c:47:83:54:b2:e3:
70:83:6f:12:82:fb:80:be:e2:29:53:dd:99:37:66:
b1:42:3b:60:f4:86:be:6d:a0:c9:fe:af:82:a9:79:
a9:1a:84:55:19:24:09:b9:0c:6a:79:71:c6:d3:ca:
7f:be:3f:40:bc:bb:eb:9a:13:b4:b3:a0:d4:49:3c:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:AC:C1:30:EB:E6:06:F0:C5:47:42:68:6B:90:86:97:E1:A0:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zr6swTDr5gbwxUdCaGuQhpfhoFk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.80.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:29:33:3b:e6:b2:d0:77:1e:90:49:ce:53:cb:fd:7d:20:31:
a4:78:f9:f8:9e:0e:85:cc:18:ff:c3:21:82:f6:92:77:61:dd:
76:d3:e2:1f:7c:1e:87:d7:e0:28:28:c3:3b:4d:0b:66:89:14:
15:ec:ea:03:d0:c7:8e:a0:1d:42:62:79:06:6a:87:2e:32:77:
9e:51:7b:2b:70:93:b4:09:fc:d4:e5:84:f7:0e:ff:4f:0b:0e:
17:b6:6a:9a:5b:42:32:f7:aa:e7:48:89:88:b1:85:de:d8:17:
ea:cf:eb:0d:eb:ed:9e:fe:ed:a0:96:70:83:cf:17:f9:96:2d:
f7:f0:c4:4a:05:cc:5b:86:68:41:ff:d0:c9:28:26:1f:91:4f:
53:46:d0:f7:da:74:d1:a5:ed:f9:27:53:13:22:e7:6b:cf:cf:
44:6b:a0:ac:01:21:c4:b6:99:93:74:ae:86:27:13:07:ce:a8:
c8:1d:6b:bc:39:24:f5:33:29:a1:1f:ae:0e:ba:61:fd:e7:b3:
c2:82:18:89:82:ec:1b:fd:f6:52:3e:79:47:6c:8a:72:37:db:
36:30:0e:d6:48:73:56:14:ef:62:28:ae:4a:29:8e:fa:c3:0c:
49:26:7f:b0:fa:c2:9f:28:fe:69:32:8c:d8:9c:4f:0d:d7:32:
84:67:a8:f7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMyMzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY2QkVBQ0MxMzBFQkU2
MDZGMEM1NDc0MjY4NkI5MDg2OTdFMUEwNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6aCKb5pBeXUdQDMCYmiifFkizsXrUc+XSvhBkQgCVBeYjRaG8
I6wucLln11du2LSYIlm2whWnntD0DTk5TeDSq73hh5Ptemuhfk1lBIy3M7fofAoe
wa44XqVxdQ03f8xAYWeGaYUWV3aSttPlNLIZ4GQmHPaLNlVcdpImKuDXLg36aVdo
wdf/DgTJNEDmYvbUEg0/Y1bcY6hGNOw3Jm6VBmSw7nTiwt+fJ3GU45rORIEEnaDq
+6EVEnFx2IxHg1Sy43CDbxKC+4C+4ilT3Zk3ZrFCO2D0hr5toMn+r4KpeakahFUZ
JAm5DGp5ccbTyn++P0C8u+uaE7SzoNRJPNoVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZr6swTDr5gbwxUdCaGuQhpfhoFkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1pyNnN3VERyNWdid3hVZENh
R3VRaHBmaG9Gay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nlAwDQYJKoZIhvcNAQELBQADggEBAA4pMzvmstB3HpBJzlPL/X0gMaR4+fieDoXM
GP/DIYL2kndh3XbT4h98HofX4CgowztNC2aJFBXs6gPQx46gHUJieQZqhy4yd55R
eytwk7QJ/NTlhPcO/08LDhe2appbQjL3qudIiYixhd7YF+rP6w3r7Z7+7aCWcIPP
F/mWLffwxEoFzFuGaEH/0MkoJh+RT1NG0PfadNGl7fknUxMi52vPz0RroKwBIcS2
mZN0roYnEwfOqMgda7w5JPUzKaEfrg66Yf3ns8KCGImC7Bv99lI+eUdsinI32zYw
DtZIc1YU72IorkopjvrDDEkmf7D6wp8o/mkyjNicTw3XMoRnqPc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org