Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bbZAnvMO6Is4c9Yv-yd7Q10WfXQ.roa
File: bbZAnvMO6Is4c9Yv-yd7Q10WfXQ.roa (raw, json)
Hash identifier: vKPwnJtsMrfZpcZawrkOaFVLsIYRX8dF+8oRhOE+s+U=
Subject key identifier: 6D:B6:40:9E:F3:0E:E8:8B:38:73:D6:2F:FB:27:7B:43:5D:16:7D:74
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D69
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bbZAnvMO6Is4c9Yv-yd7Q10WfXQ.roa
Signing time: Thu 14 Jan 2021 07:50:09 +0000
ROA not before: Thu 14 Jan 2021 07:50:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.61.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3433 (0xd69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:50:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6DB6409EF30EE88B3873D62FFB277B435D167D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:f4:d8:af:89:6c:b7:85:50:6e:0c:56:b9:
fd:1d:fb:8d:d9:e5:69:52:06:09:c4:6a:a6:97:30:
2b:46:8a:0b:25:9e:47:bc:00:fd:da:7b:ec:53:5d:
d3:eb:69:4e:20:c0:b1:e1:a6:1a:3a:cd:d9:5a:67:
83:c9:e3:c7:96:f2:10:3e:f6:f0:30:12:f5:28:cf:
e2:9c:6c:01:09:47:ed:73:ef:99:3b:64:44:77:b2:
99:60:af:40:c9:04:8e:09:d6:40:23:35:6e:c7:5f:
49:5d:df:dd:40:8c:01:a4:9a:a3:8b:ad:ae:f1:54:
be:fc:93:eb:8a:bb:7b:a9:44:29:28:a8:a7:e0:ae:
86:a2:be:bc:99:0d:ad:5d:a6:7f:66:3e:24:75:57:
eb:85:1e:a2:8f:5a:0b:bf:fa:d4:ca:36:25:be:66:
e0:a7:54:f6:2a:f2:a5:a0:bd:f5:17:5e:53:f2:e3:
4f:3b:58:5b:ab:0b:ab:b2:59:a8:0a:4c:c7:f9:7b:
3c:9d:44:3f:f3:65:3e:2c:b0:a4:b6:0f:f1:20:86:
ea:25:1b:99:ad:42:48:52:ed:97:b2:8a:97:69:df:
68:21:ca:6f:b1:0f:10:a8:58:50:3b:57:14:d1:4b:
c8:cf:24:f3:26:76:f0:89:94:87:c5:77:b5:d2:2d:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B6:40:9E:F3:0E:E8:8B:38:73:D6:2F:FB:27:7B:43:5D:16:7D:74
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bbZAnvMO6Is4c9Yv-yd7Q10WfXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.216.0/22
Signature Algorithm: sha256WithRSAEncryption
81:cb:64:eb:5e:46:d4:e4:f1:f8:97:4d:13:19:70:9f:ee:67:
56:57:00:c6:83:11:ff:76:1a:7d:be:b1:ea:d2:4b:2a:8a:9e:
23:62:b6:2c:d5:5b:3a:36:12:82:88:6b:b6:da:70:13:53:aa:
bf:38:22:a1:ac:67:4e:53:c9:1c:3d:b6:c5:2a:45:07:d8:5a:
09:1e:1d:5f:4f:c1:fb:b5:d2:54:97:13:19:51:44:d6:b1:a5:
18:95:02:84:16:5e:c5:57:c5:8b:a0:d6:22:c4:fd:63:47:f3:
fd:54:07:c8:6d:75:f5:d2:6f:17:ec:78:05:20:8c:42:f8:a3:
0f:13:b1:db:66:d8:99:48:1c:8e:fd:83:c6:35:1f:73:74:d0:
d1:ad:d6:8a:a1:bb:8d:6f:e0:22:3e:22:a9:6a:90:74:20:90:
39:5f:f4:58:85:22:21:10:ff:74:2b:d6:25:88:43:af:c4:72:
01:c7:cb:7f:52:47:c1:a1:ca:4a:a6:1f:6c:64:5e:44:76:a2:
26:5a:09:94:77:f4:b6:ce:46:74:69:16:6b:5e:1a:37:a4:cc:
13:88:de:16:0e:31:d8:19:63:98:7b:2e:ec:64:18:c2:98:9c:
15:39:f7:c4:70:34:96:82:f2:c2:b2:86:bc:d3:a0:0f:b7:31:
05:5a:5b:13
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAxMTQw
NzUwMDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZEQjY0MDlFRjMwRUU4
OEIzODczRDYyRkZCMjc3QjQzNUQxNjdENzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDn+fTYr4lst4VQbgxWuf0d+43Z5WlSBgnEaqaXMCtGigslnke8
AP3ae+xTXdPraU4gwLHhpho6zdlaZ4PJ48eW8hA+9vAwEvUoz+KcbAEJR+1z75k7
ZER3splgr0DJBI4J1kAjNW7HX0ld391AjAGkmqOLra7xVL78k+uKu3upRCkoqKfg
roaivryZDa1dpn9mPiR1V+uFHqKPWgu/+tTKNiW+ZuCnVPYq8qWgvfUXXlPy4087
WFurC6uyWagKTMf5ezydRD/zZT4ssKS2D/EghuolG5mtQkhS7Zeyipdp32ghym+x
DxCoWFA7VxTRS8jPJPMmdvCJlIfFd7XSLTxPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbbZAnvMO6Is4c9Yv+yd7Q10WfXQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2JiWkFudk1PNklzNGM5WXYt
eWQ3UTEwV2ZYUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdgwDQYJKoZIhvcNAQELBQADggEBAIHLZOteRtTk8fiXTRMZcJ/uZ1ZXAMaDEf92
Gn2+serSSyqKniNitizVWzo2EoKIa7bacBNTqr84IqGsZ05TyRw9tsUqRQfYWgke
HV9Pwfu10lSXExlRRNaxpRiVAoQWXsVXxYug1iLE/WNH8/1UB8htdfXSbxfseAUg
jEL4ow8Tsdtm2JlIHI79g8Y1H3N00NGt1oqhu41v4CI+IqlqkHQgkDlf9FiFIiEQ
/3Qr1iWIQ6/EcgHHy39SR8GhykqmH2xkXkR2oiZaCZR39LbORnRpFmteGjekzBOI
3hYOMdgZY5h7LuxkGMKYnBU598RwNJaC8sKyhrzToA+3MQVaWxM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org