Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cPNrTJa4y3sW4H8EhG9Eqcikt1U.roa
File: cPNrTJa4y3sW4H8EhG9Eqcikt1U.roa (raw, json)
Hash identifier: 0SizDVUzNDBqtTSeqaeLwxnuSvxiOBgKzCNfSX9jswY=
Subject key identifier: 70:F3:6B:4C:96:B8:CB:7B:16:E0:7F:04:84:6F:44:A9:C8:A4:B7:55
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cPNrTJa4y3sW4H8EhG9Eqcikt1U.roa
Signing time: Thu 15 Sep 2022 02:36:09 +0000
ROA not before: Thu 15 Sep 2022 02:36:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=70F36B4C96B8CB7B16E07F04846F44A9C8A4B755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:a5:c0:09:9f:58:65:7e:f9:35:53:5d:77:
4b:ff:21:ff:cb:08:18:5a:bf:56:c4:84:7e:2b:33:
e6:e7:3d:37:ec:38:fc:b5:b6:a7:3c:5f:61:bd:5d:
93:86:8d:43:dd:3b:f1:bb:b0:c8:36:9a:f6:b5:21:
66:74:5e:91:e2:ca:68:d6:55:34:e6:64:e1:0d:1f:
9d:78:b0:cd:f1:0b:bf:5f:51:5f:3b:20:95:7f:6a:
4e:bc:85:ae:ac:3c:37:8d:44:06:4b:c3:da:26:87:
8e:42:3b:1e:fe:34:66:b6:38:ed:4a:93:6f:08:e4:
39:4d:d2:49:a5:0b:97:5c:4c:6d:ed:f8:04:ce:e4:
6c:18:49:71:fc:d0:00:30:09:fd:6d:51:41:58:dc:
2e:6d:48:8c:e8:66:bc:24:27:6d:97:f5:de:ff:bd:
28:71:02:eb:05:ff:b7:4d:dd:84:b8:01:e2:f0:32:
56:4c:47:4a:5e:c3:15:3c:99:4d:2b:8f:89:2b:06:
92:8b:35:eb:bf:6e:56:53:cc:c2:57:d0:14:02:a0:
59:a8:bd:73:c8:89:11:5e:f1:20:4e:1c:75:f4:2a:
c8:a3:94:20:30:db:1a:d2:88:41:07:ab:4a:73:e6:
94:48:60:28:b9:2e:74:3e:cb:56:26:5d:7d:fe:71:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F3:6B:4C:96:B8:CB:7B:16:E0:7F:04:84:6F:44:A9:C8:A4:B7:55
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cPNrTJa4y3sW4H8EhG9Eqcikt1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.88.0/22
Signature Algorithm: sha256WithRSAEncryption
61:f3:3c:65:4c:42:d1:1e:3c:60:18:62:f3:5a:4c:15:09:ca:
20:3b:66:f5:ab:35:88:71:f5:28:44:23:b8:a4:10:c5:6a:2f:
9b:31:15:3e:63:60:d1:1d:22:53:c8:11:27:61:dd:35:54:05:
6a:36:3f:91:93:62:a3:95:f7:88:7f:eb:7b:0f:43:04:cd:6b:
4e:f3:ca:b2:9f:3d:0b:8f:01:b2:87:de:99:50:a1:07:59:74:
74:43:98:d3:27:85:17:7d:36:d2:c3:24:e0:1a:15:4f:61:b3:
34:78:f7:53:3f:e0:df:93:80:97:60:fd:99:b1:d6:a7:b9:1d:
11:68:9d:93:c1:85:4e:74:f3:97:e8:94:2a:c8:a1:14:4a:a6:
76:f0:36:ce:e9:32:56:61:54:2e:d6:f6:6f:6d:56:b9:ab:3f:
52:9e:81:06:54:19:cd:0f:74:6f:bb:b8:5e:da:ab:2d:04:1a:
3d:a4:46:9f:5e:18:45:01:f7:18:77:6b:e7:f3:44:1b:da:2c:
42:b3:a5:79:84:17:08:1e:79:d2:c9:07:eb:8a:2b:1a:ab:5c:
b2:f9:2e:ad:99:3f:34:8e:f6:01:96:74:24:0c:e1:8a:36:de:
b8:56:d5:48:5c:8b:31:c7:fc:65:ce:61:83:4a:38:35:a7:bc:
f0:65:78:7d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDcwRjM2QjRDOTZCOENC
N0IxNkUwN0YwNDg0NkY0NEE5QzhBNEI3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvEqXACZ9YZX75NVNdd0v/If/LCBhav1bEhH4rM+bnPTfsOPy1
tqc8X2G9XZOGjUPdO/G7sMg2mva1IWZ0XpHiymjWVTTmZOENH514sM3xC79fUV87
IJV/ak68ha6sPDeNRAZLw9omh45COx7+NGa2OO1Kk28I5DlN0kmlC5dcTG3t+ATO
5GwYSXH80AAwCf1tUUFY3C5tSIzoZrwkJ22X9d7/vShxAusF/7dN3YS4AeLwMlZM
R0pewxU8mU0rj4krBpKLNeu/blZTzMJX0BQCoFmovXPIiRFe8SBOHHX0KsijlCAw
2xrSiEEHq0pz5pRIYCi5LnQ+y1YmXX3+cZVXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcPNrTJa4y3sW4H8EhG9Eqcikt1UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NQTnJUSmE0eTNzVzRIOEVo
RzlFcWNpa3QxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6
ZFgwDQYJKoZIhvcNAQELBQADggEBAGHzPGVMQtEePGAYYvNaTBUJyiA7ZvWrNYhx
9ShEI7ikEMVqL5sxFT5jYNEdIlPIESdh3TVUBWo2P5GTYqOV94h/63sPQwTNa07z
yrKfPQuPAbKH3plQoQdZdHRDmNMnhRd9NtLDJOAaFU9hszR491M/4N+TgJdg/Zmx
1qe5HRFonZPBhU5085folCrIoRRKpnbwNs7pMlZhVC7W9m9tVrmrP1KegQZUGc0P
dG+7uF7aqy0EGj2kRp9eGEUB9xh3a+fzRBvaLEKzpXmEFwgeedLJB+uKKxqrXLL5
Lq2ZPzSO9gGWdCQM4Yo23rhW1UhcizHH/GXOYYNKODWnvPBleH0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org