Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/drmRwdmaremu6f0EAPmI9UEuZH4.roa
File: drmRwdmaremu6f0EAPmI9UEuZH4.roa (raw, json)
Hash identifier: W1KSsZZgoLVvv9Xo+FjR1hoTVX/OMu9JkTcoRIzNOiI=
Subject key identifier: 76:B9:91:C1:D9:9A:AD:E9:AE:E9:FD:04:00:F9:88:F5:41:2E:64:7E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12B9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/drmRwdmaremu6f0EAPmI9UEuZH4.roa
Signing time: Wed 29 Sep 2021 02:54:53 +0000
ROA not before: Wed 29 Sep 2021 02:54:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.159.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4793 (0x12b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=76B991C1D99AADE9AEE9FD0400F988F5412E647E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:bc:23:ba:09:50:18:03:21:be:45:33:d5:
32:65:05:d7:98:6c:52:43:ac:85:fd:22:fa:7b:0e:
b2:55:9d:ec:d2:26:c6:4d:35:54:ff:e1:87:2b:6d:
d5:45:9b:47:24:ba:37:a8:8e:27:30:b2:dc:a9:05:
35:db:81:a4:6a:fc:f5:55:47:24:51:ea:dd:c8:06:
9b:c6:50:e7:46:7d:e7:40:de:b0:74:59:e8:dc:14:
97:e1:c4:fa:11:24:42:70:77:bf:2e:6c:bd:19:8b:
ea:a3:b0:6d:47:56:9c:fb:b9:b6:ea:b4:88:f9:e3:
91:66:06:6f:45:9d:24:a5:5f:39:17:45:87:4f:fb:
0b:43:f9:95:e3:34:97:8a:4b:c7:65:dc:c7:b6:77:
69:32:f6:fa:87:15:6e:90:d6:48:52:b9:e9:ef:28:
b5:87:98:c5:6e:9f:f4:5b:81:50:dc:32:7b:40:27:
0f:55:a4:d1:b8:dd:6e:33:57:da:48:7b:1d:9b:53:
f8:b6:20:61:37:bd:b4:f8:06:14:98:b3:f6:39:d3:
46:04:2b:6e:3f:3e:28:a2:45:7d:0f:91:e6:93:4f:
ca:e1:8f:94:db:20:d3:f9:30:1f:c1:1d:ad:eb:ba:
c5:c3:0b:01:84:17:95:48:45:be:8f:33:c4:2e:a6:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B9:91:C1:D9:9A:AD:E9:AE:E9:FD:04:00:F9:88:F5:41:2E:64:7E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/drmRwdmaremu6f0EAPmI9UEuZH4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.208.0/22
Signature Algorithm: sha256WithRSAEncryption
00:e3:18:d8:61:98:2e:aa:23:50:d6:4a:4c:55:f2:e9:1e:d3:
82:f6:61:d6:3e:11:dd:8e:6f:f5:e2:ff:ad:07:59:02:08:41:
7a:58:9a:bf:54:c3:b4:b0:8c:86:79:ad:17:32:34:49:30:54:
e4:66:8b:04:a1:f6:59:c6:6a:59:30:03:5b:99:25:3d:d8:c3:
c8:67:4f:1e:6e:3b:38:7a:05:24:f2:f9:16:55:c0:86:80:e0:
c6:e6:78:69:48:1c:c7:b9:70:14:f7:f9:0d:33:4a:fe:13:42:
e4:05:0c:65:f6:64:a2:a0:fa:70:0e:b6:ec:f7:dc:16:93:38:
06:bd:ef:55:10:85:46:5c:cc:9c:1b:cc:65:3a:61:3a:04:85:
fe:06:f1:cc:e3:6c:8c:9e:97:b5:47:b6:86:22:a7:f7:a0:7b:
0e:63:7c:e2:a8:d3:c0:0b:e1:79:d1:95:37:02:ae:e3:e1:b5:
05:9c:58:07:84:aa:d6:4a:4d:e6:c7:08:19:16:e9:4d:86:d2:
61:2b:7f:1c:b9:f7:07:60:85:23:b1:ac:4c:63:fd:8a:1f:cf:
37:ac:54:c1:e3:2e:c5:97:1a:9e:90:11:5f:ca:3e:41:2c:7b:
93:00:7b:43:7d:81:63:d2:c7:62:26:c5:37:ad:30:03:16:10:
15:59:e2:c5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICErkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc2Qjk5MUMxRDk5QUFE
RTlBRUU5RkQwNDAwRjk4OEY1NDEyRTY0N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSsLwjuglQGAMhvkUz1TJlBdeYbFJDrIX9Ivp7DrJVnezSJsZN
NVT/4YcrbdVFm0ckujeojicwstypBTXbgaRq/PVVRyRR6t3IBpvGUOdGfedA3rB0
WejcFJfhxPoRJEJwd78ubL0Zi+qjsG1HVpz7ubbqtIj545FmBm9FnSSlXzkXRYdP
+wtD+ZXjNJeKS8dl3Me2d2ky9vqHFW6Q1khSuenvKLWHmMVun/RbgVDcMntAJw9V
pNG43W4zV9pIex2bU/i2IGE3vbT4BhSYs/Y500YEK24/PiiiRX0PkeaTT8rhj5Tb
INP5MB/BHa3rusXDCwGEF5VIRb6PM8QupnIdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdrmRwdmaremu6f0EAPmI9UEuZH4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2RybVJ3ZG1hcmVtdTZmMEVB
UG1JOVVFdVpINC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n9AwDQYJKoZIhvcNAQELBQADggEBAADjGNhhmC6qI1DWSkxV8uke04L2YdY+Ed2O
b/Xi/60HWQIIQXpYmr9Uw7SwjIZ5rRcyNEkwVORmiwSh9lnGalkwA1uZJT3Yw8hn
Tx5uOzh6BSTy+RZVwIaA4MbmeGlIHMe5cBT3+Q0zSv4TQuQFDGX2ZKKg+nAOtuz3
3BaTOAa971UQhUZczJwbzGU6YToEhf4G8czjbIyel7VHtoYip/egew5jfOKo08AL
4XnRlTcCruPhtQWcWAeEqtZKTebHCBkW6U2G0mErfxy59wdghSOxrExj/Yofzzes
VMHjLsWXGp6QEV/KPkEse5MAe0N9gWPSx2ImxTetMAMWEBVZ4sU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org