Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eUvd0ohkH5dconquK-rr-CYCRC8.roa
File: eUvd0ohkH5dconquK-rr-CYCRC8.roa (raw, json)
Hash identifier: TB3j9ANHlGAzk3p6Hm/NKdLOota1lLJVrZIlygezuyg=
Subject key identifier: 79:4B:DD:D2:88:64:1F:97:5C:A2:7A:AE:2B:EA:EB:F8:26:02:44:2F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FF7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eUvd0ohkH5dconquK-rr-CYCRC8.roa
Signing time: Sun 07 Feb 2021 12:36:52 +0000
ROA not before: Sun 07 Feb 2021 12:36:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4087 (0xff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=794BDDD288641F975CA27AAE2BEAEBF82602442F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:cb:dd:53:eb:b8:28:15:2d:62:02:5f:23:
df:07:1e:09:97:01:82:05:00:e3:54:29:0d:db:a0:
2e:7c:35:f3:41:f2:87:a3:5f:12:ed:10:91:9c:98:
81:60:da:39:b1:32:44:2f:c3:28:27:f3:6f:72:9a:
77:ae:97:e5:f7:e2:31:80:e2:5c:b5:63:4c:34:90:
b9:78:10:f5:80:4d:40:d4:40:b2:c9:31:91:54:91:
88:03:5e:24:73:2c:2f:c7:e6:b4:d2:20:a3:ed:b3:
68:36:06:ff:9a:54:ae:a5:69:fe:b4:02:7b:e8:c6:
1e:c4:20:89:cd:cf:d7:01:eb:19:78:b3:24:91:51:
b0:84:28:c4:ac:bd:f7:d2:09:32:92:8f:5e:5a:cf:
57:2b:51:f9:02:a2:b0:90:c4:a3:01:6a:0d:0b:26:
2d:9f:fd:3e:24:0a:b7:26:c4:43:d2:20:b1:e3:54:
2a:90:22:5c:e3:8b:c1:29:01:94:3c:e4:95:01:e6:
4b:0d:b8:46:d4:b8:48:38:f8:73:d0:0c:f0:c1:21:
a0:43:f9:22:c5:d1:0c:02:3f:cf:c8:8d:c7:74:db:
af:6e:d9:c1:ef:90:38:c5:c2:c7:3c:40:76:2e:3e:
5e:eb:6a:7f:bc:54:ef:70:c2:b1:cd:4a:ec:d1:7b:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4B:DD:D2:88:64:1F:97:5C:A2:7A:AE:2B:EA:EB:F8:26:02:44:2F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eUvd0ohkH5dconquK-rr-CYCRC8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.216.0/21
Signature Algorithm: sha256WithRSAEncryption
51:7a:d4:00:4b:ab:6b:23:dc:eb:16:58:f4:02:4c:3e:c0:ca:
d6:fe:c3:ef:4b:fc:60:b1:2d:4b:09:f8:a0:54:7f:6b:00:01:
e9:4c:4b:b7:6a:ef:f8:e9:05:6c:e9:2a:24:1c:88:7e:2e:ae:
7b:c1:48:bc:cd:f0:73:5b:da:82:7a:8a:dd:f0:66:fa:57:e7:
ee:6d:91:58:1a:c7:0e:5f:8d:0d:67:7c:cc:d5:5e:6f:76:19:
fe:d2:8b:ce:e2:6c:70:07:15:5f:c9:9f:80:45:cc:a2:d0:07:
5e:fa:4a:5b:22:fa:13:02:cd:81:02:c4:2b:ff:29:1c:45:aa:
16:d1:3d:23:e5:f5:66:06:32:88:1a:57:73:47:e7:9a:51:70:
04:9a:27:8a:2b:50:cc:01:2c:d2:c1:e0:b3:51:46:d8:48:ec:
34:a6:9c:16:94:07:5a:00:80:14:7f:ef:ed:c2:cc:3c:38:46:
36:e3:4a:7c:78:98:78:c8:7e:5b:5b:11:42:57:68:58:9a:2e:
39:69:f1:49:18:9f:1d:60:e7:9c:a0:c0:38:19:ad:0a:1e:5a:
fe:0c:ff:40:94:a9:32:2c:44:34:11:4c:2d:a5:1b:12:ff:fd:
52:b3:fa:16:1c:b1:de:43:a9:13:ff:76:67:70:e6:9b:b0:5d:
91:71:9d:15
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM2NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc5NEJEREQyODg2NDFG
OTc1Q0EyN0FBRTJCRUFFQkY4MjYwMjQ0MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRNcvdU+u4KBUtYgJfI98HHgmXAYIFAONUKQ3boC58NfNB8oej
XxLtEJGcmIFg2jmxMkQvwygn829ymneul+X34jGA4ly1Y0w0kLl4EPWATUDUQLLJ
MZFUkYgDXiRzLC/H5rTSIKPts2g2Bv+aVK6laf60Anvoxh7EIInNz9cB6xl4sySR
UbCEKMSsvffSCTKSj15az1crUfkCorCQxKMBag0LJi2f/T4kCrcmxEPSILHjVCqQ
Ilzji8EpAZQ85JUB5ksNuEbUuEg4+HPQDPDBIaBD+SLF0QwCP8/Ijcd0269u2cHv
kDjFwsc8QHYuPl7ran+8VO9wwrHNSuzRe/FlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeUvd0ohkH5dconquK+rr+CYCRC8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2VVdmQwb2hrSDVkY29ucXVL
LXJyLUNZQ1JDOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n9gwDQYJKoZIhvcNAQELBQADggEBAFF61ABLq2sj3OsWWPQCTD7Aytb+w+9L/GCx
LUsJ+KBUf2sAAelMS7dq7/jpBWzpKiQciH4urnvBSLzN8HNb2oJ6it3wZvpX5+5t
kVgaxw5fjQ1nfMzVXm92Gf7Si87ibHAHFV/Jn4BFzKLQB176Slsi+hMCzYECxCv/
KRxFqhbRPSPl9WYGMogaV3NH55pRcASaJ4orUMwBLNLB4LNRRthI7DSmnBaUB1oA
gBR/7+3CzDw4RjbjSnx4mHjIfltbEUJXaFiaLjlp8UkYnx1g55ygwDgZrQoeWv4M
/0CUqTIsRDQRTC2lGxL//VKz+hYcsd5DqRP/dmdw5puwXZFxnRU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org