Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/etYgL7TmPppnh0Vkxfet7FRRaQ4.roa
File: etYgL7TmPppnh0Vkxfet7FRRaQ4.roa (raw, json)
Hash identifier: gf2oQrrV3R2g7aT9/cAsEo6GpaZXb78TuCcHxW2k+uE=
Subject key identifier: 7A:D6:20:2F:B4:E6:3E:9A:67:87:45:64:C5:F7:AD:EC:54:51:69:0E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12D3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/etYgL7TmPppnh0Vkxfet7FRRaQ4.roa
Signing time: Wed 29 Sep 2021 02:55:02 +0000
ROA not before: Wed 29 Sep 2021 02:55:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 61.64.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4819 (0x12d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7AD6202FB4E63E9A67874564C5F7ADEC5451690E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:64:19:61:a3:92:b9:2a:21:8a:41:fa:7d:
3d:47:6c:6e:81:31:99:32:22:b8:5e:9b:13:c1:3a:
33:90:5d:d0:ec:6e:09:c5:a6:df:6d:f1:ff:c1:11:
91:2b:72:45:61:6f:ad:ea:19:36:99:77:b1:03:d4:
0b:0a:7a:f2:a8:54:e8:ff:6c:23:9c:af:e7:c8:a7:
34:39:91:7a:70:31:df:03:4c:0d:bb:8f:e6:2c:10:
66:80:12:fc:b3:db:c5:91:30:fe:9a:a8:50:8b:c9:
ae:4d:9a:83:8e:12:45:70:82:56:24:00:c7:5c:18:
d3:96:54:44:eb:47:19:fb:8f:85:f9:8e:28:43:d7:
98:db:ec:9f:3a:8b:92:dd:6c:00:f4:4e:92:8c:0c:
58:0d:8f:ae:41:dd:9b:53:1c:fb:63:fc:ec:7d:f1:
2f:12:8b:c4:d1:52:19:1a:b6:e8:5c:ba:06:f9:41:
78:17:88:4f:34:4a:0c:67:24:d2:61:02:fa:be:90:
9e:7f:b7:45:7a:51:65:3d:80:65:79:38:bf:f5:3d:
18:1c:01:0c:cc:ff:96:e7:e1:17:52:37:69:33:7c:
14:d4:d0:2d:d6:23:6a:9e:d6:4d:16:13:6b:fc:71:
30:b1:b7:9d:b6:19:74:71:7d:1e:eb:10:50:1d:0f:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:20:2F:B4:E6:3E:9A:67:87:45:64:C5:F7:AD:EC:54:51:69:0E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/etYgL7TmPppnh0Vkxfet7FRRaQ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ec:6c:a6:77:0f:12:c8:7a:8d:bb:34:f9:86:50:c3:b5:2f:
6a:4b:10:bc:8a:77:6b:29:ab:fa:c7:ef:ef:89:2b:57:55:b2:
b8:5b:0c:25:04:41:69:5a:a8:5b:32:67:da:ef:c3:73:34:e9:
30:f7:5d:14:69:2a:d5:ad:f1:94:24:cb:b7:c0:cc:ee:68:11:
db:e2:15:4e:10:52:e0:e2:24:1d:2e:c9:bd:6e:67:b8:95:eb:
51:ee:09:aa:41:87:b4:95:93:4c:95:9c:4a:fd:f2:ae:a1:37:
13:b0:09:e4:4e:60:90:53:9b:da:b6:33:65:6c:1d:d2:6c:1e:
83:75:ff:a9:95:e8:55:39:a7:e0:80:e7:3d:b1:64:af:88:0b:
2b:5a:6f:49:ae:2f:13:89:75:79:b1:aa:d6:8e:fb:4b:ee:a6:
bf:96:b4:51:7f:c6:59:0c:cb:2e:be:ab:45:f5:51:39:a5:1e:
d2:ac:3b:49:20:1b:68:17:d7:49:6d:6b:60:ca:99:ef:08:b4:
21:d4:4f:27:40:6e:4a:9c:fb:b6:1f:08:73:10:4e:1c:c0:c5:
d4:b1:ec:e5:30:61:d0:71:b1:5a:c1:89:5a:7c:45:21:41:27:
05:4b:24:96:56:b2:cc:09:45:e8:ce:64:33:27:0e:84:d3:cb:
7a:79:1b:ed
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdBRDYyMDJGQjRFNjNF
OUE2Nzg3NDU2NEM1RjdBREVDNTQ1MTY5MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTjGQZYaOSuSohikH6fT1HbG6BMZkyIrhemxPBOjOQXdDsbgnF
pt9t8f/BEZErckVhb63qGTaZd7ED1AsKevKoVOj/bCOcr+fIpzQ5kXpwMd8DTA27
j+YsEGaAEvyz28WRMP6aqFCLya5NmoOOEkVwglYkAMdcGNOWVETrRxn7j4X5jihD
15jb7J86i5LdbAD0TpKMDFgNj65B3ZtTHPtj/Ox98S8Si8TRUhkatuhcugb5QXgX
iE80SgxnJNJhAvq+kJ5/t0V6UWU9gGV5OL/1PRgcAQzM/5bn4RdSN2kzfBTU0C3W
I2qe1k0WE2v8cTCxt522GXRxfR7rEFAdD5WXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUetYgL7TmPppnh0Vkxfet7FRRaQ4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2V0WWdMN1RtUHBwbmgwVmt4
ZmV0N0ZSUmFRNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QAAwDQYJKoZIhvcNAQELBQADggEBAI3sbKZ3DxLIeo27NPmGUMO1L2pLELyKd2sp
q/rH7++JK1dVsrhbDCUEQWlaqFsyZ9rvw3M06TD3XRRpKtWt8ZQky7fAzO5oEdvi
FU4QUuDiJB0uyb1uZ7iV61HuCapBh7SVk0yVnEr98q6hNxOwCeROYJBTm9q2M2Vs
HdJsHoN1/6mV6FU5p+CA5z2xZK+ICytab0muLxOJdXmxqtaO+0vupr+WtFF/xlkM
yy6+q0X1UTmlHtKsO0kgG2gX10lta2DKme8ItCHUTydAbkqc+7YfCHMQThzAxdSx
7OUwYdBxsVrBiVp8RSFBJwVLJJZWsswJRejOZDMnDoTTy3p5G+0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org