Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fSoWMNDchwU_2dl9qmmvBkZGJMM.roa
File: fSoWMNDchwU_2dl9qmmvBkZGJMM.roa (raw, json)
Hash identifier: elbzfczC80rp+UC22EbMw2uuHeWPZl9qoQwSW5uVsDs=
Subject key identifier: 7D:2A:16:30:D0:DC:87:05:3F:D9:D9:7D:AA:69:AF:06:46:46:24:C3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B34
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fSoWMNDchwU_2dl9qmmvBkZGJMM.roa
Signing time: Tue 29 Sep 2020 10:08:08 +0000
ROA not before: Tue 29 Sep 2020 10:08:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.64.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:08 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7D2A1630D0DC87053FD9D97DAA69AF06464624C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:3d:1b:81:31:77:12:de:c9:66:3a:35:fd:
85:e7:fd:05:65:02:5c:91:46:47:0f:2b:03:31:8a:
56:85:c0:79:80:66:a3:c1:25:c0:22:5b:41:49:33:
81:bd:45:84:58:d1:05:cd:c3:60:79:66:06:0e:bb:
e7:fd:74:7d:b2:ce:fc:42:a3:31:cf:b7:d9:fb:5a:
fe:d5:58:11:12:66:f7:3c:76:99:d3:b0:20:9c:85:
88:90:77:9d:e5:de:3b:31:97:4e:5f:9e:a1:fd:07:
b7:48:c8:64:1b:6e:b0:11:2f:6d:67:f6:4b:f4:bf:
d6:4e:2e:8a:e9:ee:a4:6b:e1:62:6d:ea:6f:9a:a9:
05:52:94:43:0a:91:6f:c1:5a:5e:53:23:c9:ff:46:
43:6c:c4:50:fb:13:ce:8c:53:8e:72:83:de:fb:16:
f0:2b:ef:cb:6f:1a:e5:10:6b:22:aa:dd:ab:0a:1f:
df:62:53:a1:93:9b:a6:ac:89:a2:51:0d:be:50:0b:
34:70:ab:b9:00:38:2c:00:dd:4e:d4:d9:69:c6:0d:
3f:3a:3f:eb:c3:95:c0:16:86:b9:0c:d4:52:a2:31:
ec:66:20:37:f5:9c:07:51:80:37:c2:bf:53:60:5f:
f2:82:17:af:e8:17:73:40:7c:69:31:cb:a3:24:a4:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2A:16:30:D0:DC:87:05:3F:D9:D9:7D:AA:69:AF:06:46:46:24:C3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fSoWMNDchwU_2dl9qmmvBkZGJMM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:99:92:32:22:7e:5d:85:29:b6:12:06:6a:38:61:c9:f0:ba:
fd:ef:10:81:9a:6d:38:d7:2f:a6:eb:e4:58:68:19:f0:3e:7f:
ca:50:d6:25:18:11:42:5e:ca:3f:55:1b:31:9e:03:80:f6:1f:
a2:95:5c:6b:2f:7a:fb:9d:c6:56:83:4f:20:de:33:70:84:ee:
a1:a8:08:9e:f3:96:52:1b:a8:25:14:1b:83:57:55:b7:b7:09:
21:91:98:33:6e:f3:da:dd:8a:e7:19:e9:21:8a:c3:2b:2b:ac:
12:d2:69:29:14:e1:a7:7e:3a:7b:8d:85:f4:e3:a6:e0:f3:40:
07:bd:3a:37:95:10:ed:c3:e8:00:58:86:61:9a:ad:29:57:de:
a7:6d:79:34:b2:02:88:3a:7b:3e:16:61:39:d6:9a:00:bd:6b:
c9:7f:50:64:68:2d:d6:31:4c:57:39:85:4c:03:8c:99:ed:0c:
c4:46:25:cd:48:38:ff:83:b9:b7:c9:29:59:ad:e6:d8:48:c8:
57:a3:41:ec:50:18:fe:59:85:41:1a:e8:47:d6:45:96:09:ef:
6e:60:3a:78:ad:e3:f4:6f:3f:d1:2a:1b:5e:a9:08:1c:6b:9b:
b0:e1:92:a7:9b:4e:61:3e:92:db:54:51:dd:ee:32:f7:09:89:
c5:2b:88:95
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdEMkExNjMwRDBEQzg3
MDUzRkQ5RDk3REFBNjlBRjA2NDY0NjI0QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXUD0bgTF3Et7JZjo1/YXn/QVlAlyRRkcPKwMxilaFwHmAZqPB
JcAiW0FJM4G9RYRY0QXNw2B5ZgYOu+f9dH2yzvxCozHPt9n7Wv7VWBESZvc8dpnT
sCCchYiQd53l3jsxl05fnqH9B7dIyGQbbrARL21n9kv0v9ZOLorp7qRr4WJt6m+a
qQVSlEMKkW/BWl5TI8n/RkNsxFD7E86MU45yg977FvAr78tvGuUQayKq3asKH99i
U6GTm6asiaJRDb5QCzRwq7kAOCwA3U7U2WnGDT86P+vDlcAWhrkM1FKiMexmIDf1
nAdRgDfCv1NgX/KCF6/oF3NAfGkxy6MkpGrjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfSoWMNDchwU/2dl9qmmvBkZGJMMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZTb1dNTkRjaHdVXzJkbDlx
bW12QmtaR0pNTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QBwwDQYJKoZIhvcNAQELBQADggEBAJqZkjIifl2FKbYSBmo4Ycnwuv3vEIGabTjX
L6br5FhoGfA+f8pQ1iUYEUJeyj9VGzGeA4D2H6KVXGsvevudxlaDTyDeM3CE7qGo
CJ7zllIbqCUUG4NXVbe3CSGRmDNu89rdiucZ6SGKwysrrBLSaSkU4ad+OnuNhfTj
puDzQAe9OjeVEO3D6ABYhmGarSlX3qdteTSyAog6ez4WYTnWmgC9a8l/UGRoLdYx
TFc5hUwDjJntDMRGJc1IOP+DubfJKVmt5thIyFejQexQGP5ZhUEa6EfWRZYJ725g
Onit4/RvP9EqG16pCBxrm7DhkqebTmE+kttUUd3uMvcJicUriJU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org