Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j6K-Hl-dXoTCk3js9g75rRCc3R4.roa
File: j6K-Hl-dXoTCk3js9g75rRCc3R4.roa (raw, json)
Hash identifier: MJ8P8aQn5f4ip4AgKEh0mNUNBz8Xyf+b0fh8kLQLmG0=
Subject key identifier: 8F:A2:BE:1E:5F:9D:5E:84:C2:93:78:EC:F6:0E:F9:AD:10:9C:DD:1E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1226
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j6K-Hl-dXoTCk3js9g75rRCc3R4.roa
Signing time: Wed 29 Sep 2021 02:54:14 +0000
ROA not before: Wed 29 Sep 2021 02:54:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 123.0.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4646 (0x1226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8FA2BE1E5F9D5E84C29378ECF60EF9AD109CDD1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:e6:1f:e1:7f:fa:1e:3e:f3:56:c1:97:20:
87:f3:23:24:3f:a0:12:38:8a:36:4a:08:5c:7c:a5:
43:5d:36:0c:d1:5d:30:82:85:17:27:2c:d8:5d:0d:
7a:3c:f2:7b:e6:c2:93:71:94:57:c3:fb:dd:a6:c9:
34:6a:f7:af:c1:a0:b3:dc:e1:36:13:74:6f:70:dc:
46:1a:f5:5c:b9:74:ce:f4:66:c1:49:1a:3a:de:1c:
c3:21:17:eb:bc:95:3c:ce:59:3f:28:e2:3b:ca:4b:
ed:41:9f:29:93:73:83:66:c8:c0:78:9e:67:5c:3f:
b0:a5:8b:52:e1:26:e2:7b:06:9c:c6:5b:87:60:34:
78:13:62:72:a3:97:d6:fb:7b:d4:55:6f:8d:a9:2b:
22:2c:de:fd:7d:94:f9:82:86:52:38:98:2f:e9:af:
44:f7:4e:20:78:2a:5c:ca:45:57:47:b9:23:3c:85:
8b:df:59:11:5a:91:a4:45:e9:7e:df:4a:86:f2:e0:
f6:fe:39:fc:27:e8:97:f0:cd:0a:2d:7c:d2:f1:1a:
e6:5c:bd:ba:e2:bd:e1:4d:4f:15:42:d3:b5:9e:ec:
57:38:af:b0:b4:94:e6:56:55:09:fe:a9:98:a6:5e:
69:fe:5f:17:12:b7:35:09:08:9d:ca:12:3f:d7:54:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:BE:1E:5F:9D:5E:84:C2:93:78:EC:F6:0E:F9:AD:10:9C:DD:1E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j6K-Hl-dXoTCk3js9g75rRCc3R4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:ae:82:a8:74:07:ee:1a:66:fb:bd:d8:8b:36:a5:76:83:33:
2c:3a:cb:7c:99:cc:58:b0:43:63:e0:42:4c:ac:87:7b:d7:57:
3a:9a:c9:4a:db:47:c5:05:8a:ae:67:f9:17:1c:27:e6:ee:92:
32:8d:b2:6f:d5:13:72:c2:a8:6f:e7:4c:bf:6b:65:85:6c:96:
2e:f6:1b:3a:bb:75:c9:f2:d0:d2:f3:df:e7:01:25:70:1d:62:
44:56:ee:af:dc:08:49:83:ed:f6:4a:d3:d0:78:7f:a9:a7:fa:
c9:77:7e:1f:41:ae:34:07:17:80:e0:31:d5:fa:bc:1e:22:c7:
bb:0e:0a:6c:c2:c2:45:f8:bb:80:0c:02:82:bd:c1:9b:9a:b1:
51:79:f7:e0:5d:b9:80:de:26:98:c8:8c:cc:5c:f8:fc:31:3b:
a2:ea:74:67:d1:15:63:d6:a2:2f:98:34:82:77:8b:56:bf:20:
2f:9d:52:34:d1:77:b3:3f:e7:ed:21:dd:db:a7:5c:12:7c:31:
c2:de:10:62:d6:8f:02:ec:63:9c:d5:eb:0b:68:09:b5:85:32:
69:78:d7:3f:73:3e:ba:c0:b9:56:8d:47:fe:e5:64:25:03:40:
09:3f:67:00:92:08:f3:d7:fd:7d:73:b9:68:1a:3e:49:da:5c:
69:26:08:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhGQTJCRTFFNUY5RDVF
ODRDMjkzNzhFQ0Y2MEVGOUFEMTA5Q0REMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVpOYf4X/6Hj7zVsGXIIfzIyQ/oBI4ijZKCFx8pUNdNgzRXTCC
hRcnLNhdDXo88nvmwpNxlFfD+92myTRq96/BoLPc4TYTdG9w3EYa9Vy5dM70ZsFJ
GjreHMMhF+u8lTzOWT8o4jvKS+1BnymTc4NmyMB4nmdcP7Cli1LhJuJ7BpzGW4dg
NHgTYnKjl9b7e9RVb42pKyIs3v19lPmChlI4mC/pr0T3TiB4KlzKRVdHuSM8hYvf
WRFakaRF6X7fSoby4Pb+Ofwn6JfwzQotfNLxGuZcvbriveFNTxVC07We7Fc4r7C0
lOZWVQn+qZimXmn+XxcStzUJCJ3KEj/XVPFxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUj6K+Hl+dXoTCk3js9g75rRCc3R4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2o2Sy1IbC1kWG9UQ2szanM5
Zzc1clJDYzNSNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
ADAwDQYJKoZIhvcNAQELBQADggEBAFqugqh0B+4aZvu92Is2pXaDMyw6y3yZzFiw
Q2PgQkysh3vXVzqayUrbR8UFiq5n+RccJ+bukjKNsm/VE3LCqG/nTL9rZYVsli72
Gzq7dcny0NLz3+cBJXAdYkRW7q/cCEmD7fZK09B4f6mn+sl3fh9BrjQHF4DgMdX6
vB4ix7sOCmzCwkX4u4AMAoK9wZuasVF59+BduYDeJpjIjMxc+PwxO6LqdGfRFWPW
oi+YNIJ3i1a/IC+dUjTRd7M/5+0h3dunXBJ8McLeEGLWjwLsY5zV6wtoCbWFMml4
1z9zPrrAuVaNR/7lZCUDQAk/ZwCSCPPX/X1zuWgaPknaXGkmCKc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org