Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lh62SzC1EWjpFMHbxW8NY-GNJJ8.roa
File: lh62SzC1EWjpFMHbxW8NY-GNJJ8.roa (raw, json)
Hash identifier: 6gMTBh5SnNkRhFX0QdyCaMeAeXElaISLHuoN86+LtKY=
Subject key identifier: 96:1E:B6:4B:30:B5:11:68:E9:14:C1:DB:C5:6F:0D:63:E1:8D:24:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AB3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lh62SzC1EWjpFMHbxW8NY-GNJJ8.roa
Signing time: Thu 22 Dec 2022 01:28:06 +0000
ROA not before: Thu 22 Dec 2022 01:28:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 114.198.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6835 (0x1ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 01:28:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=961EB64B30B51168E914C1DBC56F0D63E18D249F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bb:92:81:a0:c6:52:a1:3c:78:d6:54:ba:cc:
17:72:bf:4d:80:95:4c:e1:29:1e:9f:43:23:ab:4c:
b5:19:01:b8:00:f1:2f:51:b4:a9:b2:b8:ee:7c:3b:
23:f1:07:e3:e2:e6:b6:58:6f:6d:af:7a:32:8c:9a:
45:14:80:46:45:27:9a:55:17:a3:57:7b:ed:8e:76:
c5:be:b4:cb:ca:a2:ec:f5:58:a9:38:03:fc:30:3f:
23:64:8d:d5:ea:f9:99:9f:08:07:0d:d1:46:1d:a2:
d3:77:82:97:f5:d1:b2:82:ad:b9:d9:d2:e5:ba:d6:
3c:9c:4b:8f:38:5a:d5:27:e9:3b:40:e5:52:b3:f9:
a6:da:a3:9b:21:0b:30:1f:d1:6d:0a:97:f9:a2:e5:
d5:18:5c:21:94:a9:65:f2:05:7c:bc:ee:30:7c:b9:
55:da:56:b1:34:22:81:d9:83:d4:54:2c:e9:8b:cf:
93:50:7a:d1:95:9d:ea:97:ad:ac:00:73:17:09:c4:
b8:0b:be:f3:2b:4c:60:bb:3f:d9:92:08:d6:18:4f:
4c:f5:ab:af:c6:40:6f:a0:7c:80:4b:b2:fc:66:9c:
2a:ff:a5:2c:4c:c4:55:11:61:bd:fd:50:c0:eb:f5:
74:e8:8d:ec:7b:58:7e:3d:90:93:29:e7:9d:6d:59:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1E:B6:4B:30:B5:11:68:E9:14:C1:DB:C5:6F:0D:63:E1:8D:24:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lh62SzC1EWjpFMHbxW8NY-GNJJ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
72:4c:9d:9e:b1:37:04:01:9c:76:7e:83:88:be:a0:f1:51:8c:
7f:08:8f:53:7e:f9:bf:7e:d9:9c:f8:80:d0:a5:82:cf:cf:d1:
b3:66:88:87:6c:26:54:da:01:97:f4:c3:c2:0f:5b:07:90:40:
90:27:e5:d1:bb:a6:a6:ad:ea:bc:63:46:3e:19:d5:97:3f:81:
ee:3d:40:17:c7:01:06:cf:c7:44:32:9e:2c:a8:aa:23:3a:04:
f1:63:9d:91:76:db:d7:2a:83:03:f2:7f:23:0f:0e:13:f1:37:
78:c4:aa:8d:28:fb:e7:4d:1a:a0:cb:2f:ad:e8:c4:af:a7:e4:
ee:af:65:5d:0f:6e:a7:6d:cf:e5:9c:2b:b9:f2:b5:b3:51:e2:
f8:b6:56:5a:4f:16:b4:73:83:b6:cf:69:a1:62:dd:3e:8d:13:
48:2b:39:04:8a:72:f7:c0:98:6c:f8:a5:dc:56:78:27:3e:ba:
8a:6b:1b:e4:b7:19:07:83:46:53:aa:b0:a1:90:a4:4e:b5:6c:
29:f5:50:b8:8e:53:cf:9f:ea:37:2b:19:17:48:d8:ca:21:fb:
5f:00:7f:63:05:f7:ed:09:48:66:80:b3:ea:bd:60:5f:81:77:
58:89:fb:29:17:b2:06:9f:c7:0d:fd:f2:eb:f4:6f:c7:33:33:
b6:ac:5b:46
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGrMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEyMjIw
MTI4MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk2MUVCNjRCMzBCNTEx
NjhFOTE0QzFEQkM1NkYwRDYzRTE4RDI0OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDku5KBoMZSoTx41lS6zBdyv02AlUzhKR6fQyOrTLUZAbgA8S9R
tKmyuO58OyPxB+Pi5rZYb22vejKMmkUUgEZFJ5pVF6NXe+2OdsW+tMvKouz1WKk4
A/wwPyNkjdXq+ZmfCAcN0UYdotN3gpf10bKCrbnZ0uW61jycS484WtUn6TtA5VKz
+abao5shCzAf0W0Kl/mi5dUYXCGUqWXyBXy87jB8uVXaVrE0IoHZg9RULOmLz5NQ
etGVneqXrawAcxcJxLgLvvMrTGC7P9mSCNYYT0z1q6/GQG+gfIBLsvxmnCr/pSxM
xFURYb39UMDr9XTojex7WH49kJMp551tWZJrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlh62SzC1EWjpFMHbxW8NY+GNJJ8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xoNjJTekMxRVdqcEZNSGJ4
VzhOWS1HTkpKOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy
xqAwDQYJKoZIhvcNAQELBQADggEBAHJMnZ6xNwQBnHZ+g4i+oPFRjH8Ij1N++b9+
2Zz4gNClgs/P0bNmiIdsJlTaAZf0w8IPWweQQJAn5dG7pqat6rxjRj4Z1Zc/ge49
QBfHAQbPx0QyniyoqiM6BPFjnZF229cqgwPyfyMPDhPxN3jEqo0o++dNGqDLL63o
xK+n5O6vZV0Pbqdtz+WcK7nytbNR4vi2VlpPFrRzg7bPaaFi3T6NE0grOQSKcvfA
mGz4pdxWeCc+uoprG+S3GQeDRlOqsKGQpE61bCn1ULiOU8+f6jcrGRdI2Moh+18A
f2MF9+0JSGaAs+q9YF+Bd1iJ+ykXsgafxw398uv0b8czM7asW0Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org