Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mCV-l3oSjKI_-d7JW_PNhHVGuV4.roa
File: mCV-l3oSjKI_-d7JW_PNhHVGuV4.roa (raw, json)
Hash identifier: VgCwA5NMd/wQBxkNTQwzOfdKarH4I8QOcJQOnMdpT6Y=
Subject key identifier: 98:25:7E:97:7A:12:8C:A2:3F:F9:DE:C9:5B:F3:CD:84:75:46:B9:5E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mCV-l3oSjKI_-d7JW_PNhHVGuV4.roa
Signing time: Thu 15 Sep 2022 02:35:54 +0000
ROA not before: Thu 15 Sep 2022 02:35:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=98257E977A128CA23FF9DEC95BF3CD847546B95E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:05:c7:7a:95:15:95:a3:63:f1:7a:d9:ac:
6f:a6:d3:59:d7:e6:fc:2d:5b:1f:ac:cd:f4:c9:75:
61:b2:bf:f5:36:89:e9:07:b3:73:e9:c5:11:cb:cc:
eb:6a:91:5f:69:14:64:68:49:19:a0:19:84:c1:39:
7d:f5:d8:d2:92:88:b6:68:cc:42:d4:1c:6d:56:a2:
6e:cd:0a:3c:05:cb:c9:55:5f:c0:fc:e2:29:4a:34:
78:ff:34:ad:ea:72:9f:2c:02:67:4e:d9:0d:40:34:
0a:e3:2d:1a:f1:95:e2:27:61:02:2e:79:86:bb:aa:
eb:bd:b6:b4:3a:55:b7:a4:73:ca:cf:61:46:e9:53:
3f:29:7f:94:3f:0f:7f:10:35:ec:0e:3b:1f:d9:48:
c5:c9:25:98:89:4a:46:c4:8f:1e:ea:52:13:e5:5b:
76:44:b9:44:32:83:e9:1c:e3:fc:52:fc:2f:40:e4:
f6:d4:ba:d5:d0:c8:2b:a5:15:30:9e:4b:dc:f4:67:
49:cc:82:0d:35:af:16:41:b9:7d:03:e3:7a:7a:06:
a5:4f:2f:8c:eb:4c:e5:d4:18:04:0f:13:61:57:fa:
78:a0:23:fd:aa:81:03:e5:aa:c6:90:13:7b:67:63:
45:8b:05:b5:6b:ee:81:72:c7:8d:f8:cb:25:b0:5f:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:7E:97:7A:12:8C:A2:3F:F9:DE:C9:5B:F3:CD:84:75:46:B9:5E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mCV-l3oSjKI_-d7JW_PNhHVGuV4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/22
Signature Algorithm: sha256WithRSAEncryption
44:6f:17:ca:82:b7:db:11:eb:d2:b6:fa:7f:0a:3e:92:16:77:
7f:c7:86:3c:ce:14:92:a3:9c:9d:d6:aa:7b:78:d4:11:ab:3e:
62:c2:f4:8a:8e:a8:ec:00:c0:2a:77:09:af:72:b8:47:5a:d9:
28:c0:9e:b8:e5:75:08:d7:15:60:b3:9d:f7:34:de:72:66:14:
66:4d:94:ac:6e:ee:7d:ec:8d:6e:ec:31:7e:87:ce:18:76:eb:
1a:0e:d0:c7:1f:5b:be:1f:81:b5:7b:cd:d8:bb:e8:1f:21:58:
ba:3d:2d:84:93:f3:7d:cc:5c:ff:b0:40:14:d0:ca:a9:81:b3:
24:f0:c9:5e:19:ad:1a:cf:11:50:04:3a:4d:3e:86:ea:1d:44:
b0:01:fa:82:d3:00:b5:f4:14:ff:d5:d0:5f:0d:5f:89:79:1f:
ee:85:9f:32:02:0b:9c:60:8e:9e:01:3c:6b:7b:8c:81:b1:a8:
5e:4e:ef:da:69:eb:1f:9c:b8:ed:fe:7f:f8:d7:1b:6f:94:f1:
67:e2:d8:84:fd:b3:94:4e:96:b2:08:11:d1:bc:ff:3a:91:34:
b9:2e:7e:2a:91:e3:43:f9:da:28:e7:d3:19:fd:21:14:df:a3:
15:57:ea:16:a6:59:bb:f4:a6:96:d7:be:c4:3d:f3:86:03:ef:
37:6d:d5:20
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk4MjU3RTk3N0ExMjhD
QTIzRkY5REVDOTVCRjNDRDg0NzU0NkI5NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfbgXHepUVlaNj8XrZrG+m01nX5vwtWx+szfTJdWGyv/U2iekH
s3PpxRHLzOtqkV9pFGRoSRmgGYTBOX312NKSiLZozELUHG1Wom7NCjwFy8lVX8D8
4ilKNHj/NK3qcp8sAmdO2Q1ANArjLRrxleInYQIueYa7quu9trQ6Vbekc8rPYUbp
Uz8pf5Q/D38QNewOOx/ZSMXJJZiJSkbEjx7qUhPlW3ZEuUQyg+kc4/xS/C9A5PbU
utXQyCulFTCeS9z0Z0nMgg01rxZBuX0D43p6BqVPL4zrTOXUGAQPE2FX+nigI/2q
gQPlqsaQE3tnY0WLBbVr7oFyx434yyWwX0aLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmCV+l3oSjKI/+d7JW/PNhHVGuV4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21DVi1sM29TaktJXy1kN0pX
X1BOaEhWR3VWNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6
/iAwDQYJKoZIhvcNAQELBQADggEBAERvF8qCt9sR69K2+n8KPpIWd3/HhjzOFJKj
nJ3Wqnt41BGrPmLC9IqOqOwAwCp3Ca9yuEda2SjAnrjldQjXFWCznfc03nJmFGZN
lKxu7n3sjW7sMX6Hzhh26xoO0McfW74fgbV7zdi76B8hWLo9LYST833MXP+wQBTQ
yqmBsyTwyV4ZrRrPEVAEOk0+huodRLAB+oLTALX0FP/V0F8NX4l5H+6FnzICC5xg
jp4BPGt7jIGxqF5O79pp6x+cuO3+f/jXG2+U8Wfi2IT9s5ROlrIIEdG8/zqRNLku
fiqR40P52ijn0xn9IRTfoxVX6hamWbv0ppbXvsQ984YD7zdt1SA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org