Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pZuIluErZZdoLz9Za2lsfoRcqQw.roa
File: pZuIluErZZdoLz9Za2lsfoRcqQw.roa (raw, json)
Hash identifier: m+q/u5ly1KLMT6AnEp0sovT9LZeystrq8FYvT4pqERQ=
Subject key identifier: A5:9B:88:96:E1:2B:65:97:68:2F:3F:59:6B:69:6C:7E:84:5C:A9:0C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B0B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pZuIluErZZdoLz9Za2lsfoRcqQw.roa
Signing time: Thu 02 Feb 2023 06:46:06 +0000
ROA not before: Thu 02 Feb 2023 06:46:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6923 (0x1b0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 06:46:06 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A59B8896E12B6597682F3F596B696C7E845CA90C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:44:86:de:c6:ac:41:a6:2a:d2:93:c4:21:
f2:7b:49:ba:5a:9f:b1:2c:3f:8b:d5:d0:e5:30:07:
9c:a7:cd:93:7a:4b:4c:b5:c9:b3:63:c3:3e:17:1d:
ed:25:c1:d8:48:25:9b:4c:68:df:50:9a:26:7d:dd:
50:9f:be:e4:16:3b:70:07:a0:6f:d1:36:7f:cf:8d:
4b:fc:c3:10:3e:2b:dd:fb:6d:3e:1b:a7:82:e3:d8:
85:42:78:67:ef:89:de:9e:58:72:a9:8b:8f:84:b3:
44:b7:dd:c3:03:86:dd:5e:0a:05:a8:fc:d0:b8:cd:
15:05:6d:87:13:37:7a:12:c5:b7:41:50:6c:c6:e4:
59:33:79:4a:4a:c9:14:c8:df:f1:e4:e9:c7:77:a4:
53:b1:ba:8a:fc:8b:99:db:40:4e:49:90:7a:11:b5:
ef:f2:10:77:63:8f:6f:e3:d1:35:34:3c:44:8d:2b:
ac:f0:91:18:eb:53:ad:39:92:b2:28:04:65:33:83:
55:f7:79:04:2d:b3:c3:78:ca:e4:87:93:76:0d:44:
36:e4:cf:9d:42:c8:d8:74:9e:60:5a:10:f5:c9:20:
4a:b9:a9:8f:25:87:0b:ea:b0:21:36:5c:83:cd:72:
d0:b0:40:7e:5b:f5:4f:f5:9f:ea:b7:20:4a:27:04:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:88:96:E1:2B:65:97:68:2F:3F:59:6B:69:6C:7E:84:5C:A9:0C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pZuIluErZZdoLz9Za2lsfoRcqQw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:aa:90:32:e5:49:e3:39:b4:56:19:18:5f:44:c2:f7:e2:7a:
1d:1d:5f:8b:8d:38:3c:82:32:e5:06:e9:00:35:29:20:12:dc:
44:48:1a:e4:02:ce:d1:86:81:d7:a1:3d:3f:ed:a1:1d:6a:d6:
b6:5c:49:f2:05:10:e7:fd:88:82:c8:ef:49:07:3d:98:51:54:
8e:c3:2a:a3:d2:0a:30:5b:9e:d7:c0:8c:8e:c6:fb:52:cb:ec:
4c:3e:c9:25:98:5f:75:ad:04:41:19:88:dd:f5:81:9e:21:20:
da:11:56:fc:15:53:07:63:9e:1e:65:17:e7:5e:8d:06:e2:ca:
7c:6a:e2:c4:f2:7d:14:1e:02:ce:58:3a:d1:e5:56:c2:f6:fd:
c7:a2:50:9a:af:34:4c:db:5d:e0:0f:1a:12:8d:6a:ff:f0:ce:
f0:fe:2e:5e:db:08:18:b8:fb:69:a0:0b:f5:e0:db:d0:57:94:
0d:d4:3e:24:37:5c:0f:33:67:51:4f:5f:a4:05:7c:ee:78:8c:
79:3d:eb:2c:53:49:f2:94:ef:0e:0d:a0:ba:f5:8d:76:ca:71:
c8:06:6d:f7:a1:30:a9:fe:63:79:ab:b1:41:af:87:8c:0a:f2:
28:9b:76:0e:f9:64:14:ef:5d:0f:c2:bf:d7:c8:24:71:ab:1d:
ca:df:2a:55
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICGwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzAyMDIw
NjQ2MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE1OUI4ODk2RTEyQjY1
OTc2ODJGM0Y1OTZCNjk2QzdFODQ1Q0E5MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmDkSG3sasQaYq0pPEIfJ7Sbpan7EsP4vV0OUwB5ynzZN6S0y1
ybNjwz4XHe0lwdhIJZtMaN9QmiZ93VCfvuQWO3AHoG/RNn/PjUv8wxA+K937bT4b
p4Lj2IVCeGfvid6eWHKpi4+Es0S33cMDht1eCgWo/NC4zRUFbYcTN3oSxbdBUGzG
5FkzeUpKyRTI3/Hk6cd3pFOxuor8i5nbQE5JkHoRte/yEHdjj2/j0TU0PESNK6zw
kRjrU605krIoBGUzg1X3eQQts8N4yuSHk3YNRDbkz51CyNh0nmBaEPXJIEq5qY8l
hwvqsCE2XIPNctCwQH5b9U/1n+q3IEonBLFhAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUpZuIluErZZdoLz9Za2lsfoRcqQwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BadUlsdUVyWlpkb0x6OVph
MmxzZm9SY3FRdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx
njANBgkqhkiG9w0BAQsFAAOCAQEAVqqQMuVJ4zm0VhkYX0TC9+J6HR1fi404PIIy
5QbpADUpIBLcREga5ALO0YaB16E9P+2hHWrWtlxJ8gUQ5/2IgsjvSQc9mFFUjsMq
o9IKMFue18CMjsb7UsvsTD7JJZhfda0EQRmI3fWBniEg2hFW/BVTB2OeHmUX516N
BuLKfGrixPJ9FB4Czlg60eVWwvb9x6JQmq80TNtd4A8aEo1q//DO8P4uXtsIGLj7
aaAL9eDb0FeUDdQ+JDdcDzNnUU9fpAV87niMeT3rLFNJ8pTvDg2guvWNdspxyAZt
96Ewqf5jeauxQa+HjAryKJt2DvlkFO9dD8K/18gkcasdyt8qVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org