Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rdKHwXyRu8TNDzxfRgUu1ynf6fM.roa
File: rdKHwXyRu8TNDzxfRgUu1ynf6fM.roa (raw, json)
Hash identifier: 9QbRlRclurpotU9levzYM1qcLj2ptgEfJInmpLdqwsE=
Subject key identifier: AD:D2:87:C1:7C:91:BB:C4:CD:0F:3C:5F:46:05:2E:D7:29:DF:E9:F3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rdKHwXyRu8TNDzxfRgUu1ynf6fM.roa
Signing time: Thu 15 Sep 2022 02:35:22 +0000
ROA not before: Thu 15 Sep 2022 02:35:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ADD287C17C91BBC4CD0F3C5F46052ED729DFE9F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:f7:95:3f:7e:71:2d:a3:f2:da:f1:79:14:
0d:0a:6f:b0:92:a6:19:dd:fc:db:c7:49:36:1b:cf:
f4:d8:85:d1:49:e7:ec:80:e1:03:ed:ac:0c:f2:87:
ac:3f:d7:d3:c8:f3:6f:d0:c5:ce:cc:14:e3:d0:18:
db:7e:80:e8:37:54:87:12:06:75:06:7f:f7:63:c1:
7c:b7:34:92:ee:a4:97:e3:c9:96:d0:8d:3e:54:f1:
95:16:94:cd:bc:02:c2:25:3c:40:99:7f:02:59:fb:
f8:2f:de:30:f2:8e:72:13:bd:95:8b:c7:fa:58:13:
74:67:04:20:d0:f6:49:ed:d1:bf:03:7b:ed:33:19:
57:88:a0:36:2c:a7:84:74:4d:57:1f:21:58:33:b5:
1a:81:77:6d:c8:f0:97:c9:37:e4:44:22:9c:be:6d:
4c:ab:29:3b:e2:c1:b9:4a:6d:90:d1:8b:d5:bb:8b:
90:6d:06:c6:ac:66:64:1e:c9:fd:3a:b8:fc:9d:c6:
7c:af:b9:d8:cf:09:f9:4d:f1:a4:c8:ce:f1:7d:c2:
eb:bc:b7:17:2f:37:3e:54:5c:b6:36:1a:d8:ce:d1:
84:90:41:68:e0:86:34:9e:57:2a:98:0e:02:83:b8:
86:f8:38:97:b7:f2:ad:49:a2:73:ce:c8:da:22:12:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:87:C1:7C:91:BB:C4:CD:0F:3C:5F:46:05:2E:D7:29:DF:E9:F3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rdKHwXyRu8TNDzxfRgUu1ynf6fM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.168.0/22
Signature Algorithm: sha256WithRSAEncryption
59:42:7b:3a:04:0f:d8:2f:1f:26:a5:d1:f5:95:50:8c:db:d0:
5c:2c:f1:f0:c9:ff:af:fe:97:63:21:fb:13:e6:5b:46:e1:82:
47:f5:49:18:c2:a3:d6:10:6e:76:bd:87:a4:14:8e:38:a8:f7:
2e:f3:53:2a:1c:70:6b:67:57:64:65:e0:1f:ee:fe:d2:27:00:
53:3f:48:c2:41:35:4a:3e:14:5d:12:eb:19:6f:ec:1d:bb:01:
b5:d6:7d:58:2f:37:d3:00:23:45:f3:c5:82:57:b9:9d:e9:6d:
6e:53:46:e5:ea:49:5a:a9:2e:33:81:e2:64:9d:23:d0:a4:86:
69:3c:92:59:42:ea:2a:ac:85:a7:76:92:47:7a:b7:41:50:63:
7a:42:ff:a7:d9:ef:3f:28:10:96:36:44:6a:80:8e:7c:92:a9:
ab:db:18:ee:92:82:5c:0c:12:c5:df:d3:bd:27:22:c1:33:66:
dc:67:14:63:c0:09:27:5f:c1:a4:02:bf:8e:5d:3d:2e:71:2e:
19:8a:38:46:a2:b5:6b:04:97:f7:18:31:12:fb:8f:1c:cf:57:
40:5c:6d:1b:62:33:c0:11:b5:41:1b:e2:02:2c:a1:d5:f3:c8:
1e:cc:76:1b:26:61:0b:c2:0b:d8:0a:29:ce:55:23:aa:84:c8:
83:47:3b:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFERDI4N0MxN0M5MUJC
QzRDRDBGM0M1RjQ2MDUyRUQ3MjlERkU5RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA3/eVP35xLaPy2vF5FA0Kb7CSphnd/NvHSTYbz/TYhdFJ5+yA
4QPtrAzyh6w/19PI82/Qxc7MFOPQGNt+gOg3VIcSBnUGf/djwXy3NJLupJfjyZbQ
jT5U8ZUWlM28AsIlPECZfwJZ+/gv3jDyjnITvZWLx/pYE3RnBCDQ9knt0b8De+0z
GVeIoDYsp4R0TVcfIVgztRqBd23I8JfJN+REIpy+bUyrKTviwblKbZDRi9W7i5Bt
BsasZmQeyf06uPydxnyvudjPCflN8aTIzvF9wuu8txcvNz5UXLY2GtjO0YSQQWjg
hjSeVyqYDgKDuIb4OJe38q1JonPOyNoiEtxfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrdKHwXyRu8TNDzxfRgUu1ynf6fMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3JkS0h3WHlSdThUTkR6eGZS
Z1V1MXluZjZmTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJy
xqgwDQYJKoZIhvcNAQELBQADggEBAFlCezoED9gvHyal0fWVUIzb0Fws8fDJ/6/+
l2Mh+xPmW0bhgkf1SRjCo9YQbna9h6QUjjio9y7zUyoccGtnV2Rl4B/u/tInAFM/
SMJBNUo+FF0S6xlv7B27AbXWfVgvN9MAI0XzxYJXuZ3pbW5TRuXqSVqpLjOB4mSd
I9Ckhmk8kllC6iqshad2kkd6t0FQY3pC/6fZ7z8oEJY2RGqAjnySqavbGO6SglwM
EsXf070nIsEzZtxnFGPACSdfwaQCv45dPS5xLhmKOEaitWsEl/cYMRL7jxzPV0Bc
bRtiM8ARtUEb4gIsodXzyB7MdhsmYQvCC9gKKc5VI6qEyINHO9w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org