Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rdKMPyB9rxoxpUSrAEu6EnNo6Yc.roa
File: rdKMPyB9rxoxpUSrAEu6EnNo6Yc.roa (raw, json)
Hash identifier: R9YApKl7JRT30DKQYyxuAserR5pzuO0emjPECy6uzN0=
Subject key identifier: AD:D2:8C:3F:20:7D:AF:1A:31:A5:44:AB:00:4B:BA:12:73:68:E9:87
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1993
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rdKMPyB9rxoxpUSrAEu6EnNo6Yc.roa
Signing time: Sat 22 Oct 2022 06:06:42 +0000
ROA not before: Sat 22 Oct 2022 06:06:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6547 (0x1993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ADD28C3F207DAF1A31A544AB004BBA127368E987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:02:09:c7:8b:a8:64:99:12:74:69:30:9d:
91:04:4e:95:ea:8b:89:d7:8c:38:ac:87:ed:4d:80:
98:0d:0e:35:33:4b:eb:c4:cb:37:1b:3c:13:f2:97:
d9:af:66:16:a7:34:c4:c8:90:ec:4a:5a:b6:a0:cc:
4b:47:91:1e:00:cb:35:ba:a6:3a:6c:62:7e:56:ed:
84:92:c8:8e:ec:fe:e6:3e:4e:8b:ae:22:70:85:34:
66:47:af:da:ac:ad:5b:0e:26:e6:e5:76:53:ce:8f:
79:42:94:c8:d8:3b:6b:66:31:65:bd:34:48:2b:de:
61:1f:80:25:cd:a8:1f:8e:f8:09:12:02:e6:01:1c:
65:f6:31:4b:b2:44:76:23:1e:4d:22:b7:b1:73:a9:
39:2d:a7:20:04:e6:b7:36:bb:68:08:9a:13:19:5e:
b2:5c:62:c9:b1:70:02:a8:12:39:dc:a8:43:28:5c:
b2:e3:f1:f3:86:e4:59:00:f1:d7:cd:62:51:d4:97:
a6:5b:75:62:d2:b4:c5:a1:8b:11:97:b0:73:24:08:
58:75:f9:e6:f7:d6:f4:b7:07:12:c3:50:cd:44:f2:
f1:7d:d9:51:54:a6:09:2e:0a:6c:3f:58:88:21:df:
56:87:b1:b6:19:8a:bb:4b:80:e6:5e:ab:e0:38:59:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:8C:3F:20:7D:AF:1A:31:A5:44:AB:00:4B:BA:12:73:68:E9:87
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rdKMPyB9rxoxpUSrAEu6EnNo6Yc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.32.0/21
Signature Algorithm: sha256WithRSAEncryption
06:2e:89:71:d3:54:fc:8a:68:52:46:15:9f:93:8d:34:20:69:
bc:48:93:76:6f:bc:fb:8b:1e:12:59:ee:72:1f:79:b6:34:a9:
a8:56:8a:a8:00:ec:96:6b:8d:ea:b8:6c:85:a9:c2:8a:10:15:
2b:90:98:cc:23:dc:7a:7e:5c:f2:6b:3c:b6:1c:34:36:78:6e:
f5:c2:8e:4b:2f:4b:98:f9:e0:9c:ea:f6:66:45:0b:2a:03:b3:
43:31:17:b2:a2:22:9c:b7:63:92:87:2a:63:5c:aa:5e:8e:74:
60:cf:28:67:46:e9:ff:54:6b:3f:69:2c:87:14:2e:6d:5d:66:
20:0b:22:a2:31:8b:79:6c:7a:73:b2:95:73:c5:b5:fd:77:51:
e7:b0:d3:87:8d:6b:57:be:80:fb:f1:94:67:76:a7:f4:21:3f:
97:10:56:0c:d7:1c:44:89:04:75:5e:15:ec:2b:c0:45:56:b6:
28:1c:ce:51:11:31:52:db:74:9c:40:0d:14:b4:83:30:e0:4e:
b8:3d:d6:1f:53:fc:a4:21:8a:72:58:30:3c:fa:78:f0:56:77:
2d:14:5d:c1:8f:80:4e:15:21:a4:1a:0b:8a:be:ba:1e:d3:ac:
8b:92:23:38:a6:71:36:81:98:87:d2:91:2b:a0:32:c3:bc:99:
05:8a:fa:fd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2NDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFERDI4QzNGMjA3REFG
MUEzMUE1NDRBQjAwNEJCQTEyNzM2OEU5ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU5wIJx4uoZJkSdGkwnZEETpXqi4nXjDish+1NgJgNDjUzS+vE
yzcbPBPyl9mvZhanNMTIkOxKWragzEtHkR4AyzW6pjpsYn5W7YSSyI7s/uY+Touu
InCFNGZHr9qsrVsOJubldlPOj3lClMjYO2tmMWW9NEgr3mEfgCXNqB+O+AkSAuYB
HGX2MUuyRHYjHk0it7FzqTktpyAE5rc2u2gImhMZXrJcYsmxcAKoEjncqEMoXLLj
8fOG5FkA8dfNYlHUl6ZbdWLStMWhixGXsHMkCFh1+eb31vS3BxLDUM1E8vF92VFU
pgkuCmw/WIgh31aHsbYZirtLgOZeq+A4WdjBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrdKMPyB9rxoxpUSrAEu6EnNo6YcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3JkS01QeUI5cnhveHBVU3JB
RXU2RW5ObzZZYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPT
TCAwDQYJKoZIhvcNAQELBQADggEBAAYuiXHTVPyKaFJGFZ+TjTQgabxIk3ZvvPuL
HhJZ7nIfebY0qahWiqgA7JZrjeq4bIWpwooQFSuQmMwj3Hp+XPJrPLYcNDZ4bvXC
jksvS5j54Jzq9mZFCyoDs0MxF7KiIpy3Y5KHKmNcql6OdGDPKGdG6f9Uaz9pLIcU
Lm1dZiALIqIxi3lsenOylXPFtf13Ueew04eNa1e+gPvxlGd2p/QhP5cQVgzXHESJ
BHVeFewrwEVWtigczlERMVLbdJxADRS0gzDgTrg91h9T/KQhinJYMDz6ePBWdy0U
XcGPgE4VIaQaC4q+uh7TrIuSIzimcTaBmIfSkSugMsO8mQWK+v0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org