Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rx6CYpdclhB9rER6QIJD2WWmKY0.roa
File: rx6CYpdclhB9rER6QIJD2WWmKY0.roa (raw, json)
Hash identifier: PSOlVPPV/J52swtYbMs1y/epPVlla902WCCN5H99HIY=
Subject key identifier: AF:1E:82:62:97:5C:96:10:7D:AC:44:7A:40:82:43:D9:65:A6:29:8D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19DA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rx6CYpdclhB9rER6QIJD2WWmKY0.roa
Signing time: Sat 22 Oct 2022 06:11:58 +0000
ROA not before: Sat 22 Oct 2022 06:11:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6618 (0x19da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:11:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF1E8262975C96107DAC447A408243D965A6298D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:b5:3c:de:87:e3:96:5e:07:0f:c8:b2:3c:
b8:3a:48:78:27:b0:75:29:67:cf:1f:e2:ec:47:91:
3a:2d:00:08:ef:a1:77:61:bc:c2:0e:9f:25:c3:47:
7b:6a:df:a7:24:c9:a6:a5:cb:e8:cc:01:1a:ea:e1:
60:ca:0e:ce:c2:24:d2:77:a1:ed:de:78:00:f1:65:
cb:1c:ac:2b:49:95:78:ee:b5:c3:89:c8:91:1d:83:
88:41:c5:91:ab:12:84:ce:40:c6:6a:ae:0b:84:eb:
9b:99:3d:3f:d2:a1:94:06:a0:01:28:b8:85:a4:f9:
9b:9e:4b:9e:f4:44:7d:bc:39:1c:75:ed:73:d3:06:
2c:93:64:0b:24:26:7e:54:36:0c:b4:2c:89:17:08:
f5:8b:44:a3:e4:93:38:fb:16:63:88:7e:30:69:42:
f2:f9:c5:a9:1c:02:d0:65:e2:e0:7c:2a:26:4f:33:
e4:7d:d6:66:fc:93:83:d2:37:7f:c5:b2:46:df:19:
57:42:82:81:d5:2c:ce:d3:68:75:62:98:b6:3b:f4:
ba:21:d3:a2:4c:a0:b9:18:e3:12:30:25:ae:61:24:
7f:c6:c5:37:f2:27:9b:30:3b:23:1c:9d:96:bf:a1:
79:75:7b:a2:b3:19:22:cb:ee:a4:37:56:45:b4:43:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:82:62:97:5C:96:10:7D:AC:44:7A:40:82:43:D9:65:A6:29:8D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rx6CYpdclhB9rER6QIJD2WWmKY0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.76.0/22
Signature Algorithm: sha256WithRSAEncryption
97:cf:45:b2:6b:5a:1b:bc:18:12:3a:10:de:f4:a7:46:cb:6d:
87:0e:6a:b1:9b:e5:91:a6:02:0d:d3:45:9f:14:02:37:a3:3b:
67:1e:23:dc:4c:53:d1:93:f8:c8:48:d3:2b:a3:c1:77:49:ae:
28:b7:07:65:64:30:ab:d7:40:08:60:61:73:34:c9:a9:4d:38:
44:fa:a4:32:13:8a:65:c9:5c:ce:1b:00:50:06:62:69:5f:9b:
73:af:3e:b9:db:64:48:94:f7:26:a5:21:34:e5:4f:90:16:a2:
c3:94:55:5c:7e:f5:09:5e:ac:b1:aa:06:05:4c:25:7b:d9:15:
b2:f1:be:13:0a:16:06:c1:ee:4d:28:8b:1f:a3:fe:54:d3:7c:
4a:2c:a1:bc:52:78:d7:5d:5c:81:a4:42:42:da:b0:b3:00:97:
b4:f8:de:13:20:e0:86:2e:82:f4:96:e5:05:b0:bb:df:4b:46:
50:d3:98:23:51:0a:0a:c5:65:3e:bb:24:50:20:8b:86:dc:0c:
a2:b5:dc:84:0e:df:f8:44:ec:48:b9:44:79:9c:60:dc:8f:3f:
eb:8d:90:94:71:43:fa:86:2e:8f:62:f5:a7:92:4e:45:31:66:
14:3b:61:d5:53:36:74:d1:35:da:3b:1d:60:78:e0:49:a6:bb:
a9:cb:80:f6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjExNThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFGMUU4MjYyOTc1Qzk2
MTA3REFDNDQ3QTQwODI0M0Q5NjVBNjI5OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZg7U83ofjll4HD8iyPLg6SHgnsHUpZ88f4uxHkTotAAjvoXdh
vMIOnyXDR3tq36ckyaaly+jMARrq4WDKDs7CJNJ3oe3eeADxZcscrCtJlXjutcOJ
yJEdg4hBxZGrEoTOQMZqrguE65uZPT/SoZQGoAEouIWk+ZueS570RH28ORx17XPT
BiyTZAskJn5UNgy0LIkXCPWLRKPkkzj7FmOIfjBpQvL5xakcAtBl4uB8KiZPM+R9
1mb8k4PSN3/FskbfGVdCgoHVLM7TaHVimLY79Loh06JMoLkY4xIwJa5hJH/GxTfy
J5swOyMcnZa/oXl1e6KzGSLL7qQ3VkW0Q87RAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrx6CYpdclhB9rER6QIJD2WWmKY0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3J4NkNZcGRjbGhCOXJFUjZR
SUpEMldXbUtZMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n0wwDQYJKoZIhvcNAQELBQADggEBAJfPRbJrWhu8GBI6EN70p0bLbYcOarGb5ZGm
Ag3TRZ8UAjejO2ceI9xMU9GT+MhI0yujwXdJrii3B2VkMKvXQAhgYXM0yalNOET6
pDITimXJXM4bAFAGYmlfm3OvPrnbZEiU9yalITTlT5AWosOUVVx+9QlerLGqBgVM
JXvZFbLxvhMKFgbB7k0oix+j/lTTfEosobxSeNddXIGkQkLasLMAl7T43hMg4IYu
gvSW5QWwu99LRlDTmCNRCgrFZT67JFAgi4bcDKK13IQO3/hE7Ei5RHmcYNyPP+uN
kJRxQ/qGLo9i9aeSTkUxZhQ7YdVTNnTRNdo7HWB44Emmu6nLgPY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org