Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tToemmKLneNz8o-0Ghr0XAiQPlQ.roa
File: tToemmKLneNz8o-0Ghr0XAiQPlQ.roa (raw, json)
Hash identifier: hyGX4gveDWX0Sdssv2hT2G75P4ZJ2TUnJ1dq5+ciGBw=
Subject key identifier: B5:3A:1E:9A:62:8B:9D:E3:73:F2:8F:B4:1A:1A:F4:5C:08:90:3E:54
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B27
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tToemmKLneNz8o-0Ghr0XAiQPlQ.roa
Signing time: Tue 29 Sep 2020 10:08:04 +0000
ROA not before: Tue 29 Sep 2020 10:08:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2855 (0xb27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B53A1E9A628B9DE373F28FB41A1AF45C08903E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:53:63:78:1d:37:00:cb:45:b8:a8:aa:0b:
8d:c1:0a:ec:c0:48:aa:8c:a2:66:00:1e:ea:0f:52:
1f:69:db:f1:44:e6:b6:a6:c4:2b:b4:a1:68:19:3f:
f6:75:16:c8:80:a0:47:41:e3:29:f7:9c:94:ec:77:
49:82:44:b0:9f:62:46:be:02:27:29:ff:13:87:55:
5c:c1:ec:f5:91:7e:bc:87:62:b3:6f:f8:69:13:1b:
c4:bd:5e:0a:e2:b7:33:d0:75:cc:c5:b3:02:fd:9e:
12:db:a2:bc:74:7b:cc:90:c9:ec:6c:0e:2c:80:8d:
cc:e4:c0:9f:7b:64:df:d1:4e:6f:84:14:56:f9:e7:
8d:15:a4:23:7a:60:18:82:a9:18:a3:2c:09:81:47:
84:b0:ed:c3:20:d0:4c:0d:a1:6e:c9:f3:2f:5c:66:
81:7d:f7:33:b2:0a:d3:18:5f:66:12:93:3c:ec:6f:
3f:35:49:06:c5:b9:48:eb:7f:9b:06:80:02:11:01:
f5:be:c3:3c:c9:c3:7a:cc:9f:35:75:98:5f:3c:68:
84:1b:e7:84:ac:5a:6e:7a:c1:59:1b:36:ec:88:05:
1a:1e:60:81:4f:29:19:ff:08:e9:11:c5:51:88:38:
0a:08:f3:ec:81:93:11:9b:a2:5b:f9:ff:08:d8:0c:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:1E:9A:62:8B:9D:E3:73:F2:8F:B4:1A:1A:F4:5C:08:90:3E:54
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tToemmKLneNz8o-0Ghr0XAiQPlQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:2f:76:bc:b9:7b:e7:73:81:dc:58:52:c4:eb:df:2f:1d:44:
fb:25:66:ff:e3:db:d7:a5:ec:36:29:a8:3c:a0:ed:a7:b5:bb:
ee:31:51:e7:5e:fb:5c:cf:31:0f:dd:b7:09:d3:83:4b:df:0f:
9f:4d:72:d7:ff:ff:69:d4:dd:b7:a6:34:f6:62:72:11:35:9f:
12:36:40:80:ea:c8:b6:d5:10:2f:30:18:12:6d:87:67:2f:53:
9c:ec:56:f5:bc:73:84:c6:19:e2:f2:55:a4:f7:be:69:dc:5c:
7b:54:c5:45:eb:ae:49:f2:60:90:1e:39:a2:61:4d:57:24:fb:
b9:24:4e:90:59:03:d5:98:26:09:c7:7c:6a:48:7f:1f:ec:6e:
98:2e:f5:73:ab:3a:b5:36:b5:97:08:bd:c4:95:36:2d:a5:d0:
57:0e:4f:18:5c:9a:9a:d4:58:ba:6a:98:2e:5d:0f:48:1a:1e:
b9:f2:b4:4a:34:50:55:0e:b5:6b:b8:b6:6d:3e:2e:c1:72:52:
38:5c:0b:f7:e4:09:9a:a4:25:1f:6a:93:90:36:ea:67:e8:d3:
7e:82:08:4f:06:d1:93:a2:f5:7c:10:1c:b0:f5:47:a2:1f:46:
18:f6:e3:64:8a:b2:05:f0:3b:2c:94:0e:98:94:9b:c0:4c:88:
04:5c:cb:5d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI1M0ExRTlBNjI4QjlE
RTM3M0YyOEZCNDFBMUFGNDVDMDg5MDNFNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLV1NjeB03AMtFuKiqC43BCuzASKqMomYAHuoPUh9p2/FE5ram
xCu0oWgZP/Z1FsiAoEdB4yn3nJTsd0mCRLCfYka+Aicp/xOHVVzB7PWRfryHYrNv
+GkTG8S9XgritzPQdczFswL9nhLborx0e8yQyexsDiyAjczkwJ97ZN/RTm+EFFb5
540VpCN6YBiCqRijLAmBR4Sw7cMg0EwNoW7J8y9cZoF99zOyCtMYX2YSkzzsbz81
SQbFuUjrf5sGgAIRAfW+wzzJw3rMnzV1mF88aIQb54SsWm56wVkbNuyIBRoeYIFP
KRn/COkRxVGIOAoI8+yBkxGbolv5/wjYDBqPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtToemmKLneNz8o+0Ghr0XAiQPlQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3RUb2VtbUtMbmVOejhvLTBH
aHIwWEFpUVBsUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJy
xrgwDQYJKoZIhvcNAQELBQADggEBAHovdry5e+dzgdxYUsTr3y8dRPslZv/j29el
7DYpqDyg7ae1u+4xUede+1zPMQ/dtwnTg0vfD59Nctf//2nU3bemNPZichE1nxI2
QIDqyLbVEC8wGBJth2cvU5zsVvW8c4TGGeLyVaT3vmncXHtUxUXrrknyYJAeOaJh
TVck+7kkTpBZA9WYJgnHfGpIfx/sbpgu9XOrOrU2tZcIvcSVNi2l0FcOTxhcmprU
WLpqmC5dD0gaHrnytEo0UFUOtWu4tm0+LsFyUjhcC/fkCZqkJR9qk5A26mfo036C
CE8G0ZOi9XwQHLD1R6IfRhj242SKsgXwOyyUDpiUm8BMiARcy10=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org