Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tg-xBT6SmJkxKDxktoyh0vjEob0.roa
File: tg-xBT6SmJkxKDxktoyh0vjEob0.roa (raw, json)
Hash identifier: 8Dl4xeqwV1D/CJb62645A8aos3when97PgOp2rM+4kk=
Subject key identifier: B6:0F:B1:05:3E:92:98:99:31:28:3C:64:B6:8C:A1:D2:F8:C4:A1:BD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tg-xBT6SmJkxKDxktoyh0vjEob0.roa
Signing time: Thu 15 Sep 2022 02:36:47 +0000
ROA not before: Thu 15 Sep 2022 02:36:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B60FB1053E92989931283C64B68CA1D2F8C4A1BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:a4:da:98:a8:88:da:cd:bc:4b:28:f5:ee:
72:40:d9:01:6f:5b:2f:55:9f:aa:f1:65:d5:4a:16:
63:69:69:2e:f4:8f:de:b9:f6:19:32:9c:f9:e0:21:
3d:7c:a2:5a:2e:32:30:07:96:a2:78:6d:a1:e0:b8:
73:e7:43:96:f9:a2:6e:af:3d:11:0f:55:bd:b9:8d:
1c:82:f9:4d:d1:f6:8d:07:a5:be:eb:d3:d0:7c:18:
c7:77:f1:b6:4e:f8:5b:4d:34:81:48:af:bd:8b:29:
9c:d3:ea:dd:4e:7f:a4:d5:75:39:40:3d:04:34:ed:
1b:a5:f8:ed:cc:b9:d1:97:35:a5:68:6b:31:81:b1:
fa:aa:5e:9d:70:67:57:28:12:d4:05:84:6e:4b:3c:
14:85:c6:fb:e9:82:63:fa:c5:15:8c:2f:e3:02:97:
cc:c9:58:e7:26:60:1c:2e:e7:a2:30:32:a3:fa:22:
8d:4d:be:df:3b:13:bb:a3:9b:5e:f2:5b:dd:13:22:
cc:1c:47:6e:1a:93:ed:0d:d5:a9:5a:2f:9b:ac:6f:
56:26:ad:f3:c7:e6:cf:02:90:a1:09:1a:d3:49:be:
64:a3:e4:1a:24:9f:9d:ab:ed:6f:51:52:88:ff:3d:
b1:fa:94:83:e2:49:e1:e1:43:32:bf:24:a9:76:51:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0F:B1:05:3E:92:98:99:31:28:3C:64:B6:8C:A1:D2:F8:C4:A1:BD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tg-xBT6SmJkxKDxktoyh0vjEob0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.136.0/22
Signature Algorithm: sha256WithRSAEncryption
99:99:65:47:0d:99:8c:c0:b7:d4:58:11:6e:0d:ae:c5:ab:d3:
65:e9:0e:0b:6a:9e:cc:da:56:49:f3:35:d2:86:5c:ea:de:a0:
1c:f8:61:44:81:a2:94:5f:ee:d9:5f:3c:0f:85:8a:e9:13:12:
17:0d:8d:5d:03:dd:30:27:56:0f:1a:7f:39:5d:7b:a4:13:e2:
8b:7b:e1:aa:4a:cd:a5:48:83:16:cd:97:f3:03:a8:6f:e0:1a:
c7:2f:0e:3f:1e:f6:a1:d6:21:80:90:69:f8:ac:3c:e8:08:3a:
ed:6e:cb:29:90:c2:16:99:c9:62:67:9f:2b:1e:21:1c:32:53:
20:e8:3e:11:cf:60:67:28:4e:46:0d:b0:e9:ea:ee:4d:94:b9:
2b:cf:ca:60:19:48:e3:f3:d4:fe:e1:f4:e8:3a:e6:c2:17:09:
de:56:5b:68:a7:cc:41:92:4a:a1:16:2f:f0:63:46:d5:a7:89:
d5:85:26:7d:28:74:59:01:30:85:52:84:a7:dc:50:27:2d:72:
0c:6a:c6:b7:a2:f3:fc:e2:80:6d:da:da:ca:ad:f8:36:62:31:
f1:b7:66:d1:fb:ed:2d:3d:95:6e:f5:0e:a2:e2:a0:29:90:ec:
81:34:17:74:bb:26:f7:fa:0c:ff:29:1a:21:a5:d9:6d:9a:3a:
64:75:23:48
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2NDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI2MEZCMTA1M0U5Mjk4
OTkzMTI4M0M2NEI2OENBMUQyRjhDNEExQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC59aTamKiI2s28Syj17nJA2QFvWy9Vn6rxZdVKFmNpaS70j965
9hkynPngIT18olouMjAHlqJ4baHguHPnQ5b5om6vPREPVb25jRyC+U3R9o0Hpb7r
09B8GMd38bZO+FtNNIFIr72LKZzT6t1Of6TVdTlAPQQ07Rul+O3MudGXNaVoazGB
sfqqXp1wZ1coEtQFhG5LPBSFxvvpgmP6xRWML+MCl8zJWOcmYBwu56IwMqP6Io1N
vt87E7ujm17yW90TIswcR24ak+0N1alaL5usb1YmrfPH5s8CkKEJGtNJvmSj5Bok
n52r7W9RUoj/PbH6lIPiSeHhQzK/JKl2UVz7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtg+xBT6SmJkxKDxktoyh0vjEob0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3RnLXhCVDZTbUpreEtEeGt0
b3loMHZqRW9iMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
nogwDQYJKoZIhvcNAQELBQADggEBAJmZZUcNmYzAt9RYEW4NrsWr02XpDgtqnsza
VknzNdKGXOreoBz4YUSBopRf7tlfPA+FiukTEhcNjV0D3TAnVg8afzlde6QT4ot7
4apKzaVIgxbNl/MDqG/gGscvDj8e9qHWIYCQafisPOgIOu1uyymQwhaZyWJnnyse
IRwyUyDoPhHPYGcoTkYNsOnq7k2UuSvPymAZSOPz1P7h9Og65sIXCd5WW2inzEGS
SqEWL/BjRtWnidWFJn0odFkBMIVShKfcUCctcgxqxrei8/zigG3a2sqt+DZiMfG3
ZtH77S09lW71DqLioCmQ7IE0F3S7Jvf6DP8pGiGl2W2aOmR1I0g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org