Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u5uFhzYaFX0iu7GB_EOk6obSH08.roa
File: u5uFhzYaFX0iu7GB_EOk6obSH08.roa (raw, json)
Hash identifier: RvFXYH+1dLYQUpxbAqvHg20UySuavmPc14/XHuWarRY=
Subject key identifier: BB:9B:85:87:36:1A:15:7D:22:BB:B1:81:FC:43:A4:EA:86:D2:1F:4F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1262
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u5uFhzYaFX0iu7GB_EOk6obSH08.roa
Signing time: Wed 29 Sep 2021 02:54:31 +0000
ROA not before: Wed 29 Sep 2021 02:54:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 211.76.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4706 (0x1262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BB9B8587361A157D22BBB181FC43A4EA86D21F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:31:f9:21:e7:ad:23:24:55:33:7c:b3:5c:
a5:aa:26:18:a4:50:c4:6d:fe:b5:55:8f:97:6b:88:
37:e3:b9:6e:ff:08:8f:fe:53:a7:95:92:cb:21:ac:
ee:4d:13:98:7c:58:05:7f:ce:bd:73:af:94:1a:1a:
7f:1d:77:d8:09:43:a9:9a:07:a9:d6:83:d7:c5:66:
9d:aa:f9:5b:eb:34:88:fa:40:fc:10:1f:91:41:da:
2d:22:bc:db:2e:5a:10:fa:7b:0f:c7:c6:4a:b0:a4:
4c:20:22:e9:8f:36:f8:2d:eb:84:d8:44:d9:4b:ce:
9b:21:e9:4e:e9:aa:54:9b:a0:f2:46:cc:95:af:65:
a1:6f:f6:44:86:86:73:4d:96:c7:e3:72:b9:f7:80:
7c:5c:af:c0:4f:16:7f:84:fd:e3:d3:a8:0f:04:19:
4e:b1:ed:32:f7:00:58:0d:8c:fe:0a:20:a1:c3:01:
36:94:a4:50:49:47:d1:cd:0a:12:93:45:f8:65:b9:
45:f8:72:68:66:c7:a2:23:05:39:0d:e2:b7:ef:93:
2f:92:60:60:49:ad:11:fd:ce:d4:f9:0c:8f:d9:bd:
01:c8:da:91:1b:a5:fd:f4:89:93:a7:b2:54:3e:de:
45:da:f4:c3:a0:25:12:54:d3:db:7b:00:34:bc:f9:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9B:85:87:36:1A:15:7D:22:BB:B1:81:FC:43:A4:EA:86:D2:1F:4F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u5uFhzYaFX0iu7GB_EOk6obSH08.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3f:b2:81:40:8b:de:ef:44:2d:17:f4:b4:5f:b1:6b:25:9c:
b9:e6:81:17:01:c3:7b:09:62:32:28:91:6c:e6:1b:12:82:45:
0f:0a:9d:85:d8:a7:1b:76:0e:66:93:44:c3:47:e6:48:7f:d8:
c3:26:f2:b8:3a:0e:d2:79:ce:59:33:21:c1:27:9b:ce:98:d3:
aa:25:8b:b0:61:32:35:74:10:5e:5f:c7:ba:78:5e:28:37:a6:
cd:e4:76:6a:78:2f:1a:1b:e4:71:04:d2:fb:14:e1:02:84:3f:
79:28:9b:62:ab:3b:94:49:98:69:be:31:43:ea:4d:91:13:f6:
58:42:d8:c3:5e:6e:c1:01:3c:e8:4b:83:86:92:26:c7:63:b4:
94:6a:f6:3e:9d:20:74:c5:7d:e7:74:f0:23:b9:1f:48:28:86:
ee:17:db:c3:ad:b0:24:71:77:4d:2c:d8:89:a5:6c:57:0c:26:
f1:e3:35:38:78:cf:4a:8a:05:11:11:7c:e4:32:cd:b7:ae:82:
26:e9:14:47:7b:0e:22:3b:69:30:63:81:a8:8b:e8:56:7b:4c:
27:5e:06:76:7d:e1:d3:b0:8a:8b:5b:38:fc:88:e9:4c:5d:bb:
58:b1:5c:13:c1:c8:ae:bb:26:09:6a:fd:f2:81:a1:0c:cc:7c:
0f:0a:ef:01
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MzFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJCOUI4NTg3MzYxQTE1
N0QyMkJCQjE4MUZDNDNBNEVBODZEMjFGNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrTDH5IeetIyRVM3yzXKWqJhikUMRt/rVVj5driDfjuW7/CI/+
U6eVksshrO5NE5h8WAV/zr1zr5QaGn8dd9gJQ6maB6nWg9fFZp2q+VvrNIj6QPwQ
H5FB2i0ivNsuWhD6ew/HxkqwpEwgIumPNvgt64TYRNlLzpsh6U7pqlSboPJGzJWv
ZaFv9kSGhnNNlsfjcrn3gHxcr8BPFn+E/ePTqA8EGU6x7TL3AFgNjP4KIKHDATaU
pFBJR9HNChKTRfhluUX4cmhmx6IjBTkN4rfvky+SYGBJrRH9ztT5DI/ZvQHI2pEb
pf30iZOnslQ+3kXa9MOgJRJU09t7ADS8+ZIpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUu5uFhzYaFX0iu7GB/EOk6obSH08wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3U1dUZoellhRlgwaXU3R0Jf
RU9rNm9iU0gwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TDEwDQYJKoZIhvcNAQELBQADggEBAFw/soFAi97vRC0X9LRfsWslnLnmgRcBw3sJ
YjIokWzmGxKCRQ8KnYXYpxt2DmaTRMNH5kh/2MMm8rg6DtJ5zlkzIcEnm86Y06ol
i7BhMjV0EF5fx7p4Xig3ps3kdmp4Lxob5HEE0vsU4QKEP3kom2KrO5RJmGm+MUPq
TZET9lhC2MNebsEBPOhLg4aSJsdjtJRq9j6dIHTFfed08CO5H0gohu4X28OtsCRx
d00s2ImlbFcMJvHjNTh4z0qKBRERfOQyzbeugibpFEd7DiI7aTBjgaiL6FZ7TCde
BnZ94dOwiotbOPyI6Uxdu1ixXBPByK67Jglq/fKBoQzMfA8K7wE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org