Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yPSU0oN-FZAUwZUGhWJrIs8oV1s.roa
File: yPSU0oN-FZAUwZUGhWJrIs8oV1s.roa (raw, json)
Hash identifier: S7oIxUxKgbAVcMpQIch6qR2tGwyy3fsQd14n1csaNv4=
Subject key identifier: C8:F4:94:D2:83:7E:15:90:14:C1:95:06:85:62:6B:22:CF:28:57:5B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1027
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yPSU0oN-FZAUwZUGhWJrIs8oV1s.roa
Signing time: Sun 07 Feb 2021 12:37:52 +0000
ROA not before: Sun 07 Feb 2021 12:37:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.64.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4135 (0x1027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C8F494D2837E159014C1950685626B22CF28575B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:74:64:c9:d7:cc:04:dc:fc:e4:31:2b:bb:
53:ce:43:0c:dd:f0:73:bc:39:2b:4b:15:77:17:42:
ac:1d:87:03:05:78:58:f8:c4:d3:55:36:14:08:f6:
7a:e3:88:2f:b1:25:10:84:70:a1:ef:a9:0e:69:22:
f0:ae:d1:fe:23:d0:ed:52:c7:57:91:cf:94:66:6e:
08:b8:18:8a:43:e1:7d:b2:fd:b6:25:bf:43:61:7a:
f8:f4:b3:38:68:a7:cf:13:73:20:21:df:29:20:88:
2c:06:8c:fd:4f:48:82:96:28:47:57:d5:26:65:db:
37:44:f5:e6:e6:a5:be:95:75:7d:dc:08:21:2f:97:
6d:ca:13:dc:c6:f1:5f:ee:a7:51:2c:16:70:13:56:
fc:c0:98:b8:4a:ce:6d:f3:69:61:cc:3b:90:6e:70:
65:7a:76:43:73:9a:88:e0:da:4c:a5:2a:7f:34:ca:
02:0a:c2:c6:2b:89:26:a8:fe:85:a9:a3:7a:cc:49:
79:23:a2:af:19:7e:b7:f2:4a:a0:dd:b8:23:08:63:
5a:b3:6d:fe:82:09:54:26:87:0d:20:bf:cb:87:fb:
4e:3d:ee:3e:b2:40:f3:39:cb:14:fb:24:30:cf:b4:
95:12:0b:13:ed:62:91:96:0b:23:59:58:8e:15:39:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F4:94:D2:83:7E:15:90:14:C1:95:06:85:62:6B:22:CF:28:57:5B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yPSU0oN-FZAUwZUGhWJrIs8oV1s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.0.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d9:3c:b6:9b:b6:b6:ec:ea:7d:62:68:3f:f2:20:46:2e:80:
85:1a:79:36:6f:ea:8d:3f:dd:cc:b4:99:92:28:ed:11:7f:79:
60:41:3e:27:07:2d:6e:9b:40:b3:d1:60:5d:e8:2b:50:b1:25:
dd:b6:af:57:11:c3:5a:8e:f1:75:3c:a4:3c:50:a7:ad:c9:4b:
34:c7:af:e1:93:a3:f3:11:65:d2:db:e7:53:83:6e:9f:22:ac:
1c:f1:7a:7e:0a:d8:5d:41:33:c5:81:5e:fb:b0:14:7a:38:f6:
fc:7d:2e:9a:07:63:67:46:46:0b:49:c1:43:38:5b:ff:3c:e3:
2c:30:26:7a:00:c8:70:72:51:f2:12:ae:1f:82:0b:b1:82:cc:
6b:0d:5e:25:22:20:f4:1d:4f:46:4b:b7:da:f3:25:06:a7:b2:
96:0b:6a:4d:4c:3a:7f:f8:b5:5e:c0:b7:26:d3:dc:80:93:2f:
1a:75:d9:ff:90:21:a4:8b:06:b0:e3:f3:5d:54:42:35:9c:aa:
09:b2:50:fc:bc:d3:07:7f:92:2d:bc:2d:df:ff:b3:83:27:30:
97:e2:72:f1:1e:40:a4:b6:17:29:19:7f:d5:4c:d8:67:36:2f:
ed:39:da:0b:df:0c:ef:8d:6f:b3:ed:5f:db:b4:b9:30:3a:b7:
63:40:3c:bd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICECcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM3NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM4RjQ5NEQyODM3RTE1
OTAxNEMxOTUwNjg1NjI2QjIyQ0YyODU3NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP4nRkydfMBNz85DEru1POQwzd8HO8OStLFXcXQqwdhwMFeFj4
xNNVNhQI9nrjiC+xJRCEcKHvqQ5pIvCu0f4j0O1Sx1eRz5Rmbgi4GIpD4X2y/bYl
v0Nhevj0szhop88TcyAh3ykgiCwGjP1PSIKWKEdX1SZl2zdE9ebmpb6VdX3cCCEv
l23KE9zG8V/up1EsFnATVvzAmLhKzm3zaWHMO5BucGV6dkNzmojg2kylKn80ygIK
wsYriSao/oWpo3rMSXkjoq8ZfrfySqDduCMIY1qzbf6CCVQmhw0gv8uH+0497j6y
QPM5yxT7JDDPtJUSCxPtYpGWCyNZWI4VOQq1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyPSU0oN+FZAUwZUGhWJrIs8oV1swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3lQU1Uwb04tRlpBVXdaVUdo
V0pySXM4b1Yxcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QAAwDQYJKoZIhvcNAQELBQADggEBADbZPLabtrbs6n1iaD/yIEYugIUaeTZv6o0/
3cy0mZIo7RF/eWBBPicHLW6bQLPRYF3oK1CxJd22r1cRw1qO8XU8pDxQp63JSzTH
r+GTo/MRZdLb51ODbp8irBzxen4K2F1BM8WBXvuwFHo49vx9LpoHY2dGRgtJwUM4
W/884ywwJnoAyHByUfISrh+CC7GCzGsNXiUiIPQdT0ZLt9rzJQanspYLak1MOn/4
tV7AtybT3ICTLxp12f+QIaSLBrDj811UQjWcqgmyUPy80wd/ki28Ld//s4MnMJfi
cvEeQKS2FykZf9VM2Gc2L+052gvfDO+Nb7PtX9u0uTA6t2NAPL0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org