Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zgn3Y3xRNN96ipu0rEXX1CE528Y.roa
File: zgn3Y3xRNN96ipu0rEXX1CE528Y.roa (raw, json)
Hash identifier: l4Mct9ZHaQ4XmmaD8Bcbb4wp/VvlG4IW+v/FD+hgOrk=
Subject key identifier: CE:09:F7:63:7C:51:34:DF:7A:8A:9B:B4:AC:45:D7:D4:21:39:DB:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AD4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zgn3Y3xRNN96ipu0rEXX1CE528Y.roa
Signing time: Tue 29 Sep 2020 10:07:41 +0000
ROA not before: Tue 29 Sep 2020 10:07:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2772 (0xad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CE09F7637C5134DF7A8A9BB4AC45D7D42139DBC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:e6:f0:7f:57:46:e2:37:1c:1e:43:3c:35:
02:50:97:66:bc:c5:73:76:51:aa:4d:ae:0b:4d:80:
ab:dd:ad:b0:c8:05:f3:06:99:da:28:42:70:6e:96:
e6:2e:66:b4:2c:c9:18:21:e4:9e:71:e9:30:47:5f:
d1:a9:a5:33:b8:32:d4:11:d8:b2:26:3b:d9:57:12:
5b:d5:4f:a8:f5:9d:2e:e1:44:75:93:e2:1f:49:4d:
92:c4:9b:c1:0a:68:b9:bc:5c:c6:b8:31:a8:e7:5e:
2e:5c:38:a9:fd:97:94:c0:02:e9:3e:6f:8b:50:18:
55:60:30:d1:48:86:9b:70:2f:a7:a9:56:f2:c5:f3:
0f:0b:81:c1:7c:48:2e:31:bc:59:7a:a3:bb:bf:22:
7e:9d:47:4f:91:1d:d0:8b:d2:d0:12:2f:d4:8c:86:
ee:e9:b0:d3:c7:8c:38:84:db:4c:b3:17:ca:43:db:
83:5a:cb:c6:06:2e:c1:d4:e7:f1:5d:28:0e:90:b0:
a8:9e:70:07:ff:8a:9f:70:c4:ef:71:23:4d:e6:2e:
82:13:51:c9:e8:08:0b:88:bd:01:39:a5:68:50:99:
6b:de:55:f4:d6:60:71:3e:88:c2:cf:1d:65:58:e4:
fc:15:68:ec:f2:73:19:e3:6e:ef:3e:27:46:c7:85:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:09:F7:63:7C:51:34:DF:7A:8A:9B:B4:AC:45:D7:D4:21:39:DB:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zgn3Y3xRNN96ipu0rEXX1CE528Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.120.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:31:e6:e0:d6:6c:c2:16:a3:ae:e5:4f:1b:63:bc:01:1a:c0:
7c:ac:43:6f:cd:5e:52:08:ba:21:01:72:2d:4f:e3:03:8e:46:
dc:f1:af:4e:e2:f4:a5:69:ca:26:25:2a:48:46:db:ef:ca:83:
5e:56:c0:af:3f:f5:61:55:12:e8:17:2c:25:2d:26:81:f4:ad:
0c:9c:46:17:60:db:ae:2c:2d:0d:2a:0e:9b:ba:86:12:37:b2:
01:60:74:32:0a:fd:50:e9:74:1b:ef:45:54:de:7a:ed:bb:68:
1a:23:b0:4e:ed:5f:35:89:b2:4e:1c:cf:ac:a3:c8:5d:2f:9e:
25:cf:ca:06:c2:e5:c7:b1:0f:18:0b:c2:01:c0:31:af:52:84:
e4:15:a6:2f:12:f0:33:37:bf:33:c6:75:0d:ab:99:8d:74:06:
04:86:5b:2b:35:3f:6c:0a:59:62:86:a1:56:29:2b:04:0b:2b:
7e:b7:bc:d1:0a:3c:51:91:f1:b6:aa:5a:a8:d8:fe:96:33:f1:
ce:d3:2b:3c:26:7d:6f:ea:be:34:33:92:a9:1e:32:0b:10:aa:
97:34:98:c0:c1:c5:69:a1:7e:71:e7:8d:4d:c9:83:cc:8d:df:
fa:10:cf:2d:85:6a:2d:64:4c:ca:44:0c:4b:48:44:66:9d:7e:
9b:cc:6c:39
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENFMDlGNzYzN0M1MTM0
REY3QThBOUJCNEFDNDVEN0Q0MjEzOURCQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEh+bwf1dG4jccHkM8NQJQl2a8xXN2UapNrgtNgKvdrbDIBfMG
mdooQnBuluYuZrQsyRgh5J5x6TBHX9GppTO4MtQR2LImO9lXElvVT6j1nS7hRHWT
4h9JTZLEm8EKaLm8XMa4MajnXi5cOKn9l5TAAuk+b4tQGFVgMNFIhptwL6epVvLF
8w8LgcF8SC4xvFl6o7u/In6dR0+RHdCL0tASL9SMhu7psNPHjDiE20yzF8pD24Na
y8YGLsHU5/FdKA6QsKiecAf/ip9wxO9xI03mLoITUcnoCAuIvQE5pWhQmWveVfTW
YHE+iMLPHWVY5PwVaOzycxnjbu8+J0bHhbnlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzgn3Y3xRNN96ipu0rEXX1CE528YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3pnbjNZM3hSTk45NmlwdTBy
RVhYMUNFNTI4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n3gwDQYJKoZIhvcNAQELBQADggEBAAox5uDWbMIWo67lTxtjvAEawHysQ2/NXlII
uiEBci1P4wOORtzxr07i9KVpyiYlKkhG2+/Kg15WwK8/9WFVEugXLCUtJoH0rQyc
Rhdg264sLQ0qDpu6hhI3sgFgdDIK/VDpdBvvRVTeeu27aBojsE7tXzWJsk4cz6yj
yF0vniXPygbC5cexDxgLwgHAMa9ShOQVpi8S8DM3vzPGdQ2rmY10BgSGWys1P2wK
WWKGoVYpKwQLK363vNEKPFGR8baqWqjY/pYz8c7TKzwmfW/qvjQzkqkeMgsQqpc0
mMDBxWmhfnHnjU3Jg8yN3/oQzy2Fai1kTMpEDEtIRGadfpvMbDk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org