Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zvt-UkJelx-jQQPAR20NCzvQMFg.roa
File: zvt-UkJelx-jQQPAR20NCzvQMFg.roa (raw, json)
Hash identifier: ctl78Zrjsla/Q/Mi8hyyE7vcCAdfyQBBFiQT/13d17s=
Subject key identifier: CE:FB:7E:52:42:5E:97:1F:A3:41:03:C0:47:6D:0D:0B:3B:D0:30:58
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 125E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zvt-UkJelx-jQQPAR20NCzvQMFg.roa
Signing time: Wed 29 Sep 2021 02:54:30 +0000
ROA not before: Wed 29 Sep 2021 02:54:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 211.76.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4702 (0x125e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CEFB7E52425E971FA34103C0476D0D0B3BD03058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:cf:f3:38:71:02:0d:54:c0:d0:d2:7a:c3:
57:fe:84:63:f4:b5:34:6a:ea:8a:22:39:c5:59:18:
bd:42:c8:89:85:ab:98:ac:06:56:37:df:57:c6:de:
0b:ba:24:8b:7b:41:f6:04:9e:fa:15:0f:c6:9a:d7:
ff:45:c6:0d:9c:4f:fd:45:a2:0f:3b:f2:d4:56:d3:
e1:79:a9:0a:6c:c2:ed:91:16:3d:cc:05:bd:7a:47:
f5:fc:dd:f8:85:b1:e5:bc:b2:04:93:40:17:c9:17:
69:48:0b:c9:11:9c:37:96:ec:e0:22:c1:6a:74:82:
eb:17:d6:70:df:f3:da:a4:bd:5b:2a:cf:79:f9:8a:
99:a8:ff:25:7f:e7:d3:3b:d4:43:4d:7e:47:00:c2:
da:8b:52:50:97:9e:01:ce:9a:4a:5b:b8:38:b6:f7:
ad:fb:3c:59:47:4b:4f:f0:99:b8:31:de:f5:af:c8:
83:39:4d:fd:fd:f1:25:50:62:73:3c:36:38:c6:39:
dc:ea:cc:9c:19:6e:b7:df:7c:a3:1a:08:e6:9d:d4:
6a:a0:37:41:76:45:6c:fb:da:95:6f:9c:24:9a:07:
ea:d4:6b:d1:ca:b5:5c:b3:15:6e:72:e6:04:4c:71:
9d:71:db:67:1d:08:27:e1:6b:02:fc:0e:fe:21:c3:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FB:7E:52:42:5E:97:1F:A3:41:03:C0:47:6D:0D:0B:3B:D0:30:58
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zvt-UkJelx-jQQPAR20NCzvQMFg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:03:7b:ca:ce:a1:37:5c:b4:0a:c7:6c:af:50:c3:58:a3:e6:
49:c7:26:39:89:a2:b0:7a:d0:2a:06:bc:ba:0c:d8:99:e6:59:
26:d0:46:2f:e2:8c:8b:71:21:5f:a4:95:19:18:44:4e:37:28:
78:3b:92:d9:fd:c4:f1:23:fe:8b:b7:04:6a:92:6c:3d:0a:97:
d5:13:0c:30:30:f2:d3:5a:59:16:b1:cc:ef:df:7a:8f:f9:52:
c4:87:e1:df:e3:c7:23:fb:14:ff:4e:23:38:eb:b3:74:6e:dc:
f7:14:3f:6b:c2:90:8f:0d:ce:59:2f:74:c4:cd:e5:1b:6a:85:
70:d9:0e:b9:2f:23:92:de:dd:21:d0:c6:40:a8:37:05:62:f9:
06:8d:9d:98:b8:65:15:d5:4c:35:a5:9e:1f:09:ac:00:e4:b7:
b7:24:f5:5b:23:3c:dd:15:4c:fe:44:23:3b:99:7a:3c:6c:e2:
c7:b5:c3:7f:39:82:01:5a:85:8c:8d:b7:2e:0b:74:97:9a:71:
fe:97:ce:71:3e:b9:ed:00:ff:8d:5b:dd:b7:ac:a9:f5:38:ff:
99:d1:ce:47:12:35:d9:16:43:b3:7d:fe:7e:65:10:c7:02:8c:
67:ad:00:75:60:bd:7e:25:8b:e4:e1:ae:c2:4e:64:13:b3:8e:
9b:15:1f:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MzBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKENFRkI3RTUyNDI1RTk3
MUZBMzQxMDNDMDQ3NkQwRDBCM0JEMDMwNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDYc/zOHECDVTA0NJ6w1f+hGP0tTRq6ooiOcVZGL1CyImFq5is
BlY331fG3gu6JIt7QfYEnvoVD8aa1/9Fxg2cT/1Fog878tRW0+F5qQpswu2RFj3M
Bb16R/X83fiFseW8sgSTQBfJF2lIC8kRnDeW7OAiwWp0gusX1nDf89qkvVsqz3n5
ipmo/yV/59M71ENNfkcAwtqLUlCXngHOmkpbuDi29637PFlHS0/wmbgx3vWvyIM5
Tf398SVQYnM8NjjGOdzqzJwZbrfffKMaCOad1GqgN0F2RWz72pVvnCSaB+rUa9HK
tVyzFW5y5gRMcZ1x22cdCCfhawL8Dv4hw/m1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzvt+UkJelx+jQQPAR20NCzvQMFgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3p2dC1Va0plbHgtalFRUEFS
MjBOQ3p2UU1GZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TDAwDQYJKoZIhvcNAQELBQADggEBAG0De8rOoTdctArHbK9Qw1ij5knHJjmJorB6
0CoGvLoM2JnmWSbQRi/ijItxIV+klRkYRE43KHg7ktn9xPEj/ou3BGqSbD0Kl9UT
DDAw8tNaWRaxzO/feo/5UsSH4d/jxyP7FP9OIzjrs3Ru3PcUP2vCkI8NzlkvdMTN
5RtqhXDZDrkvI5Le3SHQxkCoNwVi+QaNnZi4ZRXVTDWlnh8JrADkt7ck9VsjPN0V
TP5EIzuZejxs4se1w385ggFahYyNty4LdJeacf6XznE+ue0A/41b3besqfU4/5nR
zkcSNdkWQ7N9/n5lEMcCjGetAHVgvX4li+ThrsJOZBOzjpsVH9o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org