Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1ZDV8KSH-Zc1lC4MB3hVZzA0rx8.roa
File: 1ZDV8KSH-Zc1lC4MB3hVZzA0rx8.roa (raw, json)
Hash identifier: 84BXA8OyFFpSC0GYkpx9CPeDT+b0gpVW+ywy1SVomqg=
Subject key identifier: D5:90:D5:F0:A4:87:F9:97:35:94:2E:0C:07:78:55:67:30:34:AF:1F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1ZDV8KSH-Zc1lC4MB3hVZzA0rx8.roa
Signing time: Thu 15 Sep 2022 02:36:22 +0000
ROA not before: Thu 15 Sep 2022 02:36:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D590D5F0A487F99735942E0C077855673034AF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:10:ec:03:21:d7:ae:bb:e2:45:af:d7:a0:
17:95:c1:71:bd:95:d1:d6:b0:dc:bb:ac:c9:33:27:
61:1c:e8:48:56:f8:52:94:2c:d7:0f:a4:9e:e5:ca:
4e:27:84:f8:ce:81:55:1c:43:2e:89:ca:c1:b0:f3:
64:57:ae:37:e6:d8:96:c5:b5:b9:6a:99:e8:6b:f1:
a6:74:ca:19:39:ba:ff:8d:68:76:b9:c2:b4:cd:34:
26:80:e2:62:af:28:d1:3c:bf:7d:54:03:88:d5:a9:
31:1b:49:60:af:be:88:f5:ef:f2:98:dd:0c:55:0c:
aa:8c:c3:be:fb:1f:82:9b:ce:3a:e6:48:61:1e:10:
54:03:8a:9b:7a:6e:7c:42:d2:88:21:ce:ab:90:02:
32:b8:71:31:2f:d6:af:b3:cd:89:d3:4d:a3:52:cc:
ab:08:7e:80:d3:38:f7:4a:60:f2:9f:28:ef:de:2d:
7a:68:e9:69:b9:28:9d:8c:68:d5:f7:c8:e8:f2:0e:
67:bd:11:51:a4:da:fc:42:84:e0:43:d3:fa:90:64:
a8:b5:e7:fc:3b:6f:4d:19:94:ad:93:7c:d8:96:cf:
4a:d6:40:f1:95:2a:bc:dc:4f:57:e3:de:6a:b3:d2:
ac:ac:6c:54:84:da:6f:0b:52:bf:04:00:21:91:27:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:D5:F0:A4:87:F9:97:35:94:2E:0C:07:78:55:67:30:34:AF:1F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1ZDV8KSH-Zc1lC4MB3hVZzA0rx8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.24.0/21
Signature Algorithm: sha256WithRSAEncryption
20:ab:a7:33:65:b0:5a:ca:11:a2:5a:0e:f0:07:ad:56:bf:17:
e6:db:16:c0:b8:62:ed:47:0b:81:dc:e6:ea:f4:3e:d0:be:79:
82:b5:29:62:a8:24:9b:d7:79:a7:a0:8a:fb:25:15:b7:39:21:
8f:b2:19:ce:54:ab:e7:f3:95:44:68:df:e3:75:ef:da:91:4b:
65:7c:8e:74:9d:91:5e:a4:d7:3e:84:ef:43:42:f1:4a:89:11:
53:54:7b:4a:fe:b5:e8:42:89:87:1a:ca:17:61:10:d8:53:40:
9a:e9:50:0b:2e:84:21:89:80:b9:8f:3c:18:7b:98:95:70:a2:
8e:dc:74:7c:d6:47:80:02:f8:da:3b:a4:f0:2e:ca:bd:de:b0:
d8:0b:98:94:92:74:c1:55:44:12:76:8b:7a:c6:0a:e9:15:8a:
51:1b:01:58:10:47:c6:df:e0:3f:b8:e9:6b:4c:47:38:1e:2c:
7e:ed:56:42:a9:92:95:97:0c:68:74:a5:a1:77:6a:bb:df:f2:
d4:de:6b:8a:7b:e3:e2:4b:49:b9:bb:84:33:3c:9e:31:2f:10:
b3:31:f6:98:e7:5e:59:8d:76:c8:88:c2:31:22:46:ab:a7:0d:
97:3a:79:2a:75:82:71:21:b0:1d:5a:59:39:d3:d1:70:46:e6:
8d:67:f8:f1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQ1OTBENUYwQTQ4N0Y5
OTczNTk0MkUwQzA3Nzg1NTY3MzAzNEFGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPDRDsAyHXrrviRa/XoBeVwXG9ldHWsNy7rMkzJ2Ec6EhW+FKU
LNcPpJ7lyk4nhPjOgVUcQy6JysGw82RXrjfm2JbFtblqmehr8aZ0yhk5uv+NaHa5
wrTNNCaA4mKvKNE8v31UA4jVqTEbSWCvvoj17/KY3QxVDKqMw777H4KbzjrmSGEe
EFQDipt6bnxC0oghzquQAjK4cTEv1q+zzYnTTaNSzKsIfoDTOPdKYPKfKO/eLXpo
6Wm5KJ2MaNX3yOjyDme9EVGk2vxChOBD0/qQZKi15/w7b00ZlK2TfNiWz0rWQPGV
KrzcT1fj3mqz0qysbFSE2m8LUr8EACGRJyE7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1ZDV8KSH+Zc1lC4MB3hVZzA0rx8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFaRFY4S1NILVpjMWxDNE1C
M2hWWnpBMHJ4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nxgwDQYJKoZIhvcNAQELBQADggEBACCrpzNlsFrKEaJaDvAHrVa/F+bbFsC4Yu1H
C4Hc5ur0PtC+eYK1KWKoJJvXeaegivslFbc5IY+yGc5Uq+fzlURo3+N179qRS2V8
jnSdkV6k1z6E70NC8UqJEVNUe0r+tehCiYcayhdhENhTQJrpUAsuhCGJgLmPPBh7
mJVwoo7cdHzWR4AC+No7pPAuyr3esNgLmJSSdMFVRBJ2i3rGCukVilEbAVgQR8bf
4D+46WtMRzgeLH7tVkKpkpWXDGh0paF3arvf8tTea4p74+JLSbm7hDM8njEvELMx
9pjnXlmNdsiIwjEiRqunDZc6eSp1gnEhsB1aWTnT0XBG5o1n+PE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:06:35 2025 by rpki-client