Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3-VHlGSHaaL4VL4DuNjcazWEWag.roa
File: 3-VHlGSHaaL4VL4DuNjcazWEWag.roa (raw, json)
Hash identifier: LczB3n+02nJ4khnWTPgrqPQS8NWRIj9QpN27sSr0Wv8=
Subject key identifier: DF:E5:47:94:64:87:69:A2:F8:54:BE:03:B8:D8:DC:6B:35:84:59:A8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F85
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3-VHlGSHaaL4VL4DuNjcazWEWag.roa
Signing time: Sun 07 Feb 2021 12:34:31 +0000
ROA not before: Sun 07 Feb 2021 12:34:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3973 (0xf85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DFE54794648769A2F854BE03B8D8DC6B358459A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:21:c5:8b:45:88:fa:00:b2:50:7e:cd:e3:
a9:86:1c:7d:ac:8b:d2:ab:cc:35:71:63:0c:bf:e2:
1d:67:a0:83:55:fd:df:93:59:64:d4:5a:b0:ea:cb:
a7:2a:fb:d1:20:5f:48:1a:8b:17:a3:07:b1:f2:9c:
17:29:08:a8:54:f9:0d:2c:f6:c8:4d:09:4b:60:b4:
fb:0a:5b:82:13:3c:9d:12:ad:cf:7f:ce:e5:2c:72:
53:7f:99:7f:f4:96:eb:54:a9:bc:fb:69:44:8e:be:
58:4e:f2:df:1b:26:b0:60:b9:0d:b2:ed:fe:82:75:
52:e7:18:1f:2b:9a:41:ba:c2:db:2f:f9:f3:c9:9f:
8a:09:e7:46:72:6b:4d:12:bf:dc:b2:1b:a6:a6:39:
14:da:a3:fe:57:17:36:c0:cf:5f:64:94:7e:1b:3e:
08:13:ae:59:ce:d9:10:81:57:8b:c2:38:f0:f9:5c:
9e:2d:35:fd:8c:99:cf:c1:01:f3:39:d2:fa:05:b0:
6d:7c:b1:69:84:c9:92:e1:ae:bb:c5:89:67:9a:16:
ed:c5:21:37:bf:ec:a1:17:ea:06:4d:38:8a:82:d7:
08:21:ee:25:16:8c:ff:60:b1:3c:13:c0:b1:15:65:
c6:24:1b:e1:3b:61:ac:4d:df:de:37:61:d3:4c:6a:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:47:94:64:87:69:A2:F8:54:BE:03:B8:D8:DC:6B:35:84:59:A8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3-VHlGSHaaL4VL4DuNjcazWEWag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:6e:c8:00:d5:7a:e9:48:64:f5:b1:33:b8:e0:c6:57:32:56:
cd:15:df:8a:7e:0a:6c:3e:4a:16:5d:d9:e8:61:ed:ff:fc:e3:
fe:2d:6c:b5:60:4e:0d:a1:a4:c3:b8:35:8c:df:27:2c:cb:21:
a9:d0:5a:2e:e4:0b:5f:7d:32:f2:04:49:84:0d:f2:ca:cd:9d:
e4:d8:19:9d:fe:ae:ba:7c:76:80:9c:79:28:85:01:bf:c9:05:
6b:d6:00:3e:00:cc:4a:82:e1:83:cb:ae:fd:ee:3b:60:ae:0f:
b3:59:57:76:2b:94:57:c0:32:ec:3e:88:aa:c6:28:09:81:10:
63:34:cd:6f:e4:af:20:72:06:6f:18:68:02:a5:33:b3:91:bf:
74:79:f5:d0:64:eb:68:cb:e2:54:b9:44:ce:1b:7f:d6:ff:c1:
d9:6e:7d:7e:25:51:07:84:17:47:25:db:30:7e:96:18:e2:15:
63:7d:68:ef:98:fe:78:ea:30:06:0b:01:54:74:19:13:a1:c1:
21:01:77:87:a8:dd:5c:db:62:2a:16:b6:58:0b:8a:8f:49:45:
96:45:03:f8:94:e1:25:b2:e4:2e:eb:c4:79:cc:01:e5:21:48:
ed:5a:43:47:a0:eb:04:06:ae:21:13:24:89:8a:68:d3:fc:52:
96:60:8b:df
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM0MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERGRTU0Nzk0NjQ4NzY5
QTJGODU0QkUwM0I4RDhEQzZCMzU4NDU5QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+oiHFi0WI+gCyUH7N46mGHH2si9KrzDVxYwy/4h1noINV/d+T
WWTUWrDqy6cq+9EgX0gaixejB7HynBcpCKhU+Q0s9shNCUtgtPsKW4ITPJ0Src9/
zuUsclN/mX/0lutUqbz7aUSOvlhO8t8bJrBguQ2y7f6CdVLnGB8rmkG6wtsv+fPJ
n4oJ50Zya00Sv9yyG6amORTao/5XFzbAz19klH4bPggTrlnO2RCBV4vCOPD5XJ4t
Nf2Mmc/BAfM50voFsG18sWmEyZLhrrvFiWeaFu3FITe/7KEX6gZNOIqC1wgh7iUW
jP9gsTwTwLEVZcYkG+E7YaxN3943YdNMavu/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU3+VHlGSHaaL4VL4DuNjcazWEWagwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzMtVkhsR1NIYWFMNFZMNER1
TmpjYXpXRVdhZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TDYwDQYJKoZIhvcNAQELBQADggEBAJ9uyADVeulIZPWxM7jgxlcyVs0V34p+Cmw+
ShZd2ehh7f/84/4tbLVgTg2hpMO4NYzfJyzLIanQWi7kC199MvIESYQN8srNneTY
GZ3+rrp8doCceSiFAb/JBWvWAD4AzEqC4YPLrv3uO2CuD7NZV3YrlFfAMuw+iKrG
KAmBEGM0zW/kryByBm8YaAKlM7ORv3R59dBk62jL4lS5RM4bf9b/wdlufX4lUQeE
F0cl2zB+lhjiFWN9aO+Y/njqMAYLAVR0GROhwSEBd4eo3VzbYioWtlgLio9JRZZF
A/iU4SWy5C7rxHnMAeUhSO1aQ0eg6wQGriETJImKaNP8UpZgi98=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org