Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/45rKfpC3Diqy_iJYO_aEvavpytM.roa
File: 45rKfpC3Diqy_iJYO_aEvavpytM.roa (raw, json)
Hash identifier: IYEw8nzOwsv9Impo7AnHQLgJoVhMPC+gm8dAhEFpn+U=
Subject key identifier: E3:9A:CA:7E:90:B7:0E:2A:B2:FE:22:58:3B:F6:84:BD:AB:E9:CA:D3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/45rKfpC3Diqy_iJYO_aEvavpytM.roa
Signing time: Thu 15 Sep 2022 02:35:29 +0000
ROA not before: Thu 15 Sep 2022 02:35:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E39ACA7E90B70E2AB2FE22583BF684BDABE9CAD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e9:c2:87:2c:87:0b:88:c9:0f:4a:fb:ae:31:
46:8e:51:2c:4f:dc:d8:96:50:44:71:a7:dc:cf:9d:
8c:41:bc:75:f4:77:c5:7e:45:ea:2d:41:36:59:9d:
a0:1c:7b:10:9c:5f:de:da:fe:74:9e:3b:0f:94:76:
f1:ac:32:8d:22:93:c4:ed:7c:c1:e6:72:9a:99:43:
78:07:97:17:93:21:df:cc:32:1a:00:ee:6f:7a:a6:
30:f5:ca:16:cf:86:05:68:92:4a:26:dc:23:fb:8d:
6b:be:e0:fd:f4:6b:82:a8:0c:6f:dd:2e:44:e9:2b:
8a:df:b5:2f:5d:db:b8:07:3d:f2:8c:6e:22:10:fb:
ef:c8:a4:5e:25:0f:09:1b:24:1c:04:9a:bb:7a:9b:
df:87:43:4c:33:1a:fa:be:bf:cd:88:77:82:d3:ba:
fb:06:83:42:0d:a1:74:12:ff:36:84:c4:c9:ef:01:
77:b7:5c:ef:5b:bd:d6:e3:2b:82:a8:d7:b3:a3:8a:
56:42:b6:34:a5:84:7e:d7:2e:a8:a5:e6:a2:65:0d:
a4:1a:06:56:80:ff:06:09:47:e9:61:65:fc:c0:64:
05:1c:27:d8:df:38:48:4f:ac:78:07:e7:47:48:46:
84:0e:39:e9:65:32:cb:e5:23:ee:4c:fa:2d:f2:05:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:CA:7E:90:B7:0E:2A:B2:FE:22:58:3B:F6:84:BD:AB:E9:CA:D3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/45rKfpC3Diqy_iJYO_aEvavpytM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.80.0/21
Signature Algorithm: sha256WithRSAEncryption
75:ed:b9:d1:5d:e8:04:f7:50:de:87:4c:ef:9f:7e:c5:18:a5:
34:e4:59:5d:9f:f4:1c:d5:02:1e:40:c3:c9:a5:84:38:44:f5:
6f:a1:f4:fd:fd:9a:1e:d6:e8:27:6a:27:be:47:f0:bc:57:fe:
96:c3:aa:45:79:8d:d6:90:2e:17:ee:1a:83:ff:33:4d:0b:95:
47:28:ab:ab:0c:9b:b0:e8:3a:16:ce:a4:e1:46:4e:a4:8a:95:
0c:c8:3c:14:cc:3e:dc:dd:09:3b:aa:8b:25:2d:a7:e3:57:1f:
e3:ee:dc:26:3c:f0:8b:76:38:13:f8:3e:ea:a8:ca:2e:c5:cd:
be:e2:9b:be:32:ad:af:eb:06:49:86:b3:20:93:2b:68:3c:cc:
65:5c:a1:2f:e5:c2:42:ef:f9:06:45:57:c7:46:9b:3a:52:09:
9d:ca:57:89:a3:77:b5:e4:f0:66:de:de:ac:ba:13:df:cc:f5:
56:b1:75:8e:6d:4e:7e:5e:70:25:2b:d1:b5:0b:ba:9f:d7:93:
cf:b7:c3:c5:2b:9f:ec:5a:b4:50:33:1c:48:d2:1a:a7:28:76:
e2:d3:2a:0a:9a:16:88:78:25:ce:e3:cb:5c:e5:29:e1:c1:73:
0b:11:fd:7e:c5:a0:47:11:5b:41:1c:ce:72:db:56:84:6a:84:
e0:9a:6b:93
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEUzOUFDQTdFOTBCNzBF
MkFCMkZFMjI1ODNCRjY4NEJEQUJFOUNBRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD06cKHLIcLiMkPSvuuMUaOUSxP3NiWUERxp9zPnYxBvHX0d8V+
ReotQTZZnaAcexCcX97a/nSeOw+UdvGsMo0ik8TtfMHmcpqZQ3gHlxeTId/MMhoA
7m96pjD1yhbPhgVokkom3CP7jWu+4P30a4KoDG/dLkTpK4rftS9d27gHPfKMbiIQ
++/IpF4lDwkbJBwEmrt6m9+HQ0wzGvq+v82Id4LTuvsGg0INoXQS/zaExMnvAXe3
XO9bvdbjK4Ko17OjilZCtjSlhH7XLqil5qJlDaQaBlaA/wYJR+lhZfzAZAUcJ9jf
OEhPrHgH50dIRoQOOellMsvlI+5M+i3yBYHTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU45rKfpC3Diqy/iJYO/aEvavpytMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzQ1cktmcEMzRGlxeV9pSllP
X2FFdmF2cHl0TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
ZFAwDQYJKoZIhvcNAQELBQADggEBAHXtudFd6AT3UN6HTO+ffsUYpTTkWV2f9BzV
Ah5Aw8mlhDhE9W+h9P39mh7W6CdqJ75H8LxX/pbDqkV5jdaQLhfuGoP/M00LlUco
q6sMm7DoOhbOpOFGTqSKlQzIPBTMPtzdCTuqiyUtp+NXH+Pu3CY88It2OBP4Puqo
yi7Fzb7im74yra/rBkmGsyCTK2g8zGVcoS/lwkLv+QZFV8dGmzpSCZ3KV4mjd7Xk
8Gbe3qy6E9/M9VaxdY5tTn5ecCUr0bULup/Xk8+3w8Urn+xatFAzHEjSGqcoduLT
KgqaFoh4Jc7jy1zlKeHBcwsR/X7FoEcRW0EcznLbVoRqhOCaa5M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org