Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5_PJFycVrHJW_5nSDXmTPxdVdxY.roa
File: 5_PJFycVrHJW_5nSDXmTPxdVdxY.roa (raw, json)
Hash identifier: ln5cdKyviZ6FNMD4KZIE6LNZZGZ/Hpp/UC4Pjvm8398=
Subject key identifier: E7:F3:C9:17:27:15:AC:72:56:FF:99:D2:0D:79:93:3F:17:55:77:16
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1145
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5_PJFycVrHJW_5nSDXmTPxdVdxY.roa
Signing time: Sun 07 Feb 2021 13:14:47 +0000
ROA not before: Sun 07 Feb 2021 13:14:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.56.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4421 (0x1145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E7F3C9172715AC7256FF99D20D79933F17557716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:05:71:de:3f:68:67:3f:40:fa:98:a2:61:
bb:c6:a5:16:66:fe:08:c1:42:a0:9a:c5:02:a0:af:
09:df:1b:1c:82:18:2f:4b:de:ee:89:82:39:fc:72:
3b:c9:c1:2f:a1:17:4b:72:21:a4:5e:af:cf:b0:ad:
b3:7e:64:d9:9d:bd:8b:9e:9c:df:33:9a:ca:8e:9b:
6d:cb:2d:09:5d:3e:d2:0c:af:e8:1d:9e:29:0f:e5:
1d:fd:9c:e0:42:ee:cf:86:25:89:67:9c:0c:3c:5f:
46:7d:b6:d0:a6:8a:95:f2:98:c5:89:4f:3d:26:64:
7a:11:3b:f5:18:92:7d:f8:33:ea:ed:87:9f:b0:54:
48:30:a3:84:47:ce:72:4d:eb:59:36:fa:fe:b9:f1:
36:c1:76:53:6a:aa:a8:15:17:3d:b6:b2:a1:68:8d:
ed:0a:cf:ba:4c:e0:07:34:1e:3a:3c:b4:2e:cf:d1:
ec:3b:95:fa:dd:c8:0b:2b:d1:fa:46:58:9f:de:99:
01:37:0a:bd:a8:d9:6d:b5:bf:26:6d:d9:59:2b:34:
48:84:dc:70:ed:f2:3d:6f:94:29:e0:3d:d4:21:94:
49:b0:13:73:94:06:e3:e5:1b:b3:27:fa:26:aa:bb:
07:d6:13:2a:80:24:6c:67:3d:29:71:84:c3:2d:31:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:C9:17:27:15:AC:72:56:FF:99:D2:0D:79:93:3F:17:55:77:16
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5_PJFycVrHJW_5nSDXmTPxdVdxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.172.0/22
Signature Algorithm: sha256WithRSAEncryption
27:4f:bb:2a:6d:1c:8f:31:b8:0b:8e:cc:aa:15:93:83:6a:08:
df:f5:74:38:05:16:75:c0:91:1a:4c:11:06:9c:c5:32:93:5d:
32:23:e9:29:60:78:16:82:2e:d1:9a:48:bf:14:e4:87:92:4f:
4e:72:66:78:d4:9c:be:cd:80:d0:fd:24:37:45:53:44:40:34:
45:60:bd:60:50:98:e6:18:94:7f:39:fb:4f:c8:d4:17:aa:f0:
93:44:47:c6:2a:ce:c7:dd:18:45:05:df:ae:b3:b8:d0:ff:a3:
60:a9:4d:10:77:82:90:3e:0c:19:f2:50:1e:6d:7f:33:11:05:
0b:aa:9f:4c:7d:d0:26:01:ab:b8:c1:7d:45:f3:b9:e1:dd:59:
7d:05:ab:7d:43:e8:01:a9:a3:06:9d:55:72:0f:b1:1f:ac:ae:
42:a9:52:bf:e3:75:1a:9f:1f:1a:88:ae:ca:81:51:d7:ef:cf:
9a:49:ff:3b:3f:df:bd:bd:31:6c:5d:88:a1:dd:a6:bb:00:75:
16:d6:89:97:65:62:a4:03:c8:a9:8e:f6:d9:92:39:4d:33:ab:
1b:5c:83:c0:77:bd:c7:5f:19:a2:49:37:f7:99:ac:33:51:3c:
00:52:78:f0:e4:20:cf:20:c4:24:e7:47:83:01:fb:47:15:a4:
24:42:49:39
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MzE0NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU3RjNDOTE3MjcxNUFD
NzI1NkZGOTlEMjBENzk5MzNGMTc1NTc3MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBuAVx3j9oZz9A+piiYbvGpRZm/gjBQqCaxQKgrwnfGxyCGC9L
3u6Jgjn8cjvJwS+hF0tyIaRer8+wrbN+ZNmdvYuenN8zmsqOm23LLQldPtIMr+gd
nikP5R39nOBC7s+GJYlnnAw8X0Z9ttCmipXymMWJTz0mZHoRO/UYkn34M+rth5+w
VEgwo4RHznJN61k2+v658TbBdlNqqqgVFz22sqFoje0Kz7pM4Ac0Hjo8tC7P0ew7
lfrdyAsr0fpGWJ/emQE3Cr2o2W21vyZt2VkrNEiE3HDt8j1vlCngPdQhlEmwE3OU
BuPlG7Mn+iaquwfWEyqAJGxnPSlxhMMtMTEpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5/PJFycVrHJW/5nSDXmTPxdVdxYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVfUEpGeWNWckhKV181blNE
WG1UUHhkVmR4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OKwwDQYJKoZIhvcNAQELBQADggEBACdPuyptHI8xuAuOzKoVk4NqCN/1dDgFFnXA
kRpMEQacxTKTXTIj6SlgeBaCLtGaSL8U5IeST05yZnjUnL7NgND9JDdFU0RANEVg
vWBQmOYYlH85+0/I1Beq8JNER8YqzsfdGEUF366zuND/o2CpTRB3gpA+DBnyUB5t
fzMRBQuqn0x90CYBq7jBfUXzueHdWX0Fq31D6AGpowadVXIPsR+srkKpUr/jdRqf
HxqIrsqBUdfvz5pJ/zs/3729MWxdiKHdprsAdRbWiZdlYqQDyKmO9tmSOU0zqxtc
g8B3vcdfGaJJN/eZrDNRPABSePDkIM8gxCTnR4MB+0cVpCRCSTk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org