Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7yA1b6P9I_kNhkoVHKV5dDPuy5o.roa
File: 7yA1b6P9I_kNhkoVHKV5dDPuy5o.roa (raw, json)
Hash identifier: Bha5E7sJFQP1f2FdehdjKeMf7cT3DhJ72Jn3mBLW1YA=
Subject key identifier: EF:20:35:6F:A3:FD:23:F9:0D:86:4A:15:1C:A5:79:74:33:EE:CB:9A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B9C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7yA1b6P9I_kNhkoVHKV5dDPuy5o.roa
Signing time: Tue 06 Jun 2023 08:04:07 +0000
ROA not before: Tue 06 Jun 2023 08:04:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.160.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7068 (0x1b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jun 6 08:04:07 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EF20356FA3FD23F90D864A151CA5797433EECB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:7e:e5:3f:d6:38:6a:01:30:d1:99:0d:75:
41:77:8d:99:8c:ea:ff:f4:7d:11:b4:05:48:27:46:
d9:c2:dc:34:af:0a:d8:43:6b:ce:4c:b9:2a:0c:db:
f7:b8:7b:e6:50:1b:5f:4e:a1:a2:27:64:4c:46:aa:
d8:4a:cd:72:96:9c:26:ec:80:fb:dd:06:6e:19:b7:
9c:37:df:17:31:78:6b:f5:ec:c7:46:8b:c4:f3:cf:
bf:e0:9e:d5:0b:25:21:78:15:c1:4d:c3:5a:3f:11:
3e:1f:b9:43:6b:4c:f9:2e:cb:cc:88:46:6c:00:99:
41:4b:9c:26:68:f0:a0:2e:4d:f1:2b:30:80:88:18:
12:36:ab:5c:60:b1:e7:b5:3c:f7:4a:6d:82:f9:02:
42:0a:2f:0d:d7:bd:1b:fd:9e:2c:09:98:45:fe:9e:
de:fc:c2:bd:a4:56:93:99:cd:55:4c:05:ee:a2:8c:
a1:2d:4c:67:68:95:3d:b9:8c:a3:2c:ad:61:90:52:
66:18:34:a1:eb:40:78:76:23:3c:bd:da:d5:66:8e:
ea:5c:bb:82:b5:87:55:e8:f2:6f:5d:e9:53:13:74:
98:3b:67:53:a4:ac:89:cb:8e:9a:0a:16:90:af:92:
fb:e9:80:1e:23:01:ec:4a:94:6c:8b:42:bc:77:eb:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:20:35:6F:A3:FD:23:F9:0D:86:4A:15:1C:A5:79:74:33:EE:CB:9A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7yA1b6P9I_kNhkoVHKV5dDPuy5o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:5b:60:a3:50:d7:5c:d2:dc:fa:15:c2:82:07:5b:06:77:b8:
1b:9d:b7:ae:bb:fb:dc:e5:0b:34:db:e7:15:ba:32:64:3c:0b:
a6:97:b7:d7:7a:ff:62:4f:1a:93:53:79:fe:c4:68:ba:09:d3:
b9:2f:78:bc:79:fd:0c:0a:7b:91:47:3d:28:02:d4:89:c1:ec:
8c:8b:8d:09:87:c1:34:8b:eb:ac:3f:0f:e4:95:20:79:88:cc:
b5:66:d1:f9:b3:c9:69:27:eb:9a:36:4d:5f:22:38:3a:1f:c5:
39:5f:04:f4:dd:44:48:6e:1d:06:ee:d4:44:b0:bd:f9:72:06:
f5:c5:3b:0b:f9:d2:44:7a:5a:f9:64:b6:d4:4f:5e:33:cd:ff:
08:fe:28:64:ce:10:6d:59:02:fc:b8:13:dc:69:a4:2d:b3:ee:
5a:ce:9f:cb:e0:e5:c6:0f:5c:bc:20:ff:46:ec:df:7f:35:12:
82:34:8e:20:c0:89:69:7e:80:7d:db:a4:ee:83:a5:fb:3b:53:
0e:a5:95:35:de:ac:4a:1d:72:bf:d1:40:9b:a8:e8:53:7a:09:
9c:2c:b8:ab:92:97:49:65:5a:b1:17:26:51:96:27:50:4a:be:
10:60:61:f3:c6:2a:66:bb:d2:dc:68:b3:89:27:47:10:5b:77:
a3:0a:39:55
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA2MDYw
ODA0MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVGMjAzNTZGQTNGRDIz
RjkwRDg2NEExNTFDQTU3OTc0MzNFRUNCOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdGH7lP9Y4agEw0ZkNdUF3jZmM6v/0fRG0BUgnRtnC3DSvCthD
a85MuSoM2/e4e+ZQG19OoaInZExGqthKzXKWnCbsgPvdBm4Zt5w33xcxeGv17MdG
i8Tzz7/gntULJSF4FcFNw1o/ET4fuUNrTPkuy8yIRmwAmUFLnCZo8KAuTfErMICI
GBI2q1xgsee1PPdKbYL5AkIKLw3XvRv9niwJmEX+nt78wr2kVpOZzVVMBe6ijKEt
TGdolT25jKMsrWGQUmYYNKHrQHh2Izy92tVmjupcu4K1h1Xo8m9d6VMTdJg7Z1Ok
rInLjpoKFpCvkvvpgB4jAexKlGyLQrx36yk7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7yA1b6P9I/kNhkoVHKV5dDPuy5owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzd5QTFiNlA5SV9rTmhrb1ZI
S1Y1ZERQdXk1by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy
xqAwDQYJKoZIhvcNAQELBQADggEBACpbYKNQ11zS3PoVwoIHWwZ3uBudt667+9zl
CzTb5xW6MmQ8C6aXt9d6/2JPGpNTef7EaLoJ07kveLx5/QwKe5FHPSgC1InB7IyL
jQmHwTSL66w/D+SVIHmIzLVm0fmzyWkn65o2TV8iODofxTlfBPTdREhuHQbu1ESw
vflyBvXFOwv50kR6WvlkttRPXjPN/wj+KGTOEG1ZAvy4E9xppC2z7lrOn8vg5cYP
XLwg/0bs3381EoI0jiDAiWl+gH3bpO6Dpfs7Uw6llTXerEodcr/RQJuo6FN6CZws
uKuSl0llWrEXJlGWJ1BKvhBgYfPGKma70txos4knRxBbd6MKOVU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org