Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8oRARL78YhZuyRx8UfE2JI4iK-g.roa
File: 8oRARL78YhZuyRx8UfE2JI4iK-g.roa (raw, json)
Hash identifier: mqOW8O8oV9Rg0nsI4RfM4/2xYDdfrlVjhx/xBPOjksM=
Subject key identifier: F2:84:40:44:BE:FC:62:16:6E:C9:1C:7C:51:F1:36:24:8E:22:2B:E8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 199B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8oRARL78YhZuyRx8UfE2JI4iK-g.roa
Signing time: Sat 22 Oct 2022 06:06:44 +0000
ROA not before: Sat 22 Oct 2022 06:06:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6555 (0x199b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F2844044BEFC62166EC91C7C51F136248E222BE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:cc:2d:b5:3a:72:7c:ca:f0:55:d8:eb:43:
38:2c:39:6f:72:ee:47:41:89:69:73:9d:61:aa:d3:
24:d0:cd:40:05:a0:cf:2a:56:27:50:dc:84:03:83:
c0:d0:ba:7a:ff:65:37:2b:f6:97:26:ed:5c:6c:96:
60:8e:af:4b:7c:ba:93:ec:88:68:5a:e9:7c:99:78:
47:09:c9:c7:4f:47:0d:75:3c:92:7e:d7:a9:5f:d3:
db:e4:7b:71:c1:d4:77:f5:1e:eb:be:72:36:1a:85:
6e:0b:d4:28:50:cc:aa:b9:f7:2b:3d:81:ce:5d:c2:
60:68:d6:a4:1f:36:e7:58:c2:17:9c:43:e1:e6:bf:
eb:c6:81:38:59:b6:e0:b6:b9:97:8c:c9:d0:04:0b:
58:21:40:a4:c5:78:72:6b:09:24:9d:45:65:04:cd:
3c:11:7b:0d:c5:90:69:6b:6c:67:35:02:52:b6:2e:
96:ce:56:7c:f2:c1:cd:df:08:29:5b:e1:3d:b7:42:
76:9a:a2:5d:c0:df:2f:6a:1f:ab:9e:c7:ec:0e:b1:
6d:ba:19:4e:0f:58:5c:7d:03:8a:c1:b0:8f:04:73:
db:65:72:4c:28:79:3b:02:84:78:bc:92:42:81:62:
b9:5f:f0:f5:2f:00:1d:b4:12:2f:ca:ce:c7:31:f1:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:84:40:44:BE:FC:62:16:6E:C9:1C:7C:51:F1:36:24:8E:22:2B:E8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8oRARL78YhZuyRx8UfE2JI4iK-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/21
Signature Algorithm: sha256WithRSAEncryption
80:dc:9c:2a:37:df:8d:cd:24:e0:28:4e:df:55:84:3f:c3:81:
82:5b:24:68:1c:09:f8:80:be:f7:89:66:de:9b:8b:21:e3:3e:
3e:9b:fc:48:5c:e4:5b:e6:4d:6c:0a:d4:d2:3b:bb:0b:49:60:
09:b5:b5:80:16:41:4e:23:b3:3e:fa:8d:59:76:a8:45:dd:34:
08:93:0d:1a:89:28:01:e1:f2:dc:ea:eb:b0:6f:15:ed:2c:6b:
4b:76:93:c2:79:b9:bc:ce:6d:e0:69:27:a1:04:c3:34:06:1e:
bc:cb:8f:ba:86:6c:dd:09:e1:10:83:56:8c:58:3c:51:51:de:
b2:0e:ca:62:f4:b0:0c:7b:55:04:67:bf:44:00:ef:51:d1:81:
34:25:cb:23:68:d1:36:90:db:83:62:c6:52:84:7e:d4:a2:a4:
af:3e:7c:00:12:2a:86:d9:53:91:d1:d6:f8:5e:26:09:11:c8:
d5:dc:12:07:74:ac:a8:0e:32:62:6a:24:d7:aa:3d:02:9e:6b:
a4:94:e1:02:2b:c6:a3:0d:a8:20:f1:5b:d6:59:a3:60:19:13:
80:b5:31:1e:d9:e1:3e:65:c6:68:16:a3:a9:39:d3:56:52:23:
cc:95:57:82:0f:53:df:d7:6d:a4:c8:15:00:4f:a6:e2:f7:66:
9b:14:af:2c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2NDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYyODQ0MDQ0QkVGQzYy
MTY2RUM5MUM3QzUxRjEzNjI0OEUyMjJCRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDX5MwttTpyfMrwVdjrQzgsOW9y7kdBiWlznWGq0yTQzUAFoM8q
VidQ3IQDg8DQunr/ZTcr9pcm7VxslmCOr0t8upPsiGha6XyZeEcJycdPRw11PJJ+
16lf09vke3HB1Hf1Huu+cjYahW4L1ChQzKq59ys9gc5dwmBo1qQfNudYwhecQ+Hm
v+vGgThZtuC2uZeMydAEC1ghQKTFeHJrCSSdRWUEzTwRew3FkGlrbGc1AlK2LpbO
Vnzywc3fCClb4T23Qnaaol3A3y9qH6uex+wOsW26GU4PWFx9A4rBsI8Ec9tlckwo
eTsChHi8kkKBYrlf8PUvAB20Ei/Kzscx8bQDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8oRARL78YhZuyRx8UfE2JI4iK+gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzhvUkFSTDc4WWhadXlSeDhV
ZkUySkk0aUstZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANy
xrAwDQYJKoZIhvcNAQELBQADggEBAIDcnCo3343NJOAoTt9VhD/DgYJbJGgcCfiA
vveJZt6biyHjPj6b/Ehc5FvmTWwK1NI7uwtJYAm1tYAWQU4jsz76jVl2qEXdNAiT
DRqJKAHh8tzq67BvFe0sa0t2k8J5ubzObeBpJ6EEwzQGHrzLj7qGbN0J4RCDVoxY
PFFR3rIOymL0sAx7VQRnv0QA71HRgTQlyyNo0TaQ24NixlKEftSipK8+fAASKobZ
U5HR1vheJgkRyNXcEgd0rKgOMmJqJNeqPQKea6SU4QIrxqMNqCDxW9ZZo2AZE4C1
MR7Z4T5lxmgWo6k501ZSI8yVV4IPU9/XbaTIFQBPpuL3ZpsUryw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org