Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B6yLyc5fSYf7zrDpbeTaOqkV8EI.roa
File: B6yLyc5fSYf7zrDpbeTaOqkV8EI.roa (raw, json)
Hash identifier: eN64U1PxPHqa2tfJpzRySaq43+luvZ/nJXOvAIIbDnY=
Subject key identifier: 07:AC:8B:C9:CE:5F:49:87:FB:CE:B0:E9:6D:E4:DA:3A:A9:15:F0:42
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B5B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B6yLyc5fSYf7zrDpbeTaOqkV8EI.roa
Signing time: Fri 07 Apr 2023 07:14:47 +0000
ROA not before: Fri 07 Apr 2023 07:14:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.254.0.0/18 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7003 (0x1b5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 7 07:14:47 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=07AC8BC9CE5F4987FBCEB0E96DE4DA3AA915F042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:80:f4:43:15:73:9a:fd:d1:41:40:0f:2a:
e2:ff:46:77:b9:c1:77:22:25:50:15:1a:27:ac:66:
38:6c:48:6a:5f:15:5e:d6:2b:a2:9a:9b:13:37:ce:
9a:30:2c:a9:d6:6c:1e:eb:49:34:da:ff:a7:ea:31:
8c:d8:90:6a:9f:a6:1a:0b:fb:e3:ce:ec:61:44:38:
62:23:9d:2e:f0:a2:36:f9:32:32:b7:73:2f:8a:63:
82:b2:95:2a:7c:cd:d5:0e:e0:30:ab:b5:84:ce:6b:
2a:ad:34:d5:a7:24:48:b1:44:8c:19:d6:c2:20:c0:
74:ad:1b:7c:de:69:24:f7:13:a2:b9:76:14:3d:a9:
12:55:ba:da:f4:3c:ab:0d:36:aa:9c:77:d0:62:db:
26:9d:1c:9c:4f:6e:49:97:de:5e:61:90:cd:12:45:
3b:09:2f:eb:68:e1:e0:01:33:3a:e6:a6:d1:89:e3:
2d:13:72:ee:1d:2a:d7:94:44:b9:fc:da:e5:6c:ab:
4e:39:a4:e9:3b:ac:ad:71:2f:25:54:3a:92:b3:68:
2d:f7:75:1f:7c:e7:9b:7c:df:40:2a:50:f6:d5:52:
12:05:59:38:dc:5d:02:38:52:06:79:35:78:10:55:
d2:c0:95:87:73:42:90:df:f7:07:8b:2a:2b:8f:22:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:8B:C9:CE:5F:49:87:FB:CE:B0:E9:6D:E4:DA:3A:A9:15:F0:42
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B6yLyc5fSYf7zrDpbeTaOqkV8EI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:c8:ea:e9:cc:b5:82:32:be:e2:30:1c:20:e5:93:56:e1:47:
fe:38:f2:a8:8f:a5:7d:92:6f:bd:46:f9:d3:41:32:5e:9c:91:
09:db:1c:ae:c1:86:5d:82:99:1a:3c:00:42:be:67:06:d0:53:
02:aa:a0:ed:91:cb:c0:0d:cb:59:32:c6:35:d1:dc:02:90:0a:
e6:85:45:48:92:e4:cd:94:f8:76:7e:71:73:db:3f:d5:0a:e8:
a0:cf:a3:37:10:72:a6:43:b3:0d:dd:6a:9f:80:04:ae:03:6a:
e9:ea:ad:3a:f8:f8:b2:82:1c:36:ca:1b:71:44:40:e3:8c:2b:
32:e8:ec:f8:2f:1a:b3:07:15:58:50:89:e4:55:04:64:27:71:
13:c1:9a:49:35:ba:a1:9b:91:61:db:73:20:ab:23:07:58:e0:
6a:c3:b2:f6:3d:30:42:6a:52:8f:47:2c:38:7d:1c:bf:83:85:
78:db:4d:dc:31:50:1f:ab:21:a4:7c:51:e7:75:ab:cf:03:37:
21:04:a7:a2:b1:42:d8:82:55:79:91:9c:8a:79:02:56:e2:2a:
8a:42:a2:f4:4d:8f:4e:73:74:5d:b4:6d:fa:62:e7:67:07:75:
90:5d:cf:c8:6e:f3:b3:49:25:15:68:13:ea:7f:02:45:65:69:
70:5a:cc:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA0MDcw
NzE0NDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA3QUM4QkM5Q0U1RjQ5
ODdGQkNFQjBFOTZERTREQTNBQTkxNUYwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQN4D0QxVzmv3RQUAPKuL/Rne5wXciJVAVGiesZjhsSGpfFV7W
K6KamxM3zpowLKnWbB7rSTTa/6fqMYzYkGqfphoL++PO7GFEOGIjnS7wojb5MjK3
cy+KY4KylSp8zdUO4DCrtYTOayqtNNWnJEixRIwZ1sIgwHStG3zeaST3E6K5dhQ9
qRJVutr0PKsNNqqcd9Bi2yadHJxPbkmX3l5hkM0SRTsJL+to4eABMzrmptGJ4y0T
cu4dKteURLn82uVsq045pOk7rK1xLyVUOpKzaC33dR9855t830AqUPbVUhIFWTjc
XQI4UgZ5NXgQVdLAlYdzQpDf9weLKiuPIlMJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUB6yLyc5fSYf7zrDpbeTaOqkV8EIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0I2eUx5YzVmU1lmN3pyRHBi
ZVRhT3FrVjhFSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6
/gAwDQYJKoZIhvcNAQELBQADggEBADrI6unMtYIyvuIwHCDlk1bhR/448qiPpX2S
b71G+dNBMl6ckQnbHK7Bhl2CmRo8AEK+ZwbQUwKqoO2Ry8ANy1kyxjXR3AKQCuaF
RUiS5M2U+HZ+cXPbP9UK6KDPozcQcqZDsw3dap+ABK4DaunqrTr4+LKCHDbKG3FE
QOOMKzLo7PgvGrMHFVhQieRVBGQncRPBmkk1uqGbkWHbcyCrIwdY4GrDsvY9MEJq
Uo9HLDh9HL+DhXjbTdwxUB+rIaR8Ued1q88DNyEEp6KxQtiCVXmRnIp5AlbiKopC
ovRNj05zdF20bfpi52cHdZBdz8hu87NJJRVoE+p/AkVlaXBazFQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org