Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DIE1XZvURcSToW2xcshZOn2WaPc.roa
File: DIE1XZvURcSToW2xcshZOn2WaPc.roa (raw, json)
Hash identifier: 0XBNOKcSjX56UF/6OuCpAjBJj0gOM1WYXQF/zWx4pI0=
Subject key identifier: 0C:81:35:5D:9B:D4:45:C4:93:A1:6D:B1:72:C8:59:3A:7D:96:68:F7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18D3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DIE1XZvURcSToW2xcshZOn2WaPc.roa
Signing time: Sat 22 Oct 2022 06:05:46 +0000
ROA not before: Sat 22 Oct 2022 06:05:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 119.77.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6355 (0x18d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0C81355D9BD445C493A16DB172C8593A7D9668F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:b8:43:2d:c5:f5:ff:f1:d1:49:b8:f7:5a:
9d:85:18:b9:f3:b1:6f:47:36:86:37:63:77:b6:df:
22:b1:62:ca:ec:51:6d:f5:f8:57:3f:c1:7a:6f:4d:
f4:ae:d7:74:ee:8f:ac:57:4a:4d:1e:9c:40:cf:a4:
1d:d9:e3:6a:41:72:67:7c:b9:1e:0d:59:a4:14:6e:
bf:66:f1:bd:96:ce:f3:d1:a8:b9:87:ad:f2:48:1d:
77:7b:29:4b:5e:1d:dd:88:5e:20:70:3e:01:04:e4:
40:d0:e3:79:73:cf:53:74:69:aa:1b:73:82:f3:19:
2f:41:33:d8:41:26:75:05:c0:f2:c2:4f:52:a8:a2:
58:3e:54:74:80:c3:34:58:05:fb:56:51:e4:c4:9b:
f3:2d:04:d5:1f:3b:a3:eb:05:55:b3:97:16:49:12:
0b:f2:bd:61:16:bf:12:6f:da:69:fe:91:87:a2:16:
a1:a7:50:c0:3b:ba:80:7d:37:50:21:f7:cf:e0:a7:
dc:1e:e5:0e:e9:ac:7f:86:68:3b:d7:5d:46:31:2e:
84:f4:c3:18:2b:36:da:da:7c:1c:f4:1f:47:69:b3:
56:54:24:b6:ba:4c:b9:ea:ea:28:32:fc:70:80:49:
31:16:1c:eb:e9:1b:43:f6:4d:ab:7a:41:07:76:3b:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:81:35:5D:9B:D4:45:C4:93:A1:6D:B1:72:C8:59:3A:7D:96:68:F7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DIE1XZvURcSToW2xcshZOn2WaPc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.140.0/22
Signature Algorithm: sha256WithRSAEncryption
18:23:2c:49:99:88:8e:77:bd:4d:cb:38:52:02:b8:2c:45:46:
35:18:8f:e9:53:52:de:96:a6:b6:1b:cb:54:33:b1:ae:21:27:
c8:51:dc:74:e9:c2:1d:09:a3:92:b3:4c:39:05:34:74:fd:33:
ab:18:8a:ce:0b:58:c4:81:d5:a2:d6:b7:aa:8f:20:0b:24:fc:
c2:03:2d:4c:b2:23:c5:59:16:28:29:b2:e1:ba:20:27:cf:63:
04:e4:3f:e9:6e:8f:43:7b:09:1e:b2:ba:52:e1:d9:2d:df:e8:
2a:42:b6:d1:a1:d4:e9:42:5a:16:a6:39:8f:83:c8:f4:c9:3b:
3e:6b:a7:c4:3c:3a:bb:cb:ee:ca:d8:9f:0f:58:2c:c5:b5:fb:
05:29:bd:14:db:2f:a3:f7:bb:5e:5e:cd:33:30:9a:8d:b0:72:
50:3e:89:af:24:51:a2:f1:48:71:f1:17:46:b3:04:5d:26:a1:
0d:b9:33:99:db:ef:92:f4:1f:45:78:2d:a0:b4:be:f6:18:28:
25:c1:30:94:47:fb:bc:97:28:a7:3c:bb:ff:97:5e:d6:93:52:
75:90:1f:b4:fc:c1:81:ed:9a:8e:09:6e:31:4f:87:ef:7c:73:
3c:2a:bb:6d:b3:9a:b0:15:35:a2:f6:37:bc:9a:ba:92:99:13:
bf:c0:5a:c0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBDODEzNTVEOUJENDQ1
QzQ5M0ExNkRCMTcyQzg1OTNBN0Q5NjY4RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBJrhDLcX1//HRSbj3Wp2FGLnzsW9HNoY3Y3e23yKxYsrsUW31
+Fc/wXpvTfSu13Tuj6xXSk0enEDPpB3Z42pBcmd8uR4NWaQUbr9m8b2WzvPRqLmH
rfJIHXd7KUteHd2IXiBwPgEE5EDQ43lzz1N0aaobc4LzGS9BM9hBJnUFwPLCT1Ko
olg+VHSAwzRYBftWUeTEm/MtBNUfO6PrBVWzlxZJEgvyvWEWvxJv2mn+kYeiFqGn
UMA7uoB9N1Ah98/gp9we5Q7prH+GaDvXXUYxLoT0wxgrNtrafBz0H0dps1ZUJLa6
TLnq6igy/HCASTEWHOvpG0P2Tat6QQd2OznlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDIE1XZvURcSToW2xcshZOn2WaPcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0RJRTFYWnZVUmNTVG9XMnhj
c2haT24yV2FQYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3
TYwwDQYJKoZIhvcNAQELBQADggEBABgjLEmZiI53vU3LOFICuCxFRjUYj+lTUt6W
prYby1Qzsa4hJ8hR3HTpwh0Jo5KzTDkFNHT9M6sYis4LWMSB1aLWt6qPIAsk/MID
LUyyI8VZFigpsuG6ICfPYwTkP+luj0N7CR6yulLh2S3f6CpCttGh1OlCWhamOY+D
yPTJOz5rp8Q8OrvL7srYnw9YLMW1+wUpvRTbL6P3u15ezTMwmo2wclA+ia8kUaLx
SHHxF0azBF0moQ25M5nb75L0H0V4LaC0vvYYKCXBMJRH+7yXKKc8u/+XXtaTUnWQ
H7T8wYHtmo4JbjFPh+98czwqu22zmrAVNaL2N7yaupKZE7/AWsA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org