Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EYyemcyRFKR2QlqhniBbSE2KZro.roa
File: EYyemcyRFKR2QlqhniBbSE2KZro.roa (raw, json)
Hash identifier: bWTnGVk1ePQyGwcV0hNNPE83iXSxtiY72WwiZI31HN0=
Subject key identifier: 11:8C:9E:99:CC:91:14:A4:76:42:5A:A1:9E:20:5B:48:4D:8A:66:BA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EYyemcyRFKR2QlqhniBbSE2KZro.roa
Signing time: Thu 15 Sep 2022 02:35:32 +0000
ROA not before: Thu 15 Sep 2022 02:35:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 119.77.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=118C9E99CC9114A476425AA19E205B484D8A66BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:c9:51:5f:36:09:44:b7:be:9a:07:4d:66:
d8:b4:dd:20:ff:4c:87:55:d1:3e:54:c3:20:10:e4:
65:45:6c:c4:8b:90:5c:25:7c:0c:7f:ab:2e:bd:7c:
c7:0c:a9:d1:80:19:64:76:b5:0c:11:91:26:03:12:
d7:35:ed:e1:e8:17:1e:d3:15:dd:97:0c:4d:22:63:
3d:6f:0b:7d:4a:4d:9c:85:92:6a:6d:87:67:0a:3e:
d3:ab:54:0a:89:25:ec:0b:b7:b7:1b:7a:3a:44:c1:
06:b7:01:b2:05:7d:0a:ae:2b:1a:b6:1e:d4:bd:58:
44:40:19:7b:70:2c:6d:4f:81:9e:8d:39:2b:8d:b9:
f7:64:5a:61:f9:db:54:cb:c2:3c:af:95:2a:62:3f:
67:8f:41:44:23:30:a6:48:2b:b7:1c:31:e5:b0:ac:
f2:f6:b1:ef:d8:b0:c0:13:e5:ef:91:a8:2f:f1:86:
61:25:b2:8c:6b:15:e4:61:28:13:22:77:d6:94:e0:
7b:c4:4d:00:97:a1:af:56:25:a9:c7:68:08:1d:e8:
a2:9b:b6:22:e0:a4:c5:cd:48:d4:6c:93:b4:00:79:
e7:bf:29:a5:85:e9:88:54:80:52:d2:88:0c:25:18:
ba:ed:c2:96:ae:56:26:b9:59:97:0c:ad:dd:15:00:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:9E:99:CC:91:14:A4:76:42:5A:A1:9E:20:5B:48:4D:8A:66:BA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EYyemcyRFKR2QlqhniBbSE2KZro.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9c:d6:ac:13:af:83:18:a1:46:c0:d7:90:75:ee:41:11:1c:ba:
ff:99:8b:e5:d2:81:f8:c6:37:f6:82:3a:c9:39:67:47:bf:2a:
ee:83:0a:b2:c7:89:ee:51:9e:6f:15:a5:32:1d:75:4f:e4:f9:
06:5f:ca:51:51:ac:2f:c4:d3:ae:af:24:af:cd:82:e2:76:a2:
e5:3a:05:59:0f:a6:68:e7:e0:b8:67:1f:da:a7:dd:02:75:6e:
66:fe:11:c5:57:47:18:a4:91:e8:8b:4a:87:aa:dd:a7:c3:a2:
ec:35:f9:b1:86:b0:4c:ac:5b:40:57:63:b5:68:f2:2e:99:c8:
a4:8c:f9:d6:5c:73:c6:bc:b4:60:fb:de:e1:66:6e:e1:aa:19:
74:db:4a:55:35:08:09:eb:22:a2:8d:c0:2c:23:e1:0a:8b:16:
42:fb:9c:ac:c9:53:e2:7f:b4:a3:27:34:21:aa:61:ab:d8:49:
87:c0:96:45:4c:65:cd:32:0a:53:97:3e:40:5e:a4:45:2d:0c:
64:4b:c8:a2:1d:cf:16:1e:1a:7a:58:e3:e6:7d:4a:96:49:1c:
8d:da:4a:78:3d:6a:e4:7e:53:8f:19:a9:2f:0a:13:c2:74:1d:
f8:89:98:6e:c1:25:30:e6:81:d0:72:67:db:e7:f0:8d:f7:14:
cb:e3:a1:f6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDExOEM5RTk5Q0M5MTE0
QTQ3NjQyNUFBMTlFMjA1QjQ4NEQ4QTY2QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwjclRXzYJRLe+mgdNZti03SD/TIdV0T5UwyAQ5GVFbMSLkFwl
fAx/qy69fMcMqdGAGWR2tQwRkSYDEtc17eHoFx7TFd2XDE0iYz1vC31KTZyFkmpt
h2cKPtOrVAqJJewLt7cbejpEwQa3AbIFfQquKxq2HtS9WERAGXtwLG1PgZ6NOSuN
ufdkWmH521TLwjyvlSpiP2ePQUQjMKZIK7ccMeWwrPL2se/YsMAT5e+RqC/xhmEl
soxrFeRhKBMid9aU4HvETQCXoa9WJanHaAgd6KKbtiLgpMXNSNRsk7QAeee/KaWF
6YhUgFLSiAwlGLrtwpauVia5WZcMrd0VAC/9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEYyemcyRFKR2QlqhniBbSE2KZrowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VZeWVtY3lSRktSMlFscWhu
aUJiU0UyS1pyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3
TYAwDQYJKoZIhvcNAQELBQADggEBAJzWrBOvgxihRsDXkHXuQREcuv+Zi+XSgfjG
N/aCOsk5Z0e/Ku6DCrLHie5Rnm8VpTIddU/k+QZfylFRrC/E066vJK/NguJ2ouU6
BVkPpmjn4LhnH9qn3QJ1bmb+EcVXRxikkeiLSoeq3afDouw1+bGGsEysW0BXY7Vo
8i6ZyKSM+dZcc8a8tGD73uFmbuGqGXTbSlU1CAnrIqKNwCwj4QqLFkL7nKzJU+J/
tKMnNCGqYavYSYfAlkVMZc0yClOXPkBepEUtDGRLyKIdzxYeGnpY4+Z9SpZJHI3a
Sng9auR+U48ZqS8KE8J0HfiJmG7BJTDmgdByZ9vn8I33FMvjofY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org