Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqWESqcgtMAfsjVBukbBtQAxo2Y.roa
File: EqWESqcgtMAfsjVBukbBtQAxo2Y.roa (raw, json)
Hash identifier: ETfg7z+5RRdYaW8WMo1USC8V+uA9kpOe3hKnj2Xh2fw=
Subject key identifier: 12:A5:84:4A:A7:20:B4:C0:1F:B2:35:41:BA:46:C1:B5:00:31:A3:66
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1015
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqWESqcgtMAfsjVBukbBtQAxo2Y.roa
Signing time: Sun 07 Feb 2021 12:37:32 +0000
ROA not before: Sun 07 Feb 2021 12:37:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.58.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4117 (0x1015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=12A5844AA720B4C01FB23541BA46C1B50031A366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:07:84:73:01:6b:b0:4a:ae:c9:21:d5:6c:
66:aa:e8:86:57:1f:2d:ac:75:a7:16:fc:7b:0e:ac:
68:41:81:6f:1d:41:cd:d2:ba:73:eb:47:7c:d5:53:
80:85:55:c0:34:ac:9b:e4:61:64:f6:df:d8:a5:c2:
12:27:6f:06:ae:0c:a1:b0:b2:7c:77:03:7f:64:db:
b9:07:54:bd:01:7f:dc:c4:7e:b0:11:6a:ad:77:7d:
e8:c2:85:8a:82:2d:85:1a:a0:a4:81:35:a1:21:84:
86:10:e5:8f:55:4f:39:41:aa:11:a3:77:ec:20:2e:
6a:60:87:91:e8:e9:25:73:91:12:f8:ae:44:0d:a7:
fb:94:38:38:0d:61:02:99:c8:48:31:05:26:19:45:
e8:d7:21:a0:a0:7d:38:20:1e:82:71:25:0e:e9:ec:
c1:3d:8d:a8:fd:81:9b:de:91:52:f2:a4:f8:2f:49:
14:41:3c:b9:0a:5c:f3:18:81:1e:6e:9d:41:cf:c3:
38:4d:d2:cd:5a:60:e9:15:81:3e:e3:3e:70:1b:8c:
a7:99:b0:68:03:e7:c6:f5:1d:5e:ca:9c:13:5a:66:
67:16:51:dc:9b:7a:5e:81:ef:1c:00:e2:d4:57:1b:
85:fc:51:75:41:17:82:77:fe:69:98:86:16:c0:49:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A5:84:4A:A7:20:B4:C0:1F:B2:35:41:BA:46:C1:B5:00:31:A3:66
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqWESqcgtMAfsjVBukbBtQAxo2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.104.0/22
Signature Algorithm: sha256WithRSAEncryption
81:61:f2:2c:29:21:8c:fc:f6:11:0a:b2:c7:dc:f7:e4:2b:56:
86:27:72:37:11:ca:61:3f:12:e9:a1:3a:46:58:be:12:b5:53:
9c:d9:2f:a2:c5:83:97:54:8c:b9:7a:3a:41:ae:66:b2:92:5d:
2e:97:90:25:b4:a9:74:54:1b:9d:8b:86:7c:90:1f:64:c6:9d:
1f:26:90:ee:8c:a5:cb:d5:82:87:40:4d:f0:76:33:bd:01:c5:
d7:b1:51:1a:a6:6d:2b:ab:78:56:50:ea:1d:40:4b:9b:3c:6f:
f4:01:86:e2:e7:0b:b5:29:5d:a5:93:7c:41:a0:2d:f9:9d:64:
e8:93:6c:a0:23:20:29:40:2e:cf:27:d8:27:6c:48:69:72:56:
a2:f7:49:5e:ef:70:6b:6b:5a:52:7f:99:b7:c0:fe:6c:74:fb:
2e:fc:aa:bb:4b:51:b9:80:f4:c4:8c:aa:51:92:38:08:4a:43:
6d:d8:93:12:10:da:2d:ea:e0:cd:85:3b:53:1e:28:0f:d3:e2:
d8:05:c3:df:5f:4f:5d:cf:43:ae:cb:2b:d9:5f:84:d7:fb:1d:
2e:d2:70:0b:dd:2c:83:23:d4:d2:5e:3d:8b:64:63:aa:f5:31:
74:d6:e8:3d:d8:17:79:11:0c:b0:8c:6c:88:00:9c:cf:c3:5e:
51:47:9a:3a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM3MzJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDEyQTU4NDRBQTcyMEI0
QzAxRkIyMzU0MUJBNDZDMUI1MDAzMUEzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqLweEcwFrsEquySHVbGaq6IZXHy2sdacW/HsOrGhBgW8dQc3S
unPrR3zVU4CFVcA0rJvkYWT239ilwhInbwauDKGwsnx3A39k27kHVL0Bf9zEfrAR
aq13fejChYqCLYUaoKSBNaEhhIYQ5Y9VTzlBqhGjd+wgLmpgh5Ho6SVzkRL4rkQN
p/uUODgNYQKZyEgxBSYZRejXIaCgfTggHoJxJQ7p7ME9jaj9gZvekVLypPgvSRRB
PLkKXPMYgR5unUHPwzhN0s1aYOkVgT7jPnAbjKeZsGgD58b1HV7KnBNaZmcWUdyb
el6B7xwA4tRXG4X8UXVBF4J3/mmYhhbAST6bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEqWESqcgtMAfsjVBukbBtQAxo2YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VxV0VTcWNndE1BZnNqVkJ1
a2JCdFFBeG8yWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OmgwDQYJKoZIhvcNAQELBQADggEBAIFh8iwpIYz89hEKssfc9+QrVoYncjcRymE/
EumhOkZYvhK1U5zZL6LFg5dUjLl6OkGuZrKSXS6XkCW0qXRUG52LhnyQH2TGnR8m
kO6MpcvVgodATfB2M70BxdexURqmbSureFZQ6h1AS5s8b/QBhuLnC7UpXaWTfEGg
LfmdZOiTbKAjIClALs8n2CdsSGlyVqL3SV7vcGtrWlJ/mbfA/mx0+y78qrtLUbmA
9MSMqlGSOAhKQ23YkxIQ2i3q4M2FO1MeKA/T4tgFw99fT13PQ67LK9lfhNf7HS7S
cAvdLIMj1NJePYtkY6r1MXTW6D3YF3kRDLCMbIgAnM/DXlFHmjo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org