Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FPxhbwbWCVYtL2Ytsrp3puRB814.roa
File: FPxhbwbWCVYtL2Ytsrp3puRB814.roa (raw, json)
Hash identifier: MS7h6AnS96Nku73HDUAGr5GpHYveKj2GLIOyFagmj2Q=
Subject key identifier: 14:FC:61:6F:06:D6:09:56:2D:2F:66:2D:B2:BA:77:A6:E4:41:F3:5E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1256
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FPxhbwbWCVYtL2Ytsrp3puRB814.roa
Signing time: Wed 29 Sep 2021 02:54:28 +0000
ROA not before: Wed 29 Sep 2021 02:54:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 122.100.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4694 (0x1256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=14FC616F06D609562D2F662DB2BA77A6E441F35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:a6:f5:0d:1a:a8:04:82:9a:01:b5:82:c9:
42:b0:75:b1:91:dd:57:63:c8:7d:ed:a8:70:53:39:
6a:70:58:bc:f1:89:8a:ab:c7:27:c6:e7:e8:d4:7b:
8c:eb:38:5b:62:0d:c5:b0:2f:46:d9:d3:d1:37:42:
2d:af:b9:83:ef:fe:9f:a6:e3:1c:66:97:26:2e:e8:
6f:ce:62:d4:f3:68:e3:77:ad:f4:27:63:00:a8:52:
fd:bf:68:c6:4b:35:c9:4d:41:66:00:b4:ba:98:27:
1b:d6:b4:af:9f:67:ce:ee:59:2f:b2:7e:62:42:15:
44:38:0a:e0:64:e3:ba:40:9f:7c:61:f5:dd:a5:57:
75:bb:37:28:e7:78:ca:9b:53:5e:5a:58:3f:51:61:
89:05:2f:4b:58:4e:82:b6:00:ae:55:51:12:00:fe:
61:57:4e:7d:71:52:dc:84:c2:f1:27:5d:7f:19:2d:
24:86:f0:05:91:79:24:78:20:bf:57:44:ba:2e:93:
5c:45:39:11:09:a0:70:ae:ee:bb:4e:37:f7:1d:84:
80:bc:f8:ce:00:74:e1:4a:ae:5f:76:13:62:2e:e6:
fd:b7:52:07:05:62:ad:f3:9f:30:77:67:f9:4d:04:
c2:69:e1:33:d4:48:c8:d1:88:9c:a4:9a:06:b6:db:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:61:6F:06:D6:09:56:2D:2F:66:2D:B2:BA:77:A6:E4:41:F3:5E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FPxhbwbWCVYtL2Ytsrp3puRB814.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.110.0/23
Signature Algorithm: sha256WithRSAEncryption
39:ae:af:b5:0d:9d:1f:d0:1d:6b:50:70:62:23:cf:2c:6c:aa:
f5:76:80:82:ed:00:0c:5b:cb:7d:94:15:d2:2b:0a:1c:62:f8:
c1:9a:d5:b6:a5:d3:a5:cc:2f:2a:9f:c8:c9:b1:1a:cf:31:c2:
cc:fc:4a:bc:a8:96:0b:cd:1d:79:bd:5d:59:f2:34:45:8f:94:
9d:8a:8d:f0:96:8e:1d:af:86:76:5d:49:d7:64:d6:31:9e:0f:
d4:aa:d3:d9:c6:c7:f1:40:68:89:48:a7:f9:d3:0c:1a:d8:52:
c8:93:63:cc:d2:02:23:d0:98:d7:5f:db:c8:da:5d:a5:2b:22:
68:09:84:d0:17:e3:0f:14:4a:bf:5b:89:27:fb:01:67:08:28:
76:c3:40:88:e1:91:5c:ab:e3:4f:d9:5e:1d:c7:f9:ce:50:49:
c9:26:b4:09:a5:45:e3:8e:d7:0a:0f:c7:c9:32:78:96:af:ec:
83:37:4e:33:ed:41:91:cf:6f:c0:9d:61:b1:d2:b7:d1:d7:b6:
6f:91:7f:ed:60:6c:c0:dc:09:bb:8c:29:ce:38:7b:0e:ac:2f:
7b:37:f5:ad:e8:0f:10:cd:6b:b9:85:aa:02:0a:4c:17:43:4c:
df:4b:8f:2f:eb:b4:93:9c:15:6e:1e:7a:df:2e:22:71:2c:9a:
5d:3a:c9:e6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICElYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MjhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDE0RkM2MTZGMDZENjA5
NTYyRDJGNjYyREIyQkE3N0E2RTQ0MUYzNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyp6b1DRqoBIKaAbWCyUKwdbGR3VdjyH3tqHBTOWpwWLzxiYqr
xyfG5+jUe4zrOFtiDcWwL0bZ09E3Qi2vuYPv/p+m4xxmlyYu6G/OYtTzaON3rfQn
YwCoUv2/aMZLNclNQWYAtLqYJxvWtK+fZ87uWS+yfmJCFUQ4CuBk47pAn3xh9d2l
V3W7NyjneMqbU15aWD9RYYkFL0tYToK2AK5VURIA/mFXTn1xUtyEwvEnXX8ZLSSG
8AWReSR4IL9XRLouk1xFOREJoHCu7rtON/cdhIC8+M4AdOFKrl92E2Iu5v23UgcF
Yq3znzB3Z/lNBMJp4TPUSMjRiJykmga229c5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFPxhbwbWCVYtL2Ytsrp3puRB814wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZQeGhid2JXQ1ZZdEwyWXRz
cnAzcHVSQjgxNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF6
ZG4wDQYJKoZIhvcNAQELBQADggEBADmur7UNnR/QHWtQcGIjzyxsqvV2gILtAAxb
y32UFdIrChxi+MGa1bal06XMLyqfyMmxGs8xwsz8SryolgvNHXm9XVnyNEWPlJ2K
jfCWjh2vhnZdSddk1jGeD9Sq09nGx/FAaIlIp/nTDBrYUsiTY8zSAiPQmNdf28ja
XaUrImgJhNAX4w8USr9biSf7AWcIKHbDQIjhkVyr40/ZXh3H+c5QSckmtAmlReOO
1woPx8kyeJav7IM3TjPtQZHPb8CdYbHSt9HXtm+Rf+1gbMDcCbuMKc44ew6sL3s3
9a3oDxDNa7mFqgIKTBdDTN9Ljy/rtJOcFW4eet8uInEsml06yeY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org