Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IK5jD6-Y5qkfxuDtTB_BCOIbWuQ.roa
File: IK5jD6-Y5qkfxuDtTB_BCOIbWuQ.roa (raw, json)
Hash identifier: wTAyV7/7qBjK5lsFuYe+46viG6VPogAdq1R0JKoUJdU=
Subject key identifier: 20:AE:63:0F:AF:98:E6:A9:1F:C6:E0:ED:4C:1F:C1:08:E2:1B:5A:E4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12DA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IK5jD6-Y5qkfxuDtTB_BCOIbWuQ.roa
Signing time: Wed 29 Sep 2021 02:55:04 +0000
ROA not before: Wed 29 Sep 2021 02:55:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 49.159.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4826 (0x12da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=20AE630FAF98E6A91FC6E0ED4C1FC108E21B5AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:4a:29:52:f7:e0:12:a0:5c:2e:aa:b7:7c:
54:d2:1f:b3:31:a3:b0:8d:5e:d3:92:a7:be:c1:78:
3a:9d:5d:f2:4d:ed:92:bb:c5:55:47:16:98:89:12:
70:09:96:7a:cd:29:c4:24:cf:cf:3d:30:58:a7:43:
cb:40:34:8e:2d:91:bc:f5:78:25:64:5e:1d:e0:3f:
d3:6b:b4:e0:6b:29:d0:41:10:80:39:31:3e:8f:26:
ce:85:a8:6f:8c:27:85:97:4b:e2:e5:e9:7c:43:8e:
06:bc:66:94:5e:38:33:e0:d0:35:48:fc:df:ef:7e:
d9:9b:3b:cb:70:ee:2d:f9:f1:27:23:65:4d:5c:0a:
53:5a:ed:e0:89:23:ee:49:4a:c2:ed:bc:60:93:1f:
c6:2c:67:63:10:ef:79:8c:4f:fb:b4:16:3d:13:6a:
a9:a1:99:f5:e3:10:ea:a6:25:14:b1:c8:34:6f:e8:
ad:3c:48:97:7b:8c:b3:f7:3e:31:03:0c:40:27:ad:
f3:b2:92:9c:90:c9:d7:7a:48:d0:98:8a:62:84:1c:
e3:d7:2c:a9:97:66:76:7c:be:3c:b7:94:0d:cc:04:
57:6e:6f:f6:d8:dd:88:1e:93:0e:6d:51:16:d7:9f:
11:35:88:08:0b:b9:14:a4:96:bf:8f:6b:03:ea:1c:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:63:0F:AF:98:E6:A9:1F:C6:E0:ED:4C:1F:C1:08:E2:1B:5A:E4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IK5jD6-Y5qkfxuDtTB_BCOIbWuQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:14:6b:d8:8f:57:f6:1c:c9:72:11:5d:bc:8d:b3:03:d0:d0:
84:a4:d1:41:c3:01:d5:cf:35:4a:43:d4:b6:43:ad:34:f4:d6:
ad:7d:e8:9c:a0:6d:ac:6a:ae:36:03:9e:25:c4:36:ed:e9:23:
ca:b3:89:a3:84:38:e3:be:84:3e:4b:54:0b:9e:8a:41:17:2f:
9f:7d:60:d4:73:74:e6:fe:e7:cf:1a:c7:cc:a8:c3:ec:48:1f:
a6:e1:ce:a7:59:d8:6b:f8:28:6a:0d:9b:fc:3b:57:e5:66:76:
eb:96:e0:1a:40:ba:ae:0c:62:d6:30:de:a7:cf:80:f6:9d:55:
55:f5:be:36:61:b5:f0:6d:41:a9:40:df:c1:d5:13:d2:f6:e1:
06:4f:01:6f:e1:d2:ba:b4:55:33:a5:49:de:97:dd:b2:4a:41:
90:3c:9e:40:8c:0f:54:26:ae:3d:f5:a3:ab:a7:1e:be:04:9f:
cd:fa:ef:4c:08:08:ff:c5:85:09:e5:86:85:28:9c:f0:1d:19:
dc:15:14:3b:89:36:f6:cf:f0:dc:b3:d6:ea:76:3a:44:54:25:
5d:bb:39:97:c0:15:e5:fd:28:51:54:da:f9:47:13:52:89:74:
60:09:64:10:cd:35:f9:8b:89:b0:63:c8:03:83:c3:fd:aa:11:
1d:80:3b:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDIwQUU2MzBGQUY5OEU2
QTkxRkM2RTBFRDRDMUZDMTA4RTIxQjVBRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGz0opUvfgEqBcLqq3fFTSH7Mxo7CNXtOSp77BeDqdXfJN7ZK7
xVVHFpiJEnAJlnrNKcQkz889MFinQ8tANI4tkbz1eCVkXh3gP9NrtOBrKdBBEIA5
MT6PJs6FqG+MJ4WXS+Ll6XxDjga8ZpReODPg0DVI/N/vftmbO8tw7i358ScjZU1c
ClNa7eCJI+5JSsLtvGCTH8YsZ2MQ73mMT/u0Fj0TaqmhmfXjEOqmJRSxyDRv6K08
SJd7jLP3PjEDDEAnrfOykpyQydd6SNCYimKEHOPXLKmXZnZ8vjy3lA3MBFdub/bY
3Ygekw5tURbXnxE1iAgLuRSklr+PawPqHE8DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIK5jD6+Y5qkfxuDtTB/BCOIbWuQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lLNWpENi1ZNXFrZnh1RHRU
Ql9CQ09JYld1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n7QwDQYJKoZIhvcNAQELBQADggEBADsUa9iPV/YcyXIRXbyNswPQ0ISk0UHDAdXP
NUpD1LZDrTT01q196JygbaxqrjYDniXENu3pI8qziaOEOOO+hD5LVAueikEXL599
YNRzdOb+588ax8yow+xIH6bhzqdZ2Gv4KGoNm/w7V+VmduuW4BpAuq4MYtYw3qfP
gPadVVX1vjZhtfBtQalA38HVE9L24QZPAW/h0rq0VTOlSd6X3bJKQZA8nkCMD1Qm
rj31o6unHr4En83670wICP/FhQnlhoUonPAdGdwVFDuJNvbP8Nyz1up2OkRUJV27
OZfAFeX9KFFU2vlHE1KJdGAJZBDNNfmLibBjyAODw/2qER2AO1Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org