Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IgtmS6SBydi1ti2vnVX9EOJUReU.roa
File: IgtmS6SBydi1ti2vnVX9EOJUReU.roa (raw, json)
Hash identifier: LD0R08qDYZ3q530DsV46hkz71kD5Pu1r6RQJ3TEJz3U=
Subject key identifier: 22:0B:66:4B:A4:81:C9:D8:B5:B6:2D:AF:9D:55:FD:10:E2:54:45:E5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12DC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IgtmS6SBydi1ti2vnVX9EOJUReU.roa
Signing time: Wed 29 Sep 2021 02:55:05 +0000
ROA not before: Wed 29 Sep 2021 02:55:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4828 (0x12dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=220B664BA481C9D8B5B62DAF9D55FD10E25445E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:54:0b:cd:a7:e0:b6:a9:4a:c7:40:b4:e8:
95:b7:4f:8d:51:8b:53:87:7f:e0:e2:7c:ea:08:19:
0f:4f:6d:1e:2c:fd:eb:a3:f6:9f:60:26:5e:a6:99:
6a:c5:70:2f:5e:d8:34:f9:6e:57:09:6a:c5:53:c1:
df:55:88:6c:58:f6:7a:75:f5:87:91:39:d9:46:b5:
ac:5b:08:ed:6b:aa:9b:ae:da:fd:eb:96:96:2a:43:
2e:ea:87:19:26:f1:ac:a5:7f:2c:c3:a6:b1:c1:fa:
5e:4c:00:24:34:91:0b:e4:36:86:a4:fa:b0:bd:59:
f9:06:e2:ad:68:59:a5:53:96:b0:1e:3e:94:b7:4f:
a6:9b:83:a7:e3:3f:7b:de:7f:12:77:32:9d:10:f2:
03:5e:e3:51:6e:e8:4b:9f:a1:6e:b7:79:0d:a7:4e:
48:9d:f7:e9:6f:fc:93:dc:65:0e:41:b6:fe:51:ec:
87:c5:0d:22:f0:00:af:4c:48:0e:f0:05:34:06:b1:
15:c2:b9:fc:94:43:cc:29:bd:03:da:7a:fd:e7:f7:
00:f0:4c:39:30:e7:fc:be:3f:69:76:d4:d9:ea:ab:
ae:6f:fa:99:85:c7:63:7d:33:35:03:03:f5:f9:f4:
50:04:73:87:7e:a8:7d:5d:37:5b:de:6c:05:78:fe:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:66:4B:A4:81:C9:D8:B5:B6:2D:AF:9D:55:FD:10:E2:54:45:E5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IgtmS6SBydi1ti2vnVX9EOJUReU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:31:4c:02:50:bc:e2:0c:ac:dd:4c:19:59:38:e1:60:82:46:
fa:30:af:26:60:1e:99:ee:da:ae:a5:b2:42:47:26:e4:12:ae:
2d:43:af:a4:72:2d:b5:f0:9b:26:9a:9c:45:7b:6f:06:a0:b3:
00:7a:2f:84:41:f7:02:e6:d9:03:f8:27:4f:7b:72:b3:46:95:
90:2c:94:b4:fd:cc:88:d6:70:75:96:d2:a6:b4:ed:7d:8c:2d:
d2:5c:00:b0:55:6a:1d:51:2e:9b:2c:53:a2:97:7f:81:96:96:
70:c7:f2:f3:cb:93:38:46:84:b2:cf:1e:08:a1:00:ae:fc:0c:
14:ec:d6:00:96:01:3b:ba:b8:0a:e4:43:86:e0:c8:3f:fb:3f:
57:3e:cd:dd:f3:8c:b5:6f:b0:2a:cf:00:de:88:c7:72:86:f9:
71:8b:48:06:18:61:cc:a1:2d:43:e2:a2:52:cc:7f:9a:1a:72:
20:61:8d:eb:36:5a:8e:1a:50:a2:a2:97:af:a6:bf:0c:dc:12:
db:a3:0d:70:15:3c:44:80:52:c1:4a:c1:11:37:4e:61:ef:96:
a4:4e:1e:aa:1e:3b:1c:ce:67:34:d9:6b:c7:77:77:28:95:56:
e7:75:68:70:4d:fd:e0:23:21:65:89:ff:cb:54:26:6a:8c:09:
de:a0:a5:33
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDIyMEI2NjRCQTQ4MUM5
RDhCNUI2MkRBRjlENTVGRDEwRTI1NDQ1RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoTlQLzafgtqlKx0C06JW3T41Ri1OHf+DifOoIGQ9PbR4s/euj
9p9gJl6mmWrFcC9e2DT5blcJasVTwd9ViGxY9np19YeROdlGtaxbCO1rqpuu2v3r
lpYqQy7qhxkm8aylfyzDprHB+l5MACQ0kQvkNoak+rC9WfkG4q1oWaVTlrAePpS3
T6abg6fjP3vefxJ3Mp0Q8gNe41Fu6EufoW63eQ2nTkid9+lv/JPcZQ5Btv5R7IfF
DSLwAK9MSA7wBTQGsRXCufyUQ8wpvQPaev3n9wDwTDkw5/y+P2l21Nnqq65v+pmF
x2N9MzUDA/X59FAEc4d+qH1dN1vebAV4/u6jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIgtmS6SBydi1ti2vnVX9EOJUReUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lndG1TNlNCeWRpMXRpMnZu
Vlg5RU9KVVJlVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n0AwDQYJKoZIhvcNAQELBQADggEBAEsxTAJQvOIMrN1MGVk44WCCRvowryZgHpnu
2q6lskJHJuQSri1Dr6RyLbXwmyaanEV7bwagswB6L4RB9wLm2QP4J097crNGlZAs
lLT9zIjWcHWW0qa07X2MLdJcALBVah1RLpssU6KXf4GWlnDH8vPLkzhGhLLPHgih
AK78DBTs1gCWATu6uArkQ4bgyD/7P1c+zd3zjLVvsCrPAN6Ix3KG+XGLSAYYYcyh
LUPiolLMf5oaciBhjes2Wo4aUKKil6+mvwzcEtujDXAVPESAUsFKwRE3TmHvlqRO
HqoeOxzOZzTZa8d3dyiVVud1aHBN/eAjIWWJ/8tUJmqMCd6gpTM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:47 2023 by rpki-client on console-fra.rpki-client.org