Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JJAL8yKk-HI1kiZIT87y-mYAtZA.roa
File: JJAL8yKk-HI1kiZIT87y-mYAtZA.roa (raw, json)
Hash identifier: BVrw6pG9zAiYG2svO3qQPotOOEqxFdogsR4/qcfixNc=
Subject key identifier: 24:90:0B:F3:22:A4:F8:72:35:92:26:48:4F:CE:F2:FA:66:00:B5:90
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B26
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JJAL8yKk-HI1kiZIT87y-mYAtZA.roa
Signing time: Tue 29 Sep 2020 10:08:04 +0000
ROA not before: Tue 29 Sep 2020 10:08:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=24900BF322A4F872359226484FCEF2FA6600B590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:41:fe:47:36:2e:74:f3:5c:a5:f4:ab:31:
ef:cd:c7:b5:8b:b3:57:5b:9e:df:3a:f7:2d:9c:ac:
15:28:55:5a:e8:61:2e:50:d1:16:e6:05:e4:2b:3f:
3f:99:88:96:d1:d3:c3:5d:86:8d:4f:87:d9:0f:fc:
13:57:66:7c:da:92:f8:c0:11:34:a8:c3:3c:dd:97:
72:41:78:c6:3a:47:28:db:8d:d5:25:4e:50:2b:89:
53:f4:95:de:8e:45:5e:67:12:f8:d5:a9:17:ac:f9:
ef:dc:62:e8:00:77:0a:85:32:df:f7:e9:61:17:be:
e5:3d:35:1a:aa:da:99:15:ae:4d:04:8a:1a:57:12:
7d:37:56:cd:29:90:0a:2b:e2:43:95:93:32:34:d0:
d9:9f:b1:82:80:cd:47:ac:49:66:5a:9f:62:c4:82:
70:d8:f7:1a:f5:0c:e7:a1:e0:f1:1d:48:c1:57:15:
f3:0f:e8:6d:20:35:d2:05:25:d6:ce:89:7f:9c:49:
4d:52:e9:2a:e0:45:66:33:d3:ac:b7:f7:b4:84:e8:
80:31:18:6c:ea:bf:a1:16:c6:ec:09:54:15:e1:96:
13:8a:44:8a:76:f6:7f:a7:c6:11:45:fc:71:d5:15:
56:68:26:eb:6d:fb:29:ea:98:23:7d:1f:df:42:81:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:0B:F3:22:A4:F8:72:35:92:26:48:4F:CE:F2:FA:66:00:B5:90
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JJAL8yKk-HI1kiZIT87y-mYAtZA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:57:33:9b:c1:7d:ee:ff:d4:38:e1:24:fe:d9:57:8a:0e:51:
15:09:b3:45:20:6e:4f:79:75:cc:44:2f:43:e3:28:a7:52:f2:
25:6c:27:9d:d0:41:97:aa:5d:aa:0e:60:ed:7d:03:82:c8:a7:
a5:ae:e3:20:1c:52:2d:84:87:79:c9:d4:46:b1:49:74:f7:d9:
c5:06:f2:24:ed:e7:83:3e:15:41:6b:22:4c:1a:18:4b:a5:42:
cd:20:c5:91:23:26:db:a8:ef:54:d1:44:b2:38:55:2f:52:42:
a7:26:f9:b8:1f:5d:44:ac:5c:7d:64:fd:36:86:d5:77:ac:dd:
57:1c:1d:b2:a0:75:b2:cf:bb:45:16:c5:d3:69:ee:83:bc:ee:
7d:bb:cf:36:e0:a7:38:27:d2:36:cb:23:45:03:6f:a0:08:b1:
23:49:1d:b2:0d:ae:3b:58:9b:fa:ad:51:d3:8f:7f:2c:ec:66:
20:79:19:6a:92:8a:78:1c:a3:70:dc:8e:08:8b:ef:46:bb:71:
38:67:13:c8:09:93:d5:c8:ba:92:49:6b:e1:8a:95:29:0c:ef:
d4:0a:ce:5d:c4:19:0c:6f:7d:42:9b:8e:1f:76:17:be:79:9c:
86:64:1f:8d:9e:2d:84:8e:3e:2e:9a:d0:5b:14:f0:23:f0:cb:
4c:71:6d:7a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI0OTAwQkYzMjJBNEY4
NzIzNTkyMjY0ODRGQ0VGMkZBNjYwMEI1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOcUH+RzYudPNcpfSrMe/Nx7WLs1dbnt869y2crBUoVVroYS5Q
0RbmBeQrPz+ZiJbR08Ndho1Ph9kP/BNXZnzakvjAETSowzzdl3JBeMY6RyjbjdUl
TlAriVP0ld6ORV5nEvjVqRes+e/cYugAdwqFMt/36WEXvuU9NRqq2pkVrk0EihpX
En03Vs0pkAor4kOVkzI00NmfsYKAzUesSWZan2LEgnDY9xr1DOeh4PEdSMFXFfMP
6G0gNdIFJdbOiX+cSU1S6SrgRWYz06y397SE6IAxGGzqv6EWxuwJVBXhlhOKRIp2
9n+nxhFF/HHVFVZoJutt+ynqmCN9H99CgbODAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJJAL8yKk+HI1kiZIT87y+mYAtZAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0pKQUw4eUtrLUhJMWtpWklU
ODd5LW1ZQXRaQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANy
xrAwDQYJKoZIhvcNAQELBQADggEBAFxXM5vBfe7/1DjhJP7ZV4oOURUJs0Ugbk95
dcxEL0PjKKdS8iVsJ53QQZeqXaoOYO19A4LIp6Wu4yAcUi2Eh3nJ1EaxSXT32cUG
8iTt54M+FUFrIkwaGEulQs0gxZEjJtuo71TRRLI4VS9SQqcm+bgfXUSsXH1k/TaG
1Xes3VccHbKgdbLPu0UWxdNp7oO87n27zzbgpzgn0jbLI0UDb6AIsSNJHbINrjtY
m/qtUdOPfyzsZiB5GWqSingco3DcjgiL70a7cThnE8gJk9XIupJJa+GKlSkM79QK
zl3EGQxvfUKbjh92F755nIZkH42eLYSOPi6a0FsU8CPwy0xxbXo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org