Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KrBwtvpYsxJan-_x9vED32pa_TM.roa
File: KrBwtvpYsxJan-_x9vED32pa_TM.roa (raw, json)
Hash identifier: YV8gs/6UVsb/httv1PIkquMRl7X5mXOAp2ElZtzJ8Ss=
Subject key identifier: 2A:B0:70:B6:FA:58:B3:12:5A:9F:EF:F1:F6:F1:03:DF:6A:5A:FD:33
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A37
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KrBwtvpYsxJan-_x9vED32pa_TM.roa
Signing time: Mon 24 Oct 2022 04:14:54 +0000
ROA not before: Mon 24 Oct 2022 04:14:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.58.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6711 (0x1a37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 24 04:14:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2AB070B6FA58B3125A9FEFF1F6F103DF6A5AFD33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:db:a2:2b:49:ec:2c:85:55:67:6a:80:60:
95:10:57:06:b8:3f:5e:50:87:db:ae:fe:ba:9d:f8:
d3:88:14:64:07:80:08:e3:58:bb:5f:82:ef:fd:d1:
d3:19:23:27:32:96:28:ec:ea:9f:46:5e:60:11:79:
82:94:27:15:3b:31:9b:b0:d4:85:ee:f1:2e:5e:a3:
0e:c7:8d:fc:ce:14:84:49:a2:7c:91:98:60:4c:76:
f4:b5:11:59:1d:64:3a:44:82:20:4f:b8:61:1b:4f:
9a:4b:11:1d:61:19:f2:2d:a8:d6:22:67:91:c1:c7:
d4:09:b9:1d:00:b7:0a:83:db:6f:e4:3a:61:c8:c3:
6a:7c:62:77:71:c9:05:ab:06:bd:c3:16:df:88:cc:
4e:11:b4:71:0b:f4:ee:db:c4:99:8a:cc:d2:78:b7:
ae:7a:6e:5d:7e:a1:10:69:f3:0a:0a:f1:ab:36:f2:
47:6c:f8:bb:94:7f:34:b5:eb:5c:4d:be:95:b1:b9:
76:1b:a2:27:e7:a8:33:84:74:72:82:a4:d5:a6:c8:
10:79:3c:a2:41:5a:74:02:b2:49:22:08:bc:bb:25:
c9:57:87:e2:02:f2:c7:28:4f:cc:9a:52:c9:75:9a:
0a:7f:8b:4a:33:a5:d6:d8:c7:b4:60:41:15:52:73:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B0:70:B6:FA:58:B3:12:5A:9F:EF:F1:F6:F1:03:DF:6A:5A:FD:33
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KrBwtvpYsxJan-_x9vED32pa_TM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
14:f3:df:07:4f:48:75:14:b9:c2:b3:59:f9:12:7f:0b:d8:ee:
0c:f3:3d:9c:a5:75:e2:1e:6a:f2:93:06:a7:fd:d7:6b:0e:fe:
8d:6d:21:0d:69:00:dd:70:1d:e4:cf:e5:c6:35:da:79:a4:56:
c4:b7:6c:f1:85:4d:8d:4f:ae:2d:ee:ea:38:50:e1:1d:62:cc:
ea:5b:7f:3c:cd:45:02:a6:7b:e7:0c:33:23:81:12:ec:ce:42:
30:62:22:88:31:1c:9c:7b:30:ec:5c:8b:fa:2b:98:07:0c:77:
2f:7b:90:03:73:b0:ca:43:06:dc:aa:e7:e7:16:c4:62:b0:e5:
34:50:b3:c8:b1:27:aa:49:1d:f9:6f:c1:34:ed:51:4b:88:bb:
0f:a7:29:a6:32:b2:f2:4c:a8:77:4a:27:8c:24:cc:4c:b3:e4:
41:6d:7a:c7:71:a6:fb:f8:df:f6:8d:87:5d:6e:f3:50:e8:b2:
0f:7f:09:25:c4:2e:d6:ce:aa:06:93:ab:88:f9:bf:43:1c:f5:
44:5b:0e:b9:91:13:f3:fd:32:95:5f:af:57:5c:52:3e:aa:6a:
fe:71:f0:6d:a9:3b:f1:8a:bd:e1:14:68:f1:14:f3:8f:08:aa:
0f:bf:2c:a0:f9:19:39:d6:e6:c0:67:84:be:1e:27:d0:94:4b:
66:5f:2b:3e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjQw
NDE0NTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJBQjA3MEI2RkE1OEIz
MTI1QTlGRUZGMUY2RjEwM0RGNkE1QUZEMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEmNuiK0nsLIVVZ2qAYJUQVwa4P15Qh9uu/rqd+NOIFGQHgAjj
WLtfgu/90dMZIycylijs6p9GXmAReYKUJxU7MZuw1IXu8S5eow7HjfzOFIRJonyR
mGBMdvS1EVkdZDpEgiBPuGEbT5pLER1hGfItqNYiZ5HBx9QJuR0AtwqD22/kOmHI
w2p8YndxyQWrBr3DFt+IzE4RtHEL9O7bxJmKzNJ4t656bl1+oRBp8woK8as28kds
+LuUfzS161xNvpWxuXYboifnqDOEdHKCpNWmyBB5PKJBWnQCskkiCLy7JclXh+IC
8scoT8yaUsl1mgp/i0ozpdbYx7RgQRVSczedAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKrBwtvpYsxJan+/x9vED32pa/TMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tyQnd0dnBZc3hKYW4tX3g5
dkVEMzJwYV9UTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9
OnAwDQYJKoZIhvcNAQELBQADggEBABTz3wdPSHUUucKzWfkSfwvY7gzzPZyldeIe
avKTBqf912sO/o1tIQ1pAN1wHeTP5cY12nmkVsS3bPGFTY1Pri3u6jhQ4R1izOpb
fzzNRQKme+cMMyOBEuzOQjBiIogxHJx7MOxci/ormAcMdy97kANzsMpDBtyq5+cW
xGKw5TRQs8ixJ6pJHflvwTTtUUuIuw+nKaYysvJMqHdKJ4wkzEyz5EFtesdxpvv4
3/aNh11u81Dosg9/CSXELtbOqgaTq4j5v0Mc9URbDrmRE/P9MpVfr1dcUj6qav5x
8G2pO/GKveEUaPEU848Iqg+/LKD5GTnW5sBnhL4eJ9CUS2ZfKz4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org