Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LAyPpwbG7VbInZh9XuzSbjbrieA.roa
File: LAyPpwbG7VbInZh9XuzSbjbrieA.roa (raw, json)
Hash identifier: 8/pg6NoQVFO1+epCQXo4qqGUIS3SnOOgIYRF7q1aeRA=
Subject key identifier: 2C:0C:8F:A7:06:C6:ED:56:C8:9D:98:7D:5E:EC:D2:6E:36:EB:89:E0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B83
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LAyPpwbG7VbInZh9XuzSbjbrieA.roa
Signing time: Tue 29 Sep 2020 10:08:31 +0000
ROA not before: Tue 29 Sep 2020 10:08:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2947 (0xb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C0C8FA706C6ED56C89D987D5EECD26E36EB89E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:2f:2a:22:52:11:7f:89:f7:07:41:09:35:
c1:2d:a6:30:eb:47:1f:08:1e:65:c0:e2:88:38:87:
c2:9b:13:d0:ab:28:5e:13:c3:13:c1:a3:2b:3b:60:
6d:62:0b:17:b8:4c:11:41:a1:51:e3:b7:ad:99:ed:
e0:ce:ed:49:ab:ec:86:7d:db:0d:ef:40:d4:fa:91:
9c:ed:1a:39:5b:e1:29:a8:31:ca:c9:a3:f7:19:b2:
fa:fc:d4:de:39:c6:97:f4:25:03:27:56:74:54:4c:
11:58:d3:d8:c3:a8:9c:d6:4e:4b:b8:a2:82:6a:ee:
c6:19:cd:b0:bd:ef:f8:de:2a:ba:46:83:0e:f3:c5:
2d:6a:9d:5b:72:e8:70:a6:5a:73:6e:db:84:9c:4e:
4d:01:52:9a:41:a1:46:93:83:6e:9e:4b:97:49:f7:
a5:09:e9:42:d6:65:61:4e:77:55:dd:f5:27:46:f5:
15:7f:22:62:cb:63:2c:c8:f0:ad:eb:79:d2:47:9b:
b0:d8:e6:b9:e0:dd:04:dc:2c:c7:9b:f3:68:43:a8:
09:ec:99:20:6d:ee:31:f8:2b:60:65:99:2b:76:f4:
25:e3:5b:e5:05:fe:1c:3c:32:73:2f:7e:b2:01:6c:
3a:d9:f3:67:5a:25:13:31:bb:df:b7:5c:fe:ad:36:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:8F:A7:06:C6:ED:56:C8:9D:98:7D:5E:EC:D2:6E:36:EB:89:E0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LAyPpwbG7VbInZh9XuzSbjbrieA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:63:c5:97:f4:77:89:b6:24:29:25:10:ca:1c:65:28:3c:ad:
e0:58:a8:8a:c5:21:9e:78:8e:e1:6f:d7:8c:14:1a:42:c0:fc:
b8:66:59:31:99:8e:ae:a5:95:2d:49:7a:b5:2e:40:2d:e3:f8:
fa:ee:a3:c8:da:9a:8e:63:cc:f9:d2:29:89:94:5e:0c:a6:95:
e6:fa:b5:69:c2:14:d1:c9:30:59:1b:50:6e:d6:3d:94:1c:f8:
4e:b9:80:43:3a:39:fb:29:89:15:e1:b7:bb:65:eb:48:ca:dc:
81:4b:16:84:3b:e8:a8:1a:22:cf:8e:ed:0c:70:ab:78:d4:b5:
bb:fd:07:61:b0:fd:7f:39:2d:f0:52:e3:07:ea:93:fc:78:44:
9e:91:a3:24:ed:4f:3d:de:59:91:2d:b1:ab:8e:7a:fa:ba:03:
4f:e0:5c:1c:2d:dc:39:83:82:a0:7a:f3:2a:7a:1a:99:d4:4a:
42:53:cb:b9:17:7e:ae:d3:73:9f:cc:02:5a:94:a7:79:b3:32:
52:4a:85:ba:c2:74:73:6f:56:42:12:d2:31:22:e0:96:90:2a:
10:bb:3f:7a:1a:d1:03:24:15:4e:a3:6b:03:4d:77:a4:f8:9e:
5b:e6:f3:da:2b:72:e4:57:59:7a:2c:11:a6:29:b1:4b:58:5d:
a9:7d:0b:91
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJDMEM4RkE3MDZDNkVE
NTZDODlEOTg3RDVFRUNEMjZFMzZFQjg5RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm/S8qIlIRf4n3B0EJNcEtpjDrRx8IHmXA4og4h8KbE9CrKF4T
wxPBoys7YG1iCxe4TBFBoVHjt62Z7eDO7Umr7IZ92w3vQNT6kZztGjlb4SmoMcrJ
o/cZsvr81N45xpf0JQMnVnRUTBFY09jDqJzWTku4ooJq7sYZzbC97/jeKrpGgw7z
xS1qnVty6HCmWnNu24ScTk0BUppBoUaTg26eS5dJ96UJ6ULWZWFOd1Xd9SdG9RV/
ImLLYyzI8K3redJHm7DY5rng3QTcLMeb82hDqAnsmSBt7jH4K2BlmSt29CXjW+UF
/hw8MnMvfrIBbDrZ82daJRMxu9+3XP6tNrHBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULAyPpwbG7VbInZh9XuzSbjbrieAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xBeVBwd2JHN1ZiSW5aaDlY
dXpTYmpicmllQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TCwwDQYJKoZIhvcNAQELBQADggEBABtjxZf0d4m2JCklEMocZSg8reBYqIrFIZ54
juFv14wUGkLA/LhmWTGZjq6llS1JerUuQC3j+Pruo8jamo5jzPnSKYmUXgymleb6
tWnCFNHJMFkbUG7WPZQc+E65gEM6OfspiRXht7tl60jK3IFLFoQ76KgaIs+O7Qxw
q3jUtbv9B2Gw/X85LfBS4wfqk/x4RJ6RoyTtTz3eWZEtsauOevq6A0/gXBwt3DmD
gqB68yp6GpnUSkJTy7kXfq7Tc5/MAlqUp3mzMlJKhbrCdHNvVkIS0jEi4JaQKhC7
P3oa0QMkFU6jawNNd6T4nlvm89orcuRXWXosEaYpsUtYXal9C5E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org