Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LXxL2H2A-_IdTyRRjB1Reun2M7A.roa
File: LXxL2H2A-_IdTyRRjB1Reun2M7A.roa (raw, json)
Hash identifier: RLUkV/nCT4xAkxYc+SwzjgfAfQVq7Sdg9002fasSv88=
Subject key identifier: 2D:7C:4B:D8:7D:80:FB:F2:1D:4F:24:51:8C:1D:51:7A:E9:F6:33:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1354
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LXxL2H2A-_IdTyRRjB1Reun2M7A.roa
Signing time: Wed 29 Sep 2021 02:55:39 +0000
ROA not before: Wed 29 Sep 2021 02:55:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 115.165.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4948 (0x1354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2D7C4BD87D80FBF21D4F24518C1D517AE9F633B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:04:f7:08:7b:ec:61:17:e6:10:7c:c9:d7:
e1:b1:d3:4d:f4:48:0c:16:e3:e0:e2:62:f6:88:82:
01:a9:e0:63:08:bb:35:93:70:7e:c0:98:35:3d:fa:
9c:ee:e8:84:9f:50:98:d3:8b:c1:7e:9c:a1:da:da:
ca:0f:4e:73:08:23:1c:10:a9:c3:10:97:13:f7:75:
83:d0:ab:be:6a:29:32:64:00:3b:e5:b7:f7:a2:f8:
31:60:ed:5a:f0:dc:81:86:fe:00:c2:3a:d9:a0:ba:
54:8d:56:6a:a9:d5:9d:76:5d:03:61:1d:04:fd:9d:
81:e5:5f:37:ae:a3:b6:b0:14:e0:4b:56:fe:cc:98:
ab:2a:94:4c:4a:40:b6:bd:87:5d:81:90:1f:26:1a:
1f:f3:b6:fc:f6:ce:a9:ac:74:53:20:8f:7f:24:89:
4d:84:10:32:05:c7:1a:ee:73:7a:11:47:dc:37:21:
00:5c:ee:1c:8d:01:1b:e0:78:fa:39:4f:af:79:40:
dc:e2:13:8e:32:aa:7c:aa:b2:2c:cd:3c:6b:f7:f1:
66:bb:be:68:b2:51:43:25:fe:ad:4f:1a:56:b7:82:
a1:94:ab:b6:2a:fd:b1:17:74:d5:70:13:ee:a0:eb:
fd:4c:74:87:44:1e:27:3b:ce:ab:3b:0d:36:53:4b:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7C:4B:D8:7D:80:FB:F2:1D:4F:24:51:8C:1D:51:7A:E9:F6:33:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LXxL2H2A-_IdTyRRjB1Reun2M7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.196.0/22
Signature Algorithm: sha256WithRSAEncryption
01:07:57:03:dd:59:0e:f9:53:fe:51:0e:c6:4e:a9:cb:72:3c:
37:1d:2a:dd:98:3e:ca:d8:7f:9b:bb:93:19:71:5a:4d:56:3b:
de:fc:7f:fa:c4:df:fc:c9:56:de:04:ce:98:70:c9:9c:60:c8:
08:6c:37:1a:6d:6f:9f:89:1f:5a:74:a5:ea:87:6f:23:7f:ad:
6e:ea:9d:c1:07:c5:cb:aa:92:21:09:f3:79:1f:13:a2:1a:82:
58:07:32:84:67:6c:04:a0:2c:16:0d:f5:1a:28:fa:a6:a9:9d:
02:6a:a5:1f:71:5d:d8:c9:72:b8:1a:01:b0:26:0f:96:c9:a7:
dd:18:07:61:e7:15:37:dc:3f:70:63:93:52:a8:0c:75:9c:a9:
a8:6f:96:e8:74:4d:a5:8e:9c:74:11:41:57:34:d5:50:39:9d:
21:d0:1b:b6:6f:da:36:e0:01:32:be:13:55:1c:6f:ec:0c:2d:
39:16:7e:b3:5e:83:c0:e9:3e:e4:ba:80:da:9d:2b:80:f8:2b:
f4:35:c9:56:b6:1f:9d:97:26:84:ad:ee:c7:6a:0e:c9:17:91:
ec:13:34:0d:ce:df:e2:e0:fa:33:67:73:ab:3c:bc:fe:67:0f:
3b:31:ca:f0:f3:50:a4:c7:92:c1:cb:0a:2a:93:ad:a7:5b:ed:
aa:70:7d:2f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MzlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDJEN0M0QkQ4N0Q4MEZC
RjIxRDRGMjQ1MThDMUQ1MTdBRTlGNjMzQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1twT3CHvsYRfmEHzJ1+Gx0030SAwW4+DiYvaIggGp4GMIuzWT
cH7AmDU9+pzu6ISfUJjTi8F+nKHa2soPTnMIIxwQqcMQlxP3dYPQq75qKTJkADvl
t/ei+DFg7Vrw3IGG/gDCOtmgulSNVmqp1Z12XQNhHQT9nYHlXzeuo7awFOBLVv7M
mKsqlExKQLa9h12BkB8mGh/ztvz2zqmsdFMgj38kiU2EEDIFxxruc3oRR9w3IQBc
7hyNARvgePo5T695QNziE44yqnyqsizNPGv38Wa7vmiyUUMl/q1PGla3gqGUq7Yq
/bEXdNVwE+6g6/1MdIdEHic7zqs7DTZTSw9rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULXxL2H2A+/IdTyRRjB1Reun2M7AwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xYeEwySDJBLV9JZFR5UlJq
QjFSZXVuMk03QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJz
pcQwDQYJKoZIhvcNAQELBQADggEBAAEHVwPdWQ75U/5RDsZOqctyPDcdKt2YPsrY
f5u7kxlxWk1WO978f/rE3/zJVt4EzphwyZxgyAhsNxptb5+JH1p0peqHbyN/rW7q
ncEHxcuqkiEJ83kfE6IaglgHMoRnbASgLBYN9Roo+qapnQJqpR9xXdjJcrgaAbAm
D5bJp90YB2HnFTfcP3Bjk1KoDHWcqahvluh0TaWOnHQRQVc01VA5nSHQG7Zv2jbg
ATK+E1Ucb+wMLTkWfrNeg8DpPuS6gNqdK4D4K/Q1yVa2H52XJoSt7sdqDskXkewT
NA3O3+Lg+jNnc6s8vP5nDzsxyvDzUKTHksHLCiqTradb7apwfS8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org