Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LaIDL8bHhN60ZCrA4r__U2gu7s8.roa
File: LaIDL8bHhN60ZCrA4r__U2gu7s8.roa (raw, json)
Hash identifier: 8/6CicAYfjk9i62qOQgIkfAAbaiQSNhFus8ztqbaGWs=
Subject key identifier: 2D:A2:03:2F:C6:C7:84:DE:B4:64:2A:C0:E2:BF:FF:53:68:2E:EE:CF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LaIDL8bHhN60ZCrA4r__U2gu7s8.roa
Signing time: Thu 15 Sep 2022 02:36:11 +0000
ROA not before: Thu 15 Sep 2022 02:36:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 45.64.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2DA2032FC6C784DEB4642AC0E2BFFF53682EEECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:81:36:20:a0:cc:c3:f8:f5:19:61:a0:2d:
27:99:cf:07:06:e2:c6:10:0e:85:cf:af:62:fd:b1:
10:9c:11:49:9a:58:01:5a:35:b4:10:55:ad:ca:4d:
99:a7:12:f6:e7:d6:4c:f7:70:0f:6b:82:01:93:d6:
1b:61:56:a1:11:46:95:74:71:3c:30:2d:2d:ee:9d:
a7:91:19:cd:71:f1:78:f7:7e:53:f2:6c:5f:b4:6c:
7a:a2:a3:43:1b:93:5c:dd:ef:82:e4:85:9f:77:67:
84:7b:95:98:4e:4f:d0:1a:64:f9:c1:cb:8a:64:a6:
35:82:41:1a:dd:53:24:0d:7b:05:0c:bf:f2:45:fa:
af:60:d9:a4:6c:0f:70:8a:95:5d:a7:66:b5:fa:86:
67:a0:f4:cb:78:9d:84:c8:71:66:76:dc:bd:6a:8d:
5d:b4:50:e4:d7:03:25:a9:e3:3d:9e:70:2c:b7:42:
7e:7d:8c:29:6e:9a:14:87:cf:94:be:94:72:72:9e:
76:64:a8:67:7f:e5:b0:98:26:99:65:41:4b:3f:d4:
91:43:89:1d:98:b6:82:45:d6:d9:7f:de:5a:f8:03:
ea:7e:23:61:01:58:bf:69:92:ec:5f:14:28:b3:6c:
d7:0e:23:e7:49:e9:79:f9:30:e2:f5:6a:ef:0f:89:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:03:2F:C6:C7:84:DE:B4:64:2A:C0:E2:BF:FF:53:68:2E:EE:CF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LaIDL8bHhN60ZCrA4r__U2gu7s8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.34.0/24
Signature Algorithm: sha256WithRSAEncryption
71:13:50:40:e7:0c:c9:27:5b:a8:58:17:be:2c:7e:46:c5:b5:
c3:5b:07:c4:cb:f6:7e:f4:0c:8c:ed:b7:79:16:05:b0:09:90:
5c:0e:93:a7:61:11:14:c4:bb:b5:06:4a:30:66:c7:ca:b8:19:
64:36:10:a6:37:04:c8:70:57:fe:1f:f6:8e:84:c5:32:4f:67:
31:1f:bf:7f:3e:b6:5e:f8:70:3b:1c:ff:00:9a:ab:dc:1a:8b:
96:cd:fd:04:15:f0:08:20:0f:09:9e:67:86:17:ac:ca:19:ed:
74:ed:d7:a7:3e:90:46:57:33:cd:28:9d:70:f7:6b:36:af:0f:
35:3d:f6:46:b7:f7:d9:97:96:43:c0:13:e0:94:7f:85:4d:05:
5b:1c:ff:8d:9e:62:98:a2:68:5d:59:14:e2:c7:35:05:a5:1e:
35:17:1e:dd:36:38:4a:c6:bf:3c:8b:61:66:4c:9a:57:9a:32:
04:92:41:c7:3e:9b:e2:a7:17:d3:d0:bb:ee:12:a1:1d:d7:3f:
ac:95:34:eb:d1:d9:0a:07:e6:60:36:e4:92:7a:09:29:92:dc:
48:a7:9f:5b:8d:0a:6f:61:61:79:4d:9a:64:43:bf:81:02:13:
6d:48:07:23:e7:d0:72:79:21:31:8a:3b:20:0b:6a:bd:52:5b:
6a:f4:3c:c4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJEQTIwMzJGQzZDNzg0
REVCNDY0MkFDMEUyQkZGRjUzNjgyRUVFQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6/YE2IKDMw/j1GWGgLSeZzwcG4sYQDoXPr2L9sRCcEUmaWAFa
NbQQVa3KTZmnEvbn1kz3cA9rggGT1hthVqERRpV0cTwwLS3unaeRGc1x8Xj3flPy
bF+0bHqio0Mbk1zd74LkhZ93Z4R7lZhOT9AaZPnBy4pkpjWCQRrdUyQNewUMv/JF
+q9g2aRsD3CKlV2nZrX6hmeg9Mt4nYTIcWZ23L1qjV20UOTXAyWp4z2ecCy3Qn59
jClumhSHz5S+lHJynnZkqGd/5bCYJpllQUs/1JFDiR2YtoJF1tl/3lr4A+p+I2EB
WL9pkuxfFCizbNcOI+dJ6Xn5MOL1au8PiVAdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULaIDL8bHhN60ZCrA4r//U2gu7s8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xhSURMOGJIaE42MFpDckE0
cl9fVTJndTdzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt
QCIwDQYJKoZIhvcNAQELBQADggEBAHETUEDnDMknW6hYF74sfkbFtcNbB8TL9n70
DIztt3kWBbAJkFwOk6dhERTEu7UGSjBmx8q4GWQ2EKY3BMhwV/4f9o6ExTJPZzEf
v38+tl74cDsc/wCaq9wai5bN/QQV8AggDwmeZ4YXrMoZ7XTt16c+kEZXM80onXD3
azavDzU99ka399mXlkPAE+CUf4VNBVsc/42eYpiiaF1ZFOLHNQWlHjUXHt02OErG
vzyLYWZMmleaMgSSQcc+m+KnF9PQu+4SoR3XP6yVNOvR2QoH5mA25JJ6CSmS3Ein
n1uNCm9hYXlNmmRDv4ECE21IByPn0HJ5ITGKOyALar1SW2r0PMQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org