Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKgOWrawi5KdqeseiKCzmXdj1Uc.roa
File: MKgOWrawi5KdqeseiKCzmXdj1Uc.roa (raw, json)
Hash identifier: lkJsgSauKAW6hl5VyLAoD3mz9ei0IXNPnuV4D0vA3TA=
Subject key identifier: 30:A8:0E:5A:B6:B0:8B:92:9D:A9:EB:1E:88:A0:B3:99:77:63:D5:47
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19F0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKgOWrawi5KdqeseiKCzmXdj1Uc.roa
Signing time: Sat 22 Oct 2022 06:13:12 +0000
ROA not before: Sat 22 Oct 2022 06:13:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.58.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6640 (0x19f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:13:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=30A80E5AB6B08B929DA9EB1E88A0B3997763D547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:78:d7:42:ce:4e:a4:d7:5a:6b:d3:ad:a0:
22:05:9d:6b:db:ef:b4:85:30:f4:2f:24:51:70:a7:
55:f2:2c:b8:5c:c0:5d:11:9b:8e:4d:c9:6c:3d:3f:
76:4c:61:6c:26:43:2c:68:48:8c:9a:ed:4c:c6:2d:
e1:c1:2e:d4:34:2b:87:b9:d6:02:8a:58:d2:ff:93:
1c:5f:f7:51:59:dc:08:44:32:78:97:b3:88:29:e2:
8a:80:06:99:19:bf:dc:28:2f:91:15:91:d9:89:30:
8d:4d:9d:ff:76:15:be:c0:fd:a5:0f:b4:57:7a:87:
3e:ce:9b:9c:5a:8b:3d:7c:7c:bc:8f:42:85:d1:be:
ce:04:77:f8:b5:3a:a9:14:5f:57:94:f9:29:33:67:
c8:87:2b:b2:6e:2d:20:06:b7:99:c4:e6:78:37:f0:
4f:fb:ca:4f:74:62:80:50:54:9f:dd:85:fe:a8:7b:
c2:b7:2d:cf:5b:60:3d:00:34:ac:28:43:a0:00:e0:
2e:9b:68:ac:47:7a:8f:cb:6d:d5:5d:cb:1a:3a:6a:
48:07:1c:1a:fc:10:e9:e2:e8:f4:10:f1:2d:36:6a:
42:bb:b7:0b:e0:1c:9b:00:7e:60:cf:cf:4e:24:42:
ec:15:24:31:08:9d:73:13:27:81:89:25:5a:00:71:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:0E:5A:B6:B0:8B:92:9D:A9:EB:1E:88:A0:B3:99:77:63:D5:47
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKgOWrawi5KdqeseiKCzmXdj1Uc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.124.0/22
Signature Algorithm: sha256WithRSAEncryption
90:46:66:b3:0f:6f:fd:c0:a4:bc:2d:72:a5:36:08:3e:fa:46:
94:45:c3:3a:df:62:b0:29:68:1d:5b:38:9f:44:89:de:c4:e9:
9c:00:24:c0:4f:e6:a0:74:18:ce:2d:1c:12:c8:16:05:4a:92:
e5:e2:3c:3b:12:db:4b:62:5c:a7:f5:ed:c7:8c:26:17:d5:6d:
70:b3:1e:09:3d:6f:a0:d1:b8:e2:7f:43:92:69:16:e2:c0:3c:
a9:e0:e8:60:b0:0f:79:b9:8b:9d:24:db:af:dd:c1:18:78:a0:
10:99:12:0a:7c:e2:25:26:d8:e5:46:e2:ca:7b:a3:1b:1d:4f:
d9:23:c1:cc:3c:a2:c4:bc:8a:24:1c:fc:27:ba:7e:60:61:77:
19:b1:9b:0b:d6:ac:37:51:25:07:2b:73:8a:8e:6f:52:a2:2e:
55:8e:87:17:17:ff:d2:5d:81:85:9d:d7:c1:c9:1b:ec:34:4b:
3e:44:d2:7a:a3:d8:72:fb:7e:a6:17:9b:c9:d8:26:9c:62:47:
78:15:97:73:39:e6:51:cf:9d:de:0e:e6:36:32:b2:6d:83:1d:
76:40:6c:05:f7:71:f0:91:2f:50:be:cb:d9:74:d4:42:92:66:
2d:b2:d4:db:5b:31:7b:4f:47:32:e8:ac:a4:75:7b:42:54:27:
e0:59:18:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjEzMTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMwQTgwRTVBQjZCMDhC
OTI5REE5RUIxRTg4QTBCMzk5Nzc2M0Q1NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKMHjXQs5OpNdaa9OtoCIFnWvb77SFMPQvJFFwp1XyLLhcwF0R
m45NyWw9P3ZMYWwmQyxoSIya7UzGLeHBLtQ0K4e51gKKWNL/kxxf91FZ3AhEMniX
s4gp4oqABpkZv9woL5EVkdmJMI1Nnf92Fb7A/aUPtFd6hz7Om5xaiz18fLyPQoXR
vs4Ed/i1OqkUX1eU+SkzZ8iHK7JuLSAGt5nE5ng38E/7yk90YoBQVJ/dhf6oe8K3
Lc9bYD0ANKwoQ6AA4C6baKxHeo/LbdVdyxo6akgHHBr8EOni6PQQ8S02akK7twvg
HJsAfmDPz04kQuwVJDEInXMTJ4GJJVoAcXA/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMKgOWrawi5KdqeseiKCzmXdj1UcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01LZ09XcmF3aTVLZHFlc2Vp
S0N6bVhkajFVYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OnwwDQYJKoZIhvcNAQELBQADggEBAJBGZrMPb/3ApLwtcqU2CD76RpRFwzrfYrAp
aB1bOJ9Eid7E6ZwAJMBP5qB0GM4tHBLIFgVKkuXiPDsS20tiXKf17ceMJhfVbXCz
Hgk9b6DRuOJ/Q5JpFuLAPKng6GCwD3m5i50k26/dwRh4oBCZEgp84iUm2OVG4sp7
oxsdT9kjwcw8osS8iiQc/Ce6fmBhdxmxmwvWrDdRJQcrc4qOb1KiLlWOhxcX/9Jd
gYWd18HJG+w0Sz5E0nqj2HL7fqYXm8nYJpxiR3gVl3M55lHPnd4O5jYysm2DHXZA
bAX3cfCRL1C+y9l01EKSZi2y1NtbMXtPRzLorKR1e0JUJ+BZGLE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org