Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NVpUiqEAKupaaernp1BxaoN8fA4.roa
File: NVpUiqEAKupaaernp1BxaoN8fA4.roa (raw, json)
Hash identifier: hcaHp8tX7a6AeNn2f91SPQ4u2QYzXAGvODGe+WA0K9k=
Subject key identifier: 35:5A:54:8A:A1:00:2A:EA:5A:69:EA:E7:A7:50:71:6A:83:7C:7C:0E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0EFB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NVpUiqEAKupaaernp1BxaoN8fA4.roa
Signing time: Sun 07 Feb 2021 12:31:06 +0000
ROA not before: Sun 07 Feb 2021 12:31:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3835 (0xefb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:31:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=355A548AA1002AEA5A69EAE7A750716A837C7C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:0f:e9:30:03:f5:bd:d7:91:c2:b4:aa:35:
38:f0:16:a3:85:86:75:d3:7e:88:a4:db:6a:5c:55:
8a:35:b9:5f:7a:45:8e:67:ea:17:d7:9f:18:e0:50:
57:ca:dd:bd:5b:1a:c7:b5:97:cd:9b:dc:de:37:02:
aa:4e:24:88:1d:12:51:d7:cf:c6:dd:ba:0d:f2:6b:
b8:35:42:0c:bf:e5:b1:07:9d:20:11:f4:e7:86:2d:
85:f0:27:3d:48:e6:9f:6e:f5:aa:a8:53:e2:7a:43:
e4:2b:0a:85:ef:21:30:e0:ab:45:81:b2:71:55:b6:
99:39:9c:32:66:ca:4c:04:b5:dc:43:01:f9:2a:bf:
b6:84:a7:e2:b6:9a:7c:f1:73:01:72:7d:18:f1:36:
eb:d6:6c:c3:73:4e:3b:01:39:9d:ec:5d:7c:aa:f0:
54:99:07:cb:06:47:34:3d:de:10:4e:44:e4:d2:4c:
86:af:63:07:8c:68:9a:4f:30:62:b4:24:a2:59:d7:
dd:3a:a5:48:82:11:4f:c2:32:b7:2a:cc:74:00:ed:
f2:c1:28:ba:75:10:af:1f:46:1c:7f:9c:d8:cb:21:
65:41:a9:e0:67:d6:f4:9d:1b:ab:7c:e4:64:48:bf:
c3:ce:b7:dc:e1:ce:b3:61:78:e6:59:d5:c9:64:35:
74:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5A:54:8A:A1:00:2A:EA:5A:69:EA:E7:A7:50:71:6A:83:7C:7C:0E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NVpUiqEAKupaaernp1BxaoN8fA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d9:b8:4f:1e:35:9c:b5:5f:76:a1:b5:44:83:46:b6:cb:4f:
8f:02:9e:e1:a2:90:af:ad:bb:89:87:d9:54:e1:ef:31:68:26:
38:f4:31:88:18:ce:d6:bd:69:90:6b:43:ce:ce:c5:b3:a5:ef:
d7:46:58:f9:f7:de:ca:af:32:86:68:41:74:30:8b:96:04:18:
42:b2:9b:36:23:a8:18:84:f5:81:94:b2:9d:7c:d3:e8:7e:e2:
16:63:77:ff:cd:5f:3e:a2:93:a0:1b:7e:11:26:89:57:f2:90:
2b:20:61:2f:31:b5:ed:97:35:d0:56:a4:6d:0d:90:6f:60:f0:
5a:59:80:4a:c7:35:e4:bf:78:72:bc:14:55:ad:7f:43:ae:d1:
ae:60:c1:36:0c:87:b3:6c:e7:9b:eb:79:4b:08:50:87:9c:ae:
38:50:70:8a:37:5d:9d:89:ed:88:f5:4a:18:95:2f:5e:3d:87:
e4:4f:89:69:5f:3a:90:bb:4b:21:a9:f2:b5:45:17:27:ae:c9:
59:3c:cb:dd:c1:3e:e2:f4:23:de:8d:1e:3e:42:55:03:c7:50:
3f:b1:65:62:1a:65:80:1d:7e:cb:3a:02:40:ad:48:32:23:3e:
96:fe:a1:70:4a:4e:39:1f:d8:66:e8:b3:e8:64:01:9b:e9:0c:
16:d6:35:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMxMDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM1NUE1NDhBQTEwMDJB
RUE1QTY5RUFFN0E3NTA3MTZBODM3QzdDMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8CA/pMAP1vdeRwrSqNTjwFqOFhnXTfoik22pcVYo1uV96RY5n
6hfXnxjgUFfK3b1bGse1l82b3N43AqpOJIgdElHXz8bdug3ya7g1Qgy/5bEHnSAR
9OeGLYXwJz1I5p9u9aqoU+J6Q+QrCoXvITDgq0WBsnFVtpk5nDJmykwEtdxDAfkq
v7aEp+K2mnzxcwFyfRjxNuvWbMNzTjsBOZ3sXXyq8FSZB8sGRzQ93hBOROTSTIav
YweMaJpPMGK0JKJZ1906pUiCEU/CMrcqzHQA7fLBKLp1EK8fRhx/nNjLIWVBqeBn
1vSdG6t85GRIv8POt9zhzrNheOZZ1clkNXQTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNVpUiqEAKupaaernp1BxaoN8fA4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL05WcFVpcUVBS3VwYWFlcm5w
MUJ4YW9OOGZBNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
njkwDQYJKoZIhvcNAQELBQADggEBADrZuE8eNZy1X3ahtUSDRrbLT48CnuGikK+t
u4mH2VTh7zFoJjj0MYgYzta9aZBrQ87OxbOl79dGWPn33sqvMoZoQXQwi5YEGEKy
mzYjqBiE9YGUsp180+h+4hZjd//NXz6ik6AbfhEmiVfykCsgYS8xte2XNdBWpG0N
kG9g8FpZgErHNeS/eHK8FFWtf0Ou0a5gwTYMh7Ns55vreUsIUIecrjhQcIo3XZ2J
7Yj1ShiVL149h+RPiWlfOpC7SyGp8rVFFyeuyVk8y93BPuL0I96NHj5CVQPHUD+x
ZWIaZYAdfss6AkCtSDIjPpb+oXBKTjkf2Gbos+hkAZvpDBbWNXY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-fra.rpki-client.org