Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O67WtG5-Li99BDxUwBlR4iNDhTs.roa
File: O67WtG5-Li99BDxUwBlR4iNDhTs.roa (raw, json)
Hash identifier: lPcVEDbGqU8ce32MIN3qKX+mNv1RMYptwZvjfU1FlUM=
Subject key identifier: 3B:AE:D6:B4:6E:7E:2E:2F:7D:04:3C:54:C0:19:51:E2:23:43:85:3B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B87
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O67WtG5-Li99BDxUwBlR4iNDhTs.roa
Signing time: Tue 29 Sep 2020 10:08:32 +0000
ROA not before: Tue 29 Sep 2020 10:08:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.58.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2951 (0xb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3BAED6B46E7E2E2F7D043C54C01951E22343853B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:fa:5a:17:6b:91:16:9e:d2:eb:0d:28:da:
b4:0f:92:00:96:ef:1c:9a:23:1e:af:3c:28:12:f7:
9d:f1:a1:80:5f:b9:2a:17:3b:1d:b8:8c:63:c3:77:
2e:15:8a:33:6b:38:4b:70:dc:05:85:7b:78:bc:aa:
1c:48:8b:94:27:ac:3a:3e:33:9b:9f:e7:9a:c0:7c:
f1:8c:ab:a5:a0:0e:f6:27:a7:d7:a7:d0:24:1f:9e:
3f:41:0b:73:bf:2c:ea:b5:06:a9:34:75:c3:f2:12:
37:9d:82:1c:8a:d0:94:86:5e:96:e9:89:a2:1e:75:
22:07:cd:29:5c:b6:f1:c9:6a:17:21:bd:59:f4:59:
1f:3c:99:b3:44:92:58:91:bb:99:3f:2a:10:9b:08:
e0:df:0d:9a:dc:2f:90:60:f6:28:93:70:ae:0f:a4:
6f:48:67:3e:9c:f7:7a:fb:30:1f:ab:35:45:6a:6f:
69:21:7f:83:33:4e:9c:47:cf:4a:43:14:32:b3:ae:
f8:7b:5b:7c:8a:24:6c:d7:df:1c:d3:1d:27:dd:17:
41:cc:eb:25:a5:c5:3b:a4:08:d1:86:cb:16:7c:0e:
0f:24:2f:dd:e0:0f:57:4a:0b:a9:37:c2:49:87:5a:
d0:28:20:b0:9b:8b:fd:a8:52:3f:54:c3:83:1c:9e:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:D6:B4:6E:7E:2E:2F:7D:04:3C:54:C0:19:51:E2:23:43:85:3B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O67WtG5-Li99BDxUwBlR4iNDhTs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/21
Signature Algorithm: sha256WithRSAEncryption
21:f2:fb:e9:70:8f:02:20:83:24:6a:a5:4c:2b:b5:26:4a:bf:
00:6b:99:65:30:dc:a0:75:58:f6:0b:af:eb:d1:f9:b2:da:5d:
03:89:52:fc:da:e3:ea:7e:74:0d:3f:5e:c0:12:ce:22:4c:cb:
93:20:ce:bc:e0:99:9e:84:69:6d:81:84:5e:26:15:7d:fa:fc:
3d:01:e8:4d:78:7f:a8:b2:7b:7b:a7:f6:56:54:dc:42:d5:0b:
87:e7:62:d2:de:47:f7:2f:b7:e8:26:41:81:b7:ad:a4:5f:73:
36:29:c1:12:87:f7:83:2f:29:66:b3:a6:ac:86:e8:a1:84:4e:
67:e0:62:19:18:af:58:fd:14:6b:95:28:31:0e:86:2c:a3:ed:
4b:8f:22:53:6c:78:80:be:35:b7:04:eb:1e:bf:92:4a:3b:33:
56:36:5c:6b:9b:0a:f4:bf:b7:51:6d:21:2d:e3:ee:33:a6:10:
15:37:2a:f9:75:cd:40:9a:44:7c:20:33:b6:53:7f:a9:9b:cf:
37:f8:97:f8:24:9f:b5:ff:8d:d8:d3:7e:1f:95:11:a5:18:56:
ca:a5:67:f7:35:4f:7a:e1:24:93:bd:9f:91:81:ed:39:99:bf:
a5:98:3b:b7:bd:34:2c:9c:93:47:3f:b7:1a:fb:f5:3b:60:fe:
13:50:02:ff
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNCQUVENkI0NkU3RTJF
MkY3RDA0M0M1NEMwMTk1MUUyMjM0Mzg1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCs0PpaF2uRFp7S6w0o2rQPkgCW7xyaIx6vPCgS953xoYBfuSoX
Ox24jGPDdy4VijNrOEtw3AWFe3i8qhxIi5QnrDo+M5uf55rAfPGMq6WgDvYnp9en
0CQfnj9BC3O/LOq1Bqk0dcPyEjedghyK0JSGXpbpiaIedSIHzSlctvHJahchvVn0
WR88mbNEkliRu5k/KhCbCODfDZrcL5Bg9iiTcK4PpG9IZz6c93r7MB+rNUVqb2kh
f4MzTpxHz0pDFDKzrvh7W3yKJGzX3xzTHSfdF0HM6yWlxTukCNGGyxZ8Dg8kL93g
D1dKC6k3wkmHWtAoILCbi/2oUj9Uw4McnsH5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUO67WtG5+Li99BDxUwBlR4iNDhTswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL082N1d0RzUtTGk5OUJEeFV3
QmxSNGlORGhUcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
OmAwDQYJKoZIhvcNAQELBQADggEBACHy++lwjwIggyRqpUwrtSZKvwBrmWUw3KB1
WPYLr+vR+bLaXQOJUvza4+p+dA0/XsASziJMy5MgzrzgmZ6EaW2BhF4mFX36/D0B
6E14f6iye3un9lZU3ELVC4fnYtLeR/cvt+gmQYG3raRfczYpwRKH94MvKWazpqyG
6KGETmfgYhkYr1j9FGuVKDEOhiyj7UuPIlNseIC+NbcE6x6/kko7M1Y2XGubCvS/
t1FtIS3j7jOmEBU3Kvl1zUCaRHwgM7ZTf6mbzzf4l/gkn7X/jdjTfh+VEaUYVsql
Z/c1T3rhJJO9n5GB7TmZv6WYO7e9NCyck0c/txr79Ttg/hNQAv8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org