Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONS-UnnD2w4rUIneNii1VolKsZQ.roa
File: ONS-UnnD2w4rUIneNii1VolKsZQ.roa (raw, json)
Hash identifier: qt1BKkIH1110b1CJ4S1E97NIJ2RO9NbWyV9OWJfUeEw=
Subject key identifier: 38:D4:BE:52:79:C3:DB:0E:2B:50:89:DE:36:28:B5:56:89:4A:B1:94
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1814
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONS-UnnD2w4rUIneNii1VolKsZQ.roa
Signing time: Sat 22 Oct 2022 05:50:57 +0000
ROA not before: Sat 22 Oct 2022 05:50:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.52.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6164 (0x1814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:50:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=38D4BE5279C3DB0E2B5089DE3628B556894AB194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:80:6c:d5:40:ad:fa:f3:ca:19:9b:8e:00:
b8:df:70:81:72:5a:ad:83:65:5a:01:31:78:64:84:
0a:26:83:c9:ba:e2:26:70:05:48:c3:c1:f0:80:96:
fb:ad:7a:bb:e5:ed:58:b4:29:4d:23:7e:fb:cd:f5:
93:52:39:09:fc:5f:92:45:7b:09:0f:8e:c5:de:18:
d4:d0:93:50:b9:3b:e9:67:8e:5b:ff:fa:b8:75:17:
6c:d7:3d:b4:e3:11:81:fb:f3:0c:aa:87:97:02:38:
2f:dd:38:09:3b:1e:83:60:d1:75:dd:7f:b3:9e:41:
b7:1e:8b:0a:08:2a:4e:d0:f7:bf:7d:aa:e5:ed:c4:
bf:91:f4:a4:49:d6:57:c1:c4:49:8a:7f:a7:63:55:
76:47:33:94:8d:2e:6e:69:2c:ae:fb:8c:ca:79:0f:
a9:49:3f:d7:17:09:c0:ca:d9:e0:c0:4e:dd:3e:5f:
00:ee:a9:8c:f5:3b:6e:c7:3b:f6:11:31:b8:b8:af:
3c:2e:6a:a7:38:b4:c4:0f:81:58:1d:47:11:56:04:
c8:93:16:91:68:29:95:97:2e:07:76:3a:e2:af:bf:
c9:c6:c4:e6:99:bc:e6:af:79:0d:dd:b0:bc:7c:d4:
0d:28:8e:90:55:d7:bb:62:9c:fe:c3:43:65:4b:cb:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D4:BE:52:79:C3:DB:0E:2B:50:89:DE:36:28:B5:56:89:4A:B1:94
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONS-UnnD2w4rUIneNii1VolKsZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.52.0/23
Signature Algorithm: sha256WithRSAEncryption
66:a6:5f:70:06:15:78:72:db:87:fe:15:a5:eb:18:47:4b:41:
1e:47:1b:53:be:ca:22:77:0c:d7:94:29:ec:ff:5a:81:de:1c:
09:a1:ef:35:34:c9:7a:fd:c0:d7:d8:54:24:06:e2:97:c1:d6:
3e:61:13:04:7d:09:da:20:66:e8:4b:22:f6:29:2f:8a:16:71:
e0:4c:00:9a:21:c4:9a:89:08:e5:06:0d:8b:e8:96:d5:22:ad:
6f:98:68:b5:d1:4d:49:4e:6b:e6:4f:7b:74:2a:c2:c4:73:37:
48:7e:85:18:b9:52:be:10:0a:d0:39:ac:59:10:76:71:91:79:
ec:8a:85:54:4b:34:f4:16:c6:0f:d1:9b:a0:4c:bf:64:de:cb:
c0:ff:4a:70:8e:c2:13:ae:41:d9:2d:b9:8b:3b:45:db:08:1f:
5e:de:b3:10:35:81:9a:41:ac:32:be:55:39:91:bc:3d:43:8c:
36:b8:be:13:7a:5e:99:d0:ae:fe:11:37:45:24:e0:a1:2b:7a:
76:81:8c:e8:95:40:a7:85:6c:54:00:ab:97:88:4f:82:4c:30:
6e:5a:1c:df:45:7c:6e:58:df:32:17:5e:36:ed:db:62:18:0f:
c6:5a:48:3a:c6:1e:b2:97:82:ec:6b:af:91:a6:f5:1b:0a:da:
01:29:b3:fe
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NTUwNTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM4RDRCRTUyNzlDM0RC
MEUyQjUwODlERTM2MjhCNTU2ODk0QUIxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHooBs1UCt+vPKGZuOALjfcIFyWq2DZVoBMXhkhAomg8m64iZw
BUjDwfCAlvutervl7Vi0KU0jfvvN9ZNSOQn8X5JFewkPjsXeGNTQk1C5O+lnjlv/
+rh1F2zXPbTjEYH78wyqh5cCOC/dOAk7HoNg0XXdf7OeQbceiwoIKk7Q9799quXt
xL+R9KRJ1lfBxEmKf6djVXZHM5SNLm5pLK77jMp5D6lJP9cXCcDK2eDATt0+XwDu
qYz1O27HO/YRMbi4rzwuaqc4tMQPgVgdRxFWBMiTFpFoKZWXLgd2OuKvv8nGxOaZ
vOaveQ3dsLx81A0ojpBV17tinP7DQ2VLy3dDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUONS+UnnD2w4rUIneNii1VolKsZQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09OUy1Vbm5EMnc0clVJbmVO
aWkxVm9sS3NaUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT
TDQwDQYJKoZIhvcNAQELBQADggEBAGamX3AGFXhy24f+FaXrGEdLQR5HG1O+yiJ3
DNeUKez/WoHeHAmh7zU0yXr9wNfYVCQG4pfB1j5hEwR9CdogZuhLIvYpL4oWceBM
AJohxJqJCOUGDYvoltUirW+YaLXRTUlOa+ZPe3QqwsRzN0h+hRi5Ur4QCtA5rFkQ
dnGReeyKhVRLNPQWxg/Rm6BMv2Tey8D/SnCOwhOuQdktuYs7RdsIH17esxA1gZpB
rDK+VTmRvD1DjDa4vhN6XpnQrv4RN0Uk4KErenaBjOiVQKeFbFQAq5eIT4JMMG5a
HN9FfG5Y3zIXXjbt22IYD8ZaSDrGHrKXguxrr5Gm9RsK2gEps/4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org