Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P7fGDKO2seda3VzYgC2ShNyYUlk.roa
File: P7fGDKO2seda3VzYgC2ShNyYUlk.roa (raw, json)
Hash identifier: IF9yMNSj3SfMKg7aOIUgDgRk7o5UDEfBpUlJqlqewzs=
Subject key identifier: 3F:B7:C6:0C:A3:B6:B1:E7:5A:DD:5C:D8:80:2D:92:84:DC:98:52:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F13
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P7fGDKO2seda3VzYgC2ShNyYUlk.roa
Signing time: Sun 07 Feb 2021 12:32:47 +0000
ROA not before: Sun 07 Feb 2021 12:32:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 103.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3859 (0xf13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3FB7C60CA3B6B1E75ADD5CD8802D9284DC985259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:0f:8b:e5:67:8d:d8:d3:c3:46:3c:5c:c3:
b8:5b:57:9b:52:83:5a:37:6e:85:eb:2d:de:43:10:
8e:4b:03:bb:12:dc:88:8a:0c:45:6c:db:e1:0b:c1:
e5:fb:37:0b:f6:d2:32:51:18:2c:23:f5:7e:54:37:
7b:b6:6f:ed:9d:06:96:ac:29:7c:fa:13:ba:a3:76:
9d:39:2d:5c:72:0e:91:77:6c:76:f2:e7:ee:7a:dc:
62:c9:9f:17:ff:ce:13:79:0f:75:18:2d:77:60:47:
44:38:d5:91:c3:8c:41:81:02:95:2b:e2:ad:96:5c:
75:8e:fb:74:ad:fb:a2:07:66:47:8e:32:6e:da:c9:
72:0d:46:7e:1b:bc:29:4d:6e:7a:66:bb:3e:7f:bc:
ec:f6:08:c5:e8:27:6f:d8:55:cd:41:6f:3a:97:9e:
da:70:05:9d:38:2a:4c:5f:bd:2b:ac:f0:2f:1b:dc:
c8:1d:3f:81:8a:b7:75:c5:0f:1e:0e:46:51:0b:c1:
bd:f9:ed:75:c0:38:b4:c0:f6:2d:5e:25:22:e9:56:
aa:b9:71:d9:31:d7:1a:3c:2a:aa:b4:6e:d7:b1:72:
20:29:0e:c2:36:10:7d:e8:f3:07:8b:79:3d:d5:d6:
6d:98:ec:5c:c5:a3:07:6c:5d:1e:a1:80:02:f5:70:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B7:C6:0C:A3:B6:B1:E7:5A:DD:5C:D8:80:2D:92:84:DC:98:52:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/P7fGDKO2seda3VzYgC2ShNyYUlk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d0:e7:ec:f9:9f:e4:22:16:26:74:eb:70:1b:d1:73:e6:61:
bd:7b:ae:8b:f3:8a:7b:ed:72:53:b7:de:90:1a:a8:12:47:a4:
a5:a9:01:95:9d:6a:dc:24:c1:dc:d2:65:7d:49:55:8f:7f:3c:
61:73:6c:6a:e8:32:3a:99:53:1d:15:63:2e:96:47:01:79:c9:
aa:d5:6e:1a:a3:72:b9:3f:54:09:dc:1f:c8:1b:ed:e0:72:37:
62:ff:18:01:85:db:5c:36:7a:52:af:a3:34:ec:d1:4a:bf:c1:
21:8f:4e:53:56:61:41:a9:f8:27:44:31:69:df:47:31:bb:f8:
72:2e:b6:fe:48:e7:5d:e1:fc:54:09:f7:8a:cd:3d:49:1a:ee:
15:db:50:aa:e1:51:4c:79:1d:0a:7b:0b:e9:29:09:bb:df:37:
19:8e:07:ce:18:34:e2:ba:9f:9e:4a:46:86:82:25:03:a8:db:
61:f4:ce:5b:6d:4f:e9:7b:e6:96:45:3f:50:8e:b8:4f:31:a7:
25:5e:78:dd:2d:e8:c2:ce:33:1d:78:c4:16:82:25:54:e3:48:
1b:3b:39:79:1d:94:51:92:86:a2:d6:f7:b6:db:62:f6:1f:19:
af:d2:d5:04:10:15:3e:7e:a6:42:e5:c0:59:ca:f9:5c:e3:7e:
06:d7:83:83
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMyNDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNGQjdDNjBDQTNCNkIx
RTc1QURENUNEODgwMkQ5Mjg0REM5ODUyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq8Q+L5WeN2NPDRjxcw7hbV5tSg1o3boXrLd5DEI5LA7sS3IiK
DEVs2+ELweX7Nwv20jJRGCwj9X5UN3u2b+2dBpasKXz6E7qjdp05LVxyDpF3bHby
5+563GLJnxf/zhN5D3UYLXdgR0Q41ZHDjEGBApUr4q2WXHWO+3St+6IHZkeOMm7a
yXINRn4bvClNbnpmuz5/vOz2CMXoJ2/YVc1BbzqXntpwBZ04KkxfvSus8C8b3Mgd
P4GKt3XFDx4ORlELwb357XXAOLTA9i1eJSLpVqq5cdkx1xo8Kqq0btexciApDsI2
EH3o8weLeT3V1m2Y7FzFowdsXR6hgAL1cFp7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUP7fGDKO2seda3VzYgC2ShNyYUlkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1A3ZkdES08yc2VkYTNWelln
QzJTaE55WVVsay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
4QAwDQYJKoZIhvcNAQELBQADggEBAFjQ5+z5n+QiFiZ063Ab0XPmYb17rovzinvt
clO33pAaqBJHpKWpAZWdatwkwdzSZX1JVY9/PGFzbGroMjqZUx0VYy6WRwF5yarV
bhqjcrk/VAncH8gb7eByN2L/GAGF21w2elKvozTs0Uq/wSGPTlNWYUGp+CdEMWnf
RzG7+HIutv5I513h/FQJ94rNPUka7hXbUKrhUUx5HQp7C+kpCbvfNxmOB84YNOK6
n55KRoaCJQOo22H0zlttT+l75pZFP1COuE8xpyVeeN0t6MLOMx14xBaCJVTjSBs7
OXkdlFGShqLW97bbYvYfGa/S1QQQFT5+pkLlwFnK+VzjfgbXg4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org