Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PK1rdSigqeG0FifIzo8-M34EtXQ.roa
File: PK1rdSigqeG0FifIzo8-M34EtXQ.roa (raw, json)
Hash identifier: Esui0+rXDSMD5UAG2LXSVWH2TaFMRxbJRwQDeYI8/Og=
Subject key identifier: 3C:AD:6B:75:28:A0:A9:E1:B4:16:27:C8:CE:8F:3E:33:7E:04:B5:74
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AD7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PK1rdSigqeG0FifIzo8-M34EtXQ.roa
Signing time: Tue 29 Sep 2020 10:07:41 +0000
ROA not before: Tue 29 Sep 2020 10:07:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2775 (0xad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3CAD6B7528A0A9E1B41627C8CE8F3E337E04B574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:fd:0b:58:b7:b6:a5:15:f4:fd:f2:01:81:
e6:bb:d8:8e:a2:f8:41:03:18:94:83:71:9a:a3:b3:
91:07:d8:df:e4:69:de:a6:2e:4f:8a:c9:53:8b:e4:
64:31:14:c2:48:6a:7b:6a:7e:3c:6c:ad:3f:32:d1:
93:1c:26:21:af:09:ed:8a:2b:fe:00:7d:e9:e9:a9:
91:76:7e:30:7f:80:c4:40:55:7f:86:63:0b:b1:0b:
a0:3d:a8:ee:43:46:b1:db:13:19:ba:f6:eb:ff:0e:
00:7d:2c:99:0a:7e:4c:14:a3:38:8b:7e:c9:71:3a:
bc:94:03:da:00:3c:00:c3:4c:94:56:49:5b:4e:57:
06:f5:41:6b:3e:ad:4a:50:d3:3d:34:34:5f:3e:e8:
3c:de:93:f0:a0:2c:5e:ae:4d:3e:22:5c:ba:fe:00:
c4:07:19:dd:db:20:d7:ab:62:25:09:5b:60:d2:5b:
81:c6:ae:97:c8:ce:ac:b2:f5:6a:d6:ba:54:5c:eb:
a5:9f:85:d4:a1:27:e1:8e:c4:aa:6e:da:9d:7c:e1:
f6:8f:a5:51:80:fd:57:05:e8:ea:68:98:4f:8e:63:
64:22:a6:8a:c1:b7:42:b7:f9:ac:12:16:71:2c:31:
f7:14:e0:5d:b2:a8:ac:8a:07:62:5e:d1:51:35:47:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:6B:75:28:A0:A9:E1:B4:16:27:C8:CE:8F:3E:33:7E:04:B5:74
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PK1rdSigqeG0FifIzo8-M34EtXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.144.0/21
Signature Algorithm: sha256WithRSAEncryption
60:6c:5a:19:93:d0:3d:5d:bf:f0:0a:f7:54:fa:02:f9:8b:aa:
4e:de:80:a6:84:cf:7a:0f:a3:dd:fc:a4:11:cb:ef:90:b4:03:
e3:b1:f7:b7:ba:71:c0:f4:cb:8e:48:28:ec:b1:1d:f1:3c:d8:
c3:1d:91:c2:63:8b:04:09:46:e0:df:c5:4f:77:d8:c8:9c:c9:
72:4f:06:4a:de:e1:45:4f:46:dd:7a:00:d7:cb:dc:3e:6e:a4:
46:78:b0:f1:17:5f:44:28:36:3d:ee:9c:4c:42:e5:52:31:10:
25:10:eb:d4:47:fb:75:e6:ed:f8:87:a1:4c:ed:e7:52:79:2b:
68:50:73:c2:bb:90:ab:b3:01:1d:ec:bc:4a:ac:63:85:59:04:
9a:c0:f9:3a:e7:e1:a4:fc:07:41:57:8f:65:28:9c:5a:61:f1:
ad:1b:47:06:9c:08:4a:3c:e2:07:8b:59:fc:60:8b:9e:b0:71:
7e:ad:19:73:94:f8:78:31:49:1c:1e:e3:55:a2:a0:5c:5b:66:
fc:26:fa:79:25:0c:77:75:10:55:97:ef:5b:29:c0:bc:ea:58:
9e:b3:44:5b:a3:9c:fd:94:f8:73:7a:80:56:f8:40:7f:8a:7b:
9b:41:f8:d2:e1:ec:47:18:1f:2d:07:7b:bd:85:9e:98:27:49:
b0:a1:71:75
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNDQUQ2Qjc1MjhBMEE5
RTFCNDE2MjdDOENFOEYzRTMzN0UwNEI1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBhv0LWLe2pRX0/fIBgea72I6i+EEDGJSDcZqjs5EH2N/kad6m
Lk+KyVOL5GQxFMJIantqfjxsrT8y0ZMcJiGvCe2KK/4AfenpqZF2fjB/gMRAVX+G
YwuxC6A9qO5DRrHbExm69uv/DgB9LJkKfkwUoziLfslxOryUA9oAPADDTJRWSVtO
Vwb1QWs+rUpQ0z00NF8+6Dzek/CgLF6uTT4iXLr+AMQHGd3bINerYiUJW2DSW4HG
rpfIzqyy9WrWulRc66WfhdShJ+GOxKpu2p184faPpVGA/VcF6OpomE+OY2QiporB
t0K3+awSFnEsMfcU4F2yqKyKB2Je0VE1RxWRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPK1rdSigqeG0FifIzo8+M34EtXQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BLMXJkU2lncWVHMEZpZkl6
bzgtTTM0RXRYUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n5AwDQYJKoZIhvcNAQELBQADggEBAGBsWhmT0D1dv/AK91T6AvmLqk7egKaEz3oP
o938pBHL75C0A+Ox97e6ccD0y45IKOyxHfE82MMdkcJjiwQJRuDfxU932MicyXJP
Bkre4UVPRt16ANfL3D5upEZ4sPEXX0QoNj3unExC5VIxECUQ69RH+3Xm7fiHoUzt
51J5K2hQc8K7kKuzAR3svEqsY4VZBJrA+Trn4aT8B0FXj2UonFph8a0bRwacCEo8
4geLWfxgi56wcX6tGXOU+HgxSRwe41WioFxbZvwm+nklDHd1EFWX71spwLzqWJ6z
RFujnP2U+HN6gFb4QH+Ke5tB+NLh7EcYHy0He72FnpgnSbChcXU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org