Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PkJHarEHIg9VNGf1BBpYc7DrRj0.roa
File: PkJHarEHIg9VNGf1BBpYc7DrRj0.roa (raw, json)
Hash identifier: nulV6ocnRWqv3SSyiUoEg2mapYxmOHYDQjJVGJM6hMY=
Subject key identifier: 3E:42:47:6A:B1:07:22:0F:55:34:67:F5:04:1A:58:73:B0:EB:46:3D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A00
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PkJHarEHIg9VNGf1BBpYc7DrRj0.roa
Signing time: Sat 22 Oct 2022 06:15:45 +0000
ROA not before: Sat 22 Oct 2022 06:15:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.60.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6656 (0x1a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:15:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3E42476AB107220F553467F5041A5873B0EB463D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:12:01:05:e0:ba:f1:65:6a:b9:fd:67:92:
e8:6f:6a:f6:2d:2e:ff:19:e4:0b:37:aa:57:13:a6:
35:e9:19:ab:f8:3a:12:d3:7f:08:01:85:b6:8b:6b:
aa:a9:69:49:eb:f7:f1:f6:77:7f:b1:f9:b6:9e:02:
96:50:5f:6c:01:ca:44:01:46:e3:8b:d7:fc:c5:bd:
29:75:a2:fe:db:f3:6c:b0:4d:f9:cb:f7:82:3d:a6:
7a:b7:be:9e:5a:86:62:12:da:92:dc:7d:7a:89:cb:
c4:9d:2f:f5:38:d0:65:80:22:ac:8d:a9:bf:d9:06:
fc:10:7d:9b:c5:33:26:a7:3e:c5:1e:cf:95:28:42:
c3:c0:a4:a0:3b:a2:c2:29:c9:8b:f4:7b:0e:b2:5b:
38:6e:75:bf:a3:ce:d0:d4:61:98:14:31:6d:d6:9a:
3e:bb:c0:31:f4:a1:4b:52:7b:79:5e:66:cf:3c:05:
89:ee:46:e9:0d:d0:83:3e:a3:48:0c:a0:7c:5d:23:
3e:34:e9:91:a5:3f:34:a7:2f:c2:91:28:11:2c:88:
8b:7b:61:8f:20:5e:ff:9c:85:d6:2a:9d:96:7f:f4:
8e:ef:b1:40:0e:ee:a7:ad:60:7f:2d:cc:c8:65:6f:
c8:4f:eb:00:52:60:d9:c9:fb:3a:de:8f:20:ed:b1:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:47:6A:B1:07:22:0F:55:34:67:F5:04:1A:58:73:B0:EB:46:3D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PkJHarEHIg9VNGf1BBpYc7DrRj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.216.0/21
Signature Algorithm: sha256WithRSAEncryption
51:68:aa:eb:f0:d6:a4:02:18:74:5f:17:70:4f:3f:fe:13:f8:
ef:31:bb:2a:42:f2:a2:21:34:68:bc:70:b6:f4:9c:38:d6:ac:
20:59:1b:a4:27:5f:a5:a8:2a:f1:bb:47:3f:31:24:fa:51:7f:
fe:55:b6:f3:66:66:60:d4:b5:56:93:f6:15:31:e7:f8:3b:5e:
0f:b0:58:64:a9:06:81:ef:e6:1b:f8:af:b0:aa:6a:4b:9b:61:
51:e3:a5:6a:8b:58:03:74:47:6d:f3:70:52:10:f4:8b:af:a1:
58:0b:a4:f0:03:61:53:98:13:f7:49:6d:27:dd:11:d6:94:ae:
7c:4b:94:bc:a1:4b:b3:25:70:8a:1a:91:78:00:17:64:7d:08:
54:af:a4:e2:bb:1d:e7:60:97:f9:b1:49:13:67:84:16:1e:5b:
e3:c3:a1:ba:6b:18:cb:ca:1c:64:6f:60:41:f2:25:6d:1c:1a:
18:1c:16:8b:01:e6:1b:7e:87:e5:24:d0:96:e8:95:a5:d0:e7:
0d:0a:ff:e8:47:66:f1:5a:87:02:d8:fe:29:96:77:fc:99:f8:
d8:81:21:1d:72:a0:f9:82:d4:8f:7c:55:c6:39:29:55:69:df:
d3:f4:b9:dc:65:5c:e5:55:25:ec:7b:ec:f6:7c:e7:c6:79:06:
76:b8:b7:9d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjE1NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNFNDI0NzZBQjEwNzIy
MEY1NTM0NjdGNTA0MUE1ODczQjBFQjQ2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXDxIBBeC68WVquf1nkuhvavYtLv8Z5As3qlcTpjXpGav4OhLT
fwgBhbaLa6qpaUnr9/H2d3+x+baeApZQX2wBykQBRuOL1/zFvSl1ov7b82ywTfnL
94I9pnq3vp5ahmIS2pLcfXqJy8SdL/U40GWAIqyNqb/ZBvwQfZvFMyanPsUez5Uo
QsPApKA7osIpyYv0ew6yWzhudb+jztDUYZgUMW3Wmj67wDH0oUtSe3leZs88BYnu
RukN0IM+o0gMoHxdIz406ZGlPzSnL8KRKBEsiIt7YY8gXv+chdYqnZZ/9I7vsUAO
7qetYH8tzMhlb8hP6wBSYNnJ+zrejyDtsRE1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPkJHarEHIg9VNGf1BBpYc7DrRj0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BrSkhhckVISWc5Vk5HZjFC
QnBZYzdEclJqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
PNgwDQYJKoZIhvcNAQELBQADggEBAFFoquvw1qQCGHRfF3BPP/4T+O8xuypC8qIh
NGi8cLb0nDjWrCBZG6QnX6WoKvG7Rz8xJPpRf/5VtvNmZmDUtVaT9hUx5/g7Xg+w
WGSpBoHv5hv4r7CqakubYVHjpWqLWAN0R23zcFIQ9IuvoVgLpPADYVOYE/dJbSfd
EdaUrnxLlLyhS7MlcIoakXgAF2R9CFSvpOK7Hedgl/mxSRNnhBYeW+PDobprGMvK
HGRvYEHyJW0cGhgcFosB5ht+h+Uk0JbolaXQ5w0K/+hHZvFahwLY/imWd/yZ+NiB
IR1yoPmC1I98VcY5KVVp39P0udxlXOVVJex77PZ858Z5Bna4t50=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org