Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QfF97D2eIFcM1FOXHIMomy87F3Q.roa
File: QfF97D2eIFcM1FOXHIMomy87F3Q.roa (raw, json)
Hash identifier: rCFYkL6YNapevh9XtJSMllTI1gEOSB1vvnMkRY8Czs4=
Subject key identifier: 41:F1:7D:EC:3D:9E:20:57:0C:D4:53:97:1C:83:28:9B:2F:3B:17:74
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QfF97D2eIFcM1FOXHIMomy87F3Q.roa
Signing time: Thu 15 Sep 2022 02:36:14 +0000
ROA not before: Thu 15 Sep 2022 02:36:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=41F17DEC3D9E20570CD453971C83289B2F3B1774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:53:29:38:aa:a8:79:27:2b:79:46:2d:01:
a9:0d:53:10:da:11:1f:01:62:9e:ee:aa:35:ac:83:
74:72:88:f7:12:5d:95:39:dc:1e:94:25:50:6f:ac:
2e:12:4f:59:bf:bb:1b:15:44:7c:3c:ec:37:bd:a7:
db:e1:74:fc:9c:de:8d:17:f7:64:6f:f7:c9:9f:68:
ea:ff:44:54:81:8e:b1:e7:df:a0:e6:05:ec:9c:e5:
91:ef:8a:44:a3:cb:65:b8:87:dd:9d:2a:34:db:84:
b8:1e:df:9c:cd:23:10:aa:b5:78:d9:aa:ee:79:0c:
b0:b0:c9:5c:fe:e6:39:1d:37:49:06:20:74:1c:a0:
7e:8e:b1:cb:bf:e0:7c:29:bf:74:62:09:ba:85:8f:
3f:63:65:4f:d1:ce:f2:cc:81:c0:fa:05:44:48:4a:
46:14:65:31:d8:b1:23:b3:0a:7a:8c:43:87:f7:9d:
8a:60:ba:0e:b2:82:fa:dc:72:86:e2:f4:2d:8e:c6:
f0:30:34:bc:89:6b:31:d1:2e:72:62:e9:be:17:a9:
b9:3f:a2:6a:59:01:6f:4b:4b:8e:d3:7a:d8:e0:0b:
b6:72:5a:04:bf:a1:b8:14:2c:77:33:ff:88:8c:4d:
1b:93:29:10:29:c4:01:7f:3e:a4:03:21:b1:e5:23:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F1:7D:EC:3D:9E:20:57:0C:D4:53:97:1C:83:28:9B:2F:3B:17:74
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QfF97D2eIFcM1FOXHIMomy87F3Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.79.0/24
Signature Algorithm: sha256WithRSAEncryption
64:22:4e:8e:ff:a9:e0:ed:94:dd:d8:cb:b1:55:f0:ee:f4:12:
48:66:ea:85:49:5c:84:ce:d7:78:e1:d3:e8:18:a9:02:10:74:
10:96:8b:10:53:bc:d1:58:60:fe:ca:8f:20:b0:31:d6:45:8f:
67:9e:67:1c:9f:db:7c:47:ae:22:e8:0c:be:02:08:bf:65:dc:
b5:c1:01:0e:c1:d0:28:6e:83:76:95:5c:0e:1d:25:24:ac:2b:
ec:7c:fa:67:24:b8:03:1d:3b:a4:97:0b:d2:4e:9c:82:97:3c:
e9:aa:c9:2d:ee:4c:da:ba:04:e6:fa:47:7c:c4:85:44:15:4a:
97:51:4c:35:4d:45:56:02:10:b0:ab:35:e1:02:88:94:f8:34:
fd:4f:b9:5a:32:3f:78:ad:92:e8:65:d9:3c:4f:56:34:aa:09:
36:2f:20:48:e6:5c:27:56:86:e5:78:ad:48:82:ca:ea:89:f1:
ae:a1:cb:24:f5:bc:48:7d:57:64:f7:93:cf:86:5a:54:54:0e:
5d:28:1f:bb:de:a3:c5:e0:20:62:58:13:2c:37:b6:4a:4e:b4:
2b:33:4a:88:1a:aa:e6:ad:16:b5:96:20:1c:33:b7:10:cf:1c:
01:d7:7f:59:22:37:b0:36:11:e0:54:22:33:ba:fc:c9:c6:37:
97:c1:0c:f7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQxRjE3REVDM0Q5RTIw
NTcwQ0Q0NTM5NzFDODMyODlCMkYzQjE3NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK3VMpOKqoeScreUYtAakNUxDaER8BYp7uqjWsg3RyiPcSXZU5
3B6UJVBvrC4ST1m/uxsVRHw87De9p9vhdPyc3o0X92Rv98mfaOr/RFSBjrHn36Dm
Beyc5ZHvikSjy2W4h92dKjTbhLge35zNIxCqtXjZqu55DLCwyVz+5jkdN0kGIHQc
oH6Oscu/4Hwpv3RiCbqFjz9jZU/RzvLMgcD6BURISkYUZTHYsSOzCnqMQ4f3nYpg
ug6ygvrccobi9C2OxvAwNLyJazHRLnJi6b4Xqbk/ompZAW9LS47TetjgC7ZyWgS/
obgULHcz/4iMTRuTKRApxAF/PqQDIbHlIwNJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQfF97D2eIFcM1FOXHIMomy87F3QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FmRjk3RDJlSUZjTTFGT1hI
SU1vbXk4N0YzUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TE8wDQYJKoZIhvcNAQELBQADggEBAGQiTo7/qeDtlN3Yy7FV8O70Ekhm6oVJXITO
13jh0+gYqQIQdBCWixBTvNFYYP7KjyCwMdZFj2eeZxyf23xHriLoDL4CCL9l3LXB
AQ7B0Chug3aVXA4dJSSsK+x8+mckuAMdO6SXC9JOnIKXPOmqyS3uTNq6BOb6R3zE
hUQVSpdRTDVNRVYCELCrNeECiJT4NP1PuVoyP3itkuhl2TxPVjSqCTYvIEjmXCdW
huV4rUiCyuqJ8a6hyyT1vEh9V2T3k8+GWlRUDl0oH7veo8XgIGJYEyw3tkpOtCsz
SogaquatFrWWIBwztxDPHAHXf1kiN7A2EeBUIjO6/MnGN5fBDPc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org