Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R-J4qsGlJ-nXrF85ESXCPgdsu5E.roa
File: R-J4qsGlJ-nXrF85ESXCPgdsu5E.roa (raw, json)
Hash identifier: 5Bm117fghvocvdkBKAyJbbOzMCfvg/2itY6EtyDHSy4=
Subject key identifier: 47:E2:78:AA:C1:A5:27:E9:D7:AC:5F:39:11:25:C2:3E:07:6C:BB:91
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R-J4qsGlJ-nXrF85ESXCPgdsu5E.roa
Signing time: Thu 15 Sep 2022 02:36:45 +0000
ROA not before: Thu 15 Sep 2022 02:36:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=47E278AAC1A527E9D7AC5F391125C23E076CBB91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:bc:85:fc:c6:02:54:19:ed:88:77:f0:40:
f4:d2:81:8e:a5:82:d9:8b:19:22:d6:d0:3e:1b:9c:
e6:cf:93:53:a2:10:10:28:c9:4c:eb:ee:04:4d:9d:
28:2c:5a:9f:94:3c:8e:5d:b3:b2:93:2a:cd:47:9f:
19:dc:6a:d0:3a:f9:18:37:85:17:9b:26:82:0c:c0:
73:cd:dc:86:9a:ca:74:c6:c1:19:b0:d9:ff:d6:4d:
78:12:67:3f:44:22:39:36:0e:b1:e4:3a:77:22:8c:
3b:df:ba:1b:01:8c:f0:46:bd:6a:f4:af:21:94:f2:
6a:f7:91:fc:da:fa:bf:12:76:0c:45:82:33:75:7c:
78:25:84:85:4b:83:de:18:41:81:53:1f:1f:7e:3a:
98:aa:dd:79:47:f2:3d:d0:ac:fd:49:44:95:59:e8:
0e:44:65:11:67:a1:12:c9:81:76:4a:7d:29:5a:c3:
8e:b3:f6:31:32:0f:7a:1d:d6:78:22:42:2d:4e:5a:
b9:ec:e6:b0:08:01:d8:31:66:7d:06:12:fb:ae:9c:
ec:07:e3:24:59:ae:f0:cd:43:e0:7d:40:a0:03:f8:
5a:57:d4:76:56:37:39:e1:00:7e:bc:51:88:a8:c6:
a2:f5:7e:b6:e0:73:f8:fc:40:24:7f:7f:89:b1:a1:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:78:AA:C1:A5:27:E9:D7:AC:5F:39:11:25:C2:3E:07:6C:BB:91
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R-J4qsGlJ-nXrF85ESXCPgdsu5E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.60.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b4:7b:f5:c2:b0:7d:66:c8:52:74:07:14:d2:a6:31:f3:35:
14:e8:56:43:a4:d3:9a:f2:94:0c:35:8b:3f:97:70:3c:86:ef:
e3:70:cd:9f:da:09:ac:2a:5e:04:22:1f:42:a9:ea:95:57:68:
75:b9:18:a0:30:68:c6:9f:cc:63:a1:e6:5f:58:79:03:37:35:
47:59:1b:bc:92:c4:a7:97:a3:88:b2:95:1a:fa:40:78:d1:da:
51:5a:08:aa:6d:04:c7:8c:42:a5:60:91:1c:62:cd:18:d7:cf:
91:95:77:53:dc:c0:d9:57:ca:39:cf:3a:cc:c7:97:3b:c3:8e:
4a:18:a1:63:03:66:f0:f7:8e:30:58:8d:fd:f6:35:bc:16:4a:
87:65:e3:a6:f2:88:fa:47:15:66:9e:5b:e1:af:2a:b6:6b:2e:
74:c2:34:41:9f:4e:6b:91:5a:52:9e:4a:d6:ce:30:19:9c:18:
a2:3c:05:86:84:8b:62:ab:57:af:b7:9d:37:7e:c0:12:3a:d1:
23:45:7b:89:d1:03:da:c4:f9:79:36:b0:6c:7e:fc:0d:a6:66:
af:78:01:b2:ab:f8:c7:fb:1f:9b:78:3f:8b:2a:cd:9b:30:65:
2d:e0:02:01:be:62:7f:83:c5:d9:c5:ac:75:50:31:56:69:8b:
30:a0:f3:88
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ3RTI3OEFBQzFBNTI3
RTlEN0FDNUYzOTExMjVDMjNFMDc2Q0JCOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlJ7yF/MYCVBntiHfwQPTSgY6lgtmLGSLW0D4bnObPk1OiEBAo
yUzr7gRNnSgsWp+UPI5ds7KTKs1HnxncatA6+Rg3hRebJoIMwHPN3IaaynTGwRmw
2f/WTXgSZz9EIjk2DrHkOncijDvfuhsBjPBGvWr0ryGU8mr3kfza+r8SdgxFgjN1
fHglhIVLg94YQYFTHx9+Opiq3XlH8j3QrP1JRJVZ6A5EZRFnoRLJgXZKfSlaw46z
9jEyD3od1ngiQi1OWrns5rAIAdgxZn0GEvuunOwH4yRZrvDNQ+B9QKAD+FpX1HZW
NznhAH68UYioxqL1frbgc/j8QCR/f4mxofiZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUR+J4qsGlJ+nXrF85ESXCPgdsu5EwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ItSjRxc0dsSi1uWHJGODVF
U1hDUGdkc3U1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
njwwDQYJKoZIhvcNAQELBQADggEBAFe0e/XCsH1myFJ0BxTSpjHzNRToVkOk05ry
lAw1iz+XcDyG7+NwzZ/aCawqXgQiH0Kp6pVXaHW5GKAwaMafzGOh5l9YeQM3NUdZ
G7ySxKeXo4iylRr6QHjR2lFaCKptBMeMQqVgkRxizRjXz5GVd1PcwNlXyjnPOszH
lzvDjkoYoWMDZvD3jjBYjf32NbwWSodl46byiPpHFWaeW+GvKrZrLnTCNEGfTmuR
WlKeStbOMBmcGKI8BYaEi2KrV6+3nTd+wBI60SNFe4nRA9rE+Xk2sGx+/A2mZq94
AbKr+Mf7H5t4P4sqzZswZS3gAgG+Yn+DxdnFrHVQMVZpizCg84g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org