Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S2TmYhmsfELuDMG83bK98Iz1wtI.roa
File: S2TmYhmsfELuDMG83bK98Iz1wtI.roa (raw, json)
Hash identifier: 7nxsExzZrOZ8+XmfJ1l4N219gmNWBkGO+T59J84534w=
Subject key identifier: 4B:64:E6:62:19:AC:7C:42:EE:0C:C1:BC:DD:B2:BD:F0:8C:F5:C2:D2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F63
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S2TmYhmsfELuDMG83bK98Iz1wtI.roa
Signing time: Sun 07 Feb 2021 12:33:57 +0000
ROA not before: Sun 07 Feb 2021 12:33:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4B64E66219AC7C42EE0CC1BCDDB2BDF08CF5C2D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:1d:58:9a:fa:8a:1e:98:76:9b:59:46:d8:
3f:13:4d:c8:d0:6e:76:64:7c:c8:2e:ed:84:57:c2:
cf:89:34:26:b2:4a:a4:8b:89:19:f3:8b:ea:46:be:
51:b6:3c:6e:2c:9f:1a:07:a3:ff:ac:e4:f7:eb:04:
1b:c9:82:25:9a:e0:c1:c5:22:2c:39:1b:81:e3:21:
b2:0e:2a:fe:38:8e:ff:be:e6:8b:43:8f:2b:fa:2a:
15:77:48:db:5f:2a:eb:4a:45:bf:74:91:42:3d:53:
24:f1:5e:62:6c:cc:76:14:d1:64:45:35:f2:1b:ad:
c7:1c:5e:28:22:b4:e8:70:94:39:49:8d:b4:4d:ee:
ae:4b:1c:f1:9b:c6:24:f4:25:c0:61:ed:d0:cf:98:
b1:85:96:15:eb:53:17:85:74:20:a6:33:e3:ec:ac:
93:48:4b:50:d5:6b:0f:2a:d9:6a:7d:c9:43:b0:e0:
38:64:5e:6c:32:71:52:de:36:74:48:46:d8:55:8d:
b1:d4:76:ce:b0:34:73:d5:5d:56:0d:65:38:77:6b:
9e:eb:e8:84:cc:d3:17:62:43:3b:fd:ef:bc:e2:87:
64:38:35:51:13:b3:d0:61:cc:9a:a4:74:54:ef:08:
7e:22:aa:d5:3d:91:b7:28:58:95:15:18:cb:44:14:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:E6:62:19:AC:7C:42:EE:0C:C1:BC:DD:B2:BD:F0:8C:F5:C2:D2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S2TmYhmsfELuDMG83bK98Iz1wtI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:7d:9e:3f:15:1a:99:d4:fe:44:97:65:ce:22:6f:63:73:9f:
b1:8c:8d:09:96:c0:78:29:21:c1:2d:2d:57:15:da:5d:8b:b6:
ab:6e:3d:d6:27:7d:fa:b3:3c:1a:bf:4f:6e:d9:1a:2a:9d:68:
e1:12:60:ae:5e:86:4a:d6:f2:62:22:22:a5:a3:50:5d:71:b7:
b1:a6:4e:57:7b:5a:30:f9:f6:cf:0d:77:20:ae:7b:6b:8a:10:
9a:98:4c:74:ba:2a:24:4e:33:3b:90:85:2b:06:6b:f0:53:b9:
c3:f1:bb:a0:e1:b1:e0:fe:90:d0:8b:7b:b4:52:e2:cf:a2:d5:
c0:55:66:bc:c4:fc:c6:45:0b:b0:30:15:4e:7d:53:47:19:2f:
ff:fb:8b:29:6c:76:f8:19:63:3d:10:41:2a:4d:bd:c3:8f:12:
52:d7:38:29:23:b1:91:80:1c:10:b8:6f:ae:9b:40:ab:db:40:
77:e8:6e:9e:91:7a:db:ae:de:d7:5e:e9:7a:72:2a:00:5a:a8:
2a:01:bd:38:74:20:80:68:c1:8f:4b:7a:09:19:6a:48:4a:85:
72:17:f2:b3:6d:47:6d:f1:91:ee:9d:0b:30:87:1d:7b:37:19:
8b:de:e0:a7:18:6b:bb:3f:ef:32:ad:3f:04:ff:90:fc:f7:e1:
b3:c9:08:4f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMzNTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRCNjRFNjYyMTlBQzdD
NDJFRTBDQzFCQ0REQjJCREYwOENGNUMyRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/Nx1YmvqKHph2m1lG2D8TTcjQbnZkfMgu7YRXws+JNCaySqSL
iRnzi+pGvlG2PG4snxoHo/+s5PfrBBvJgiWa4MHFIiw5G4HjIbIOKv44jv++5otD
jyv6KhV3SNtfKutKRb90kUI9UyTxXmJszHYU0WRFNfIbrcccXigitOhwlDlJjbRN
7q5LHPGbxiT0JcBh7dDPmLGFlhXrUxeFdCCmM+PsrJNIS1DVaw8q2Wp9yUOw4Dhk
XmwycVLeNnRIRthVjbHUds6wNHPVXVYNZTh3a57r6ITM0xdiQzv977zih2Q4NVET
s9BhzJqkdFTvCH4iqtU9kbcoWJUVGMtEFJ59AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUS2TmYhmsfELuDMG83bK98Iz1wtIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1MyVG1ZaG1zZkVMdURNRzgz
Yks5OEl6MXd0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
/iAwDQYJKoZIhvcNAQELBQADggEBAG59nj8VGpnU/kSXZc4ib2Nzn7GMjQmWwHgp
IcEtLVcV2l2LtqtuPdYnffqzPBq/T27ZGiqdaOESYK5ehkrW8mIiIqWjUF1xt7Gm
Tld7WjD59s8NdyCue2uKEJqYTHS6KiROMzuQhSsGa/BTucPxu6DhseD+kNCLe7RS
4s+i1cBVZrzE/MZFC7AwFU59U0cZL//7iylsdvgZYz0QQSpNvcOPElLXOCkjsZGA
HBC4b66bQKvbQHfobp6Retuu3tde6XpyKgBaqCoBvTh0IIBowY9LegkZakhKhXIX
8rNtR23xke6dCzCHHXs3GYve4KcYa7s/7zKtPwT/kPz34bPJCE8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-fra.rpki-client.org