Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNFEC9-uWMvURLYiZ_eFuZVrgEg.roa
File: SNFEC9-uWMvURLYiZ_eFuZVrgEg.roa (raw, json)
Hash identifier: Gy0li3Vq5qArPhEqkSmniDub0z3AVaz3fyqyzdG25IE=
Subject key identifier: 48:D1:44:0B:DF:AE:58:CB:D4:44:B6:22:67:F7:85:B9:95:6B:80:48
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A0A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNFEC9-uWMvURLYiZ_eFuZVrgEg.roa
Signing time: Sat 22 Oct 2022 06:16:42 +0000
ROA not before: Sat 22 Oct 2022 06:16:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6666 (0x1a0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:16:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=48D1440BDFAE58CBD444B62267F785B9956B8048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:5c:8a:f2:00:b7:e0:7f:db:33:b4:7b:8a:
fc:c9:b4:cf:cd:51:6f:c7:b6:7d:a4:dd:29:f9:91:
4b:ae:a5:af:59:8c:81:86:80:70:2f:4c:e8:ff:32:
eb:8d:9d:47:d4:bf:86:8e:a6:55:91:e8:dd:1b:8d:
c7:f6:d8:c4:56:b0:c9:24:e3:36:2b:c5:35:49:0c:
c5:17:40:e4:f4:a5:90:71:28:30:85:03:fb:86:07:
2e:a2:b4:23:62:ba:16:31:d3:ca:1e:28:da:13:42:
87:d0:ae:23:39:1e:87:0d:6b:fe:7f:43:7b:35:cb:
42:ae:b1:81:f8:e7:3c:45:2f:fc:65:e3:11:b4:4e:
5c:c5:ca:36:06:55:1a:63:ec:fa:ce:ec:7a:2c:e0:
69:ca:b9:b8:b4:0a:cb:43:55:39:3c:3f:3a:3b:45:
a9:02:66:e7:84:6a:1f:37:6b:27:01:b9:c7:1e:39:
9a:fc:a7:e7:26:49:b1:93:23:0f:bf:04:45:f8:d4:
45:70:e4:70:97:bb:6d:5d:8c:ba:50:83:04:a9:8b:
2a:c5:34:ef:b6:2d:24:a1:20:bc:d4:9a:33:7d:fe:
84:71:e2:7a:01:fe:65:5c:e0:75:47:19:e7:eb:cf:
b9:15:0b:5c:bc:00:7c:da:e6:15:e6:95:05:67:9e:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:44:0B:DF:AE:58:CB:D4:44:B6:22:67:F7:85:B9:95:6B:80:48
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNFEC9-uWMvURLYiZ_eFuZVrgEg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:3c:09:32:43:19:dc:55:ca:77:d5:8e:48:82:48:af:a3:37:
7b:af:d1:85:02:ad:64:ec:16:e1:f9:86:1e:2f:1b:af:e1:e1:
40:4d:0f:37:50:e7:c9:e2:38:ee:70:19:aa:cd:57:1f:ae:7b:
ac:22:06:07:1d:5c:63:28:5d:ad:3e:48:7d:17:34:9e:d8:82:
a8:fc:1b:40:ba:08:2f:c5:6c:34:5a:8e:d7:6e:f1:a3:c5:ab:
7c:98:62:20:82:57:28:12:88:2c:dd:49:1c:d0:3f:6f:72:e5:
2a:4b:54:97:4e:14:88:f6:b0:7e:26:e8:e1:1c:04:8b:a0:77:
44:a3:fc:1c:88:cf:a3:97:57:60:f7:2f:62:8d:fb:42:7b:ef:
1a:d4:2c:97:48:72:2d:38:cf:cd:ae:94:02:2a:79:95:6e:6a:
55:f0:69:bc:41:20:b5:d4:d1:bd:5c:8e:95:57:33:c6:04:18:
cd:9d:97:63:2f:af:ca:ff:c7:9a:1b:a6:d7:cc:14:99:32:39:
b9:4e:06:46:7a:23:05:6a:9e:af:f5:9e:07:5a:a1:1c:f6:3c:
18:1c:ab:07:b7:57:a4:d5:0c:7f:6e:07:f2:8f:c3:b2:c6:3b:
cc:7d:44:29:62:e0:7b:fc:66:86:59:05:fd:fc:c1:0f:99:f4:
34:fc:79:df
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjE2NDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ4RDE0NDBCREZBRTU4
Q0JENDQ0QjYyMjY3Rjc4NUI5OTU2QjgwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOKFyK8gC34H/bM7R7ivzJtM/NUW/Htn2k3Sn5kUuupa9ZjIGG
gHAvTOj/MuuNnUfUv4aOplWR6N0bjcf22MRWsMkk4zYrxTVJDMUXQOT0pZBxKDCF
A/uGBy6itCNiuhYx08oeKNoTQofQriM5HocNa/5/Q3s1y0KusYH45zxFL/xl4xG0
TlzFyjYGVRpj7PrO7Hos4GnKubi0CstDVTk8Pzo7RakCZueEah83aycBucceOZr8
p+cmSbGTIw+/BEX41EVw5HCXu21djLpQgwSpiyrFNO+2LSShILzUmjN9/oRx4noB
/mVc4HVHGefrz7kVC1y8AHza5hXmlQVnns25AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSNFEC9+uWMvURLYiZ/eFuZVrgEgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NORkVDOS11V012VVJMWWla
X2VGdVpWcmdFZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdgwDQYJKoZIhvcNAQELBQADggEBAGs8CTJDGdxVynfVjkiCSK+jN3uv0YUCrWTs
FuH5hh4vG6/h4UBNDzdQ58niOO5wGarNVx+ue6wiBgcdXGMoXa0+SH0XNJ7Ygqj8
G0C6CC/FbDRajtdu8aPFq3yYYiCCVygSiCzdSRzQP29y5SpLVJdOFIj2sH4m6OEc
BIugd0Sj/ByIz6OXV2D3L2KN+0J77xrULJdIci04z82ulAIqeZVualXwabxBILXU
0b1cjpVXM8YEGM2dl2Mvr8r/x5obptfMFJkyOblOBkZ6IwVqnq/1ngdaoRz2PBgc
qwe3V6TVDH9uB/KPw7LGO8x9RCli4Hv8ZoZZBf38wQ+Z9DT8ed8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org