Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sfvlf45K8SssGvyc3GxglL5TwOo.roa
File: Sfvlf45K8SssGvyc3GxglL5TwOo.roa (raw, json)
Hash identifier: obh/1xZSHM2Cnc9hIdxgmGDGEHUFSOpcbhFOYbkMH5E=
Subject key identifier: 49:FB:E5:7F:8E:4A:F1:2B:2C:1A:FC:9C:DC:6C:60:94:BE:53:C0:EA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B9A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sfvlf45K8SssGvyc3GxglL5TwOo.roa
Signing time: Tue 29 Sep 2020 10:08:37 +0000
ROA not before: Tue 29 Sep 2020 10:08:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2970 (0xb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=49FBE57F8E4AF12B2C1AFC9CDC6C6094BE53C0EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:33:ed:cb:ab:65:c8:23:12:0d:5b:4d:af:
be:59:5c:3e:ef:5d:3e:d4:6b:af:42:3b:45:af:45:
0b:cf:de:6c:12:a4:f8:8b:c7:f0:ed:29:58:50:54:
13:23:da:f9:91:3f:83:52:4c:e8:6d:04:a3:ce:2b:
9b:3d:b0:b3:da:c7:c6:3d:1b:04:7f:f5:fc:1e:24:
8e:66:ea:b3:fc:8e:8a:48:b8:97:b3:93:86:8f:8e:
b3:60:3c:26:da:39:e3:ab:ed:6d:db:f8:d2:f6:4b:
9c:c7:3e:96:3a:03:be:3f:51:51:a5:be:a2:bc:81:
db:2a:d2:d4:3e:51:4a:6d:e7:22:0c:e0:88:61:bc:
fe:c6:92:db:cc:31:12:d8:67:3b:18:39:8f:23:9e:
39:89:f5:8e:1b:66:7e:9c:e1:ce:f0:d0:a1:2d:0e:
51:4a:2f:05:95:15:78:0b:f0:34:83:f4:b9:62:60:
ef:26:ed:94:14:6a:68:81:8f:81:61:88:b2:39:ca:
11:10:60:6d:f8:37:18:84:15:f3:05:83:93:f7:d6:
0a:64:c4:77:f0:7c:0b:cd:7c:ac:d5:3f:3a:3a:be:
08:a5:96:48:fc:85:ea:6f:1b:c6:6b:4e:0c:3b:54:
02:63:ea:72:0e:12:5e:ae:05:68:16:1e:f3:8c:30:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FB:E5:7F:8E:4A:F1:2B:2C:1A:FC:9C:DC:6C:60:94:BE:53:C0:EA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sfvlf45K8SssGvyc3GxglL5TwOo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.64.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:1a:b1:8a:40:c2:91:90:93:46:8e:04:d3:79:7e:45:5f:4f:
45:52:50:dd:85:83:a4:5b:5a:93:68:2e:27:4e:68:72:ec:d5:
dc:78:10:d8:b7:32:04:6b:1e:3c:97:86:ec:e4:65:2a:fd:42:
cf:30:8d:4c:3f:3b:32:aa:e6:2e:4e:03:20:93:3f:c7:49:14:
64:de:d6:ac:08:65:9d:59:21:95:77:63:f6:40:35:0c:15:48:
7d:b8:35:50:f7:e6:62:bf:cd:aa:67:c0:05:5a:f6:8f:d9:53:
fc:df:f9:19:9d:36:dd:56:0a:b6:fe:64:c3:ae:cf:ce:1b:df:
1e:d7:59:c7:47:b8:22:aa:0e:36:8d:83:44:77:4d:b5:09:4c:
4e:05:de:88:09:f8:a6:96:b1:b0:a6:0c:c9:7a:b3:9b:eb:b1:
02:58:1f:57:69:ff:22:38:a5:57:b9:cc:00:eb:ac:f7:6c:60:
53:af:21:af:e8:bd:31:f5:58:6d:1b:df:e6:33:95:29:c3:2e:
b7:8c:bd:14:9a:12:2e:32:bb:bc:b9:3d:0c:19:5e:bb:93:5e:
5e:1d:e2:f9:2a:7c:5b:6c:38:7a:6f:fc:bf:19:67:05:5e:3b:
ea:f8:f8:48:5e:ea:15:86:cc:6b:d4:cc:89:44:66:54:12:b6:
88:2d:d5:8e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQ5RkJFNTdGOEU0QUYx
MkIyQzFBRkM5Q0RDNkM2MDk0QkU1M0MwRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9wTPty6tlyCMSDVtNr75ZXD7vXT7Ua69CO0WvRQvP3mwSpPiL
x/DtKVhQVBMj2vmRP4NSTOhtBKPOK5s9sLPax8Y9GwR/9fweJI5m6rP8jopIuJez
k4aPjrNgPCbaOeOr7W3b+NL2S5zHPpY6A74/UVGlvqK8gdsq0tQ+UUpt5yIM4Ihh
vP7GktvMMRLYZzsYOY8jnjmJ9Y4bZn6c4c7w0KEtDlFKLwWVFXgL8DSD9LliYO8m
7ZQUamiBj4FhiLI5yhEQYG34NxiEFfMFg5P31gpkxHfwfAvNfKzVPzo6vgillkj8
hepvG8ZrTgw7VAJj6nIOEl6uBWgWHvOMMO2VAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSfvlf45K8SssGvyc3GxglL5TwOowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NmdmxmNDVLOFNzc0d2eWMz
R3hnbEw1VHdPby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPT
TEAwDQYJKoZIhvcNAQELBQADggEBADsasYpAwpGQk0aOBNN5fkVfT0VSUN2Fg6Rb
WpNoLidOaHLs1dx4ENi3MgRrHjyXhuzkZSr9Qs8wjUw/OzKq5i5OAyCTP8dJFGTe
1qwIZZ1ZIZV3Y/ZANQwVSH24NVD35mK/zapnwAVa9o/ZU/zf+RmdNt1WCrb+ZMOu
z84b3x7XWcdHuCKqDjaNg0R3TbUJTE4F3ogJ+KaWsbCmDMl6s5vrsQJYH1dp/yI4
pVe5zADrrPdsYFOvIa/ovTH1WG0b3+YzlSnDLreMvRSaEi4yu7y5PQwZXruTXl4d
4vkqfFtsOHpv/L8ZZwVeO+r4+Ehe6hWGzGvUzIlEZlQStogt1Y4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org