Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sue49VjTHhJv5xATez0ugve4b-w.roa
File: Sue49VjTHhJv5xATez0ugve4b-w.roa (raw, json)
Hash identifier: 8HBr6l1TkP5UABYnVbqhJ+FEo1s7pZg9m/NpRckvAbs=
Subject key identifier: 4A:E7:B8:F5:58:D3:1E:12:6F:E7:10:13:7B:3D:2E:82:F7:B8:6F:EC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F45
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sue49VjTHhJv5xATez0ugve4b-w.roa
Signing time: Sun 07 Feb 2021 12:33:29 +0000
ROA not before: Sun 07 Feb 2021 12:33:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3909 (0xf45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4AE7B8F558D31E126FE710137B3D2E82F7B86FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:1a:bc:0f:c8:02:1d:44:d1:be:ba:a3:8b:
43:ef:e1:2f:41:8c:d9:63:93:e0:98:b9:3c:8f:fd:
67:04:32:f7:9b:f9:01:ea:10:10:0a:28:ee:fa:3f:
d5:e8:1e:c7:d1:62:02:25:6f:ef:ed:ed:e5:bc:b2:
9f:59:57:c4:61:b1:15:c7:7a:e9:a8:7f:3a:2e:fd:
8a:1a:eb:79:9c:3f:6c:a1:ef:ed:87:bd:c7:05:6b:
a6:02:5c:be:a6:e8:58:60:dc:6e:4e:37:d3:2d:8a:
fa:76:5a:33:b4:9e:7b:ba:ce:e4:4c:21:72:78:df:
3d:39:1f:25:2f:3b:02:03:73:4e:fb:38:af:7d:d6:
b4:cb:49:09:02:fb:62:55:d2:47:5f:56:3e:46:8e:
1b:4e:1d:04:60:10:87:81:65:40:2e:02:79:1a:dc:
d0:da:09:82:35:be:ee:c0:b7:43:24:a7:01:80:88:
89:fb:7f:c8:76:c9:ef:c1:3f:cf:45:58:a1:60:ae:
4e:ca:8d:13:bf:b3:38:37:34:9c:c6:00:28:ff:c1:
fd:b6:5a:6b:d4:65:b7:10:ca:03:a5:89:6c:02:23:
53:15:59:f3:3c:bc:ce:2a:5d:04:a7:b6:40:7e:72:
da:d9:ce:5f:ea:94:6f:6e:7d:2e:20:c6:62:39:86:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E7:B8:F5:58:D3:1E:12:6F:E7:10:13:7B:3D:2E:82:F7:B8:6F:EC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sue49VjTHhJv5xATez0ugve4b-w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.252.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6f:5d:3a:8f:81:ca:a4:78:d8:41:43:ec:37:c1:0d:23:68:
62:52:60:30:5b:f9:35:81:0f:b3:5d:8a:29:98:bd:e1:27:14:
a1:d7:e4:33:d5:9e:45:20:45:27:3e:c3:22:9c:ac:d6:c9:bf:
52:d5:7c:8e:65:06:e6:a5:b3:2e:ca:01:c0:ae:a3:a4:1b:ae:
b8:12:f1:94:e8:43:ec:b4:b4:22:46:03:3a:08:14:fc:c3:01:
8a:c5:5f:0f:78:09:b9:4f:ac:77:60:65:fa:1d:76:5c:8d:db:
cd:88:6f:02:ba:5c:58:bc:41:60:a5:8e:9d:78:8a:90:2f:c5:
9a:b5:cd:3a:32:ff:45:a9:e0:33:6a:32:73:7e:16:e3:d0:42:
d7:38:f1:a6:c3:b8:52:23:a0:a8:55:bb:28:ed:ec:91:77:a1:
4d:a5:04:74:f9:0a:f7:94:b4:22:27:f7:1d:0b:9d:f8:43:69:
e5:00:65:57:0d:74:04:a0:69:a8:2d:a4:87:14:51:73:8b:5f:
8c:b1:0c:89:17:ea:37:ec:1b:b2:0a:fb:c0:7a:06:5a:b4:7c:
05:4e:d3:f1:f1:f8:4a:00:93:b9:2f:d1:4a:71:59:75:19:ed:
81:4d:c7:fb:cd:54:10:e5:04:4e:ef:e2:95:36:89:b7:fe:d7:
b2:d6:31:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMzMjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRBRTdCOEY1NThEMzFF
MTI2RkU3MTAxMzdCM0QyRTgyRjdCODZGRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMpBq8D8gCHUTRvrqji0Pv4S9BjNljk+CYuTyP/WcEMveb+QHq
EBAKKO76P9XoHsfRYgIlb+/t7eW8sp9ZV8RhsRXHeumofzou/Yoa63mcP2yh7+2H
vccFa6YCXL6m6Fhg3G5ON9Mtivp2WjO0nnu6zuRMIXJ43z05HyUvOwIDc077OK99
1rTLSQkC+2JV0kdfVj5GjhtOHQRgEIeBZUAuAnka3NDaCYI1vu7At0MkpwGAiIn7
f8h2ye/BP89FWKFgrk7KjRO/szg3NJzGACj/wf22WmvUZbcQygOliWwCI1MVWfM8
vM4qXQSntkB+ctrZzl/qlG9ufS4gxmI5hsXvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSue49VjTHhJv5xATez0ugve4b+wwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1N1ZTQ5VmpUSGhKdjV4QVRl
ejB1Z3ZlNGItdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3
TfwwDQYJKoZIhvcNAQELBQADggEBAGZvXTqPgcqkeNhBQ+w3wQ0jaGJSYDBb+TWB
D7NdiimYveEnFKHX5DPVnkUgRSc+wyKcrNbJv1LVfI5lBualsy7KAcCuo6QbrrgS
8ZToQ+y0tCJGAzoIFPzDAYrFXw94CblPrHdgZfoddlyN282IbwK6XFi8QWCljp14
ipAvxZq1zToy/0Wp4DNqMnN+FuPQQtc48abDuFIjoKhVuyjt7JF3oU2lBHT5CveU
tCIn9x0LnfhDaeUAZVcNdASgaagtpIcUUXOLX4yxDIkX6jfsG7IK+8B6Blq0fAVO
0/Hx+EoAk7kv0UpxWXUZ7YFNx/vNVBDlBE7v4pU2ibf+17LWMeo=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-fra.rpki-client.org