Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T0Tv1R3-t8dWmtmUaMHFcbseubQ.roa
File: T0Tv1R3-t8dWmtmUaMHFcbseubQ.roa (raw, json)
Hash identifier: 5181KIwAq6GyFEL8X89Ff5HCzvUaGkUKrKxY1DPIv0Q=
Subject key identifier: 4F:44:EF:D5:1D:FE:B7:C7:56:9A:D9:94:68:C1:C5:71:BB:1E:B9:B4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12A1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T0Tv1R3-t8dWmtmUaMHFcbseubQ.roa
Signing time: Wed 29 Sep 2021 02:54:48 +0000
ROA not before: Wed 29 Sep 2021 02:54:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 49.158.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4769 (0x12a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4F44EFD51DFEB7C7569AD99468C1C571BB1EB9B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:75:4f:8a:8a:da:34:f7:d2:e4:93:80:68:
66:55:d8:14:ce:a4:b9:36:d8:45:c2:1c:70:07:f8:
b3:a3:f1:cb:85:bc:9d:5e:be:17:f9:d9:f3:ed:75:
54:4f:24:18:60:a4:35:17:62:ad:9e:6e:a2:2f:2f:
69:40:c9:60:09:c9:13:f1:8b:44:16:67:32:6a:9e:
1f:62:b3:9e:81:fd:e6:c7:e7:b9:6e:38:af:d4:de:
4c:1b:ba:33:21:95:cf:02:a6:fb:13:50:ed:e4:5e:
db:24:cb:7b:d3:97:94:66:7a:a8:8b:f7:0d:25:ab:
4f:6b:82:5f:99:c8:8c:c7:88:a7:b0:16:92:88:72:
7f:35:46:2f:ed:80:7b:a9:fa:fc:3d:6a:4b:17:52:
be:27:c9:29:3e:67:e4:7e:88:bb:97:26:da:be:aa:
ea:58:7f:eb:69:b6:12:a3:96:59:c6:17:23:83:a6:
7b:da:c3:ce:35:47:70:c5:57:b2:f8:f4:c2:94:2e:
b7:ec:c6:6d:d5:fb:1c:82:ec:0e:54:29:e0:51:7e:
df:a4:0c:56:a9:16:ef:e9:4b:d0:f5:73:a4:bd:17:
a0:58:43:9c:ed:75:be:56:49:be:f0:8c:a3:bc:a6:
25:3d:cc:43:cf:40:88:2d:d2:27:ba:dd:46:3f:b3:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:EF:D5:1D:FE:B7:C7:56:9A:D9:94:68:C1:C5:71:BB:1E:B9:B4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T0Tv1R3-t8dWmtmUaMHFcbseubQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.200.0/22
Signature Algorithm: sha256WithRSAEncryption
35:2a:10:24:66:93:87:1f:4d:0c:b3:b0:93:0e:69:e1:d8:13:
a3:5b:10:d9:47:49:93:76:1a:f3:9f:73:63:fd:ee:a2:43:08:
a8:9e:60:40:f7:07:a9:03:9b:c1:49:35:7f:f5:5f:bb:0e:32:
d7:5e:50:c2:2a:82:09:fb:e7:4c:79:16:57:85:c0:96:b0:41:
08:ac:99:e6:00:31:c5:a3:7e:b2:cf:7f:df:d7:55:78:a4:3e:
a7:85:69:29:45:20:34:3f:7b:25:5b:fa:42:80:35:82:2d:d4:
50:bb:62:71:cd:74:a7:ac:25:a6:a2:da:a2:a5:e4:54:1a:29:
b8:f6:49:80:99:85:55:13:4d:1d:4c:2c:6a:fd:1d:90:4e:55:
d8:ed:4b:bf:1b:1a:36:5f:9d:29:34:96:5c:42:46:1d:fd:13:
be:71:f4:9b:98:8d:92:33:9c:d6:dc:3a:ae:c3:76:18:c3:79:
43:0f:6f:fb:50:42:93:d1:72:04:a1:4c:e2:90:ea:e3:af:4e:
c1:4e:09:eb:cb:2c:b7:42:37:de:c2:9c:53:91:43:ae:3b:37:
66:ce:11:14:5e:6d:77:21:60:f5:85:3e:c0:28:38:f8:dc:97:
56:0b:e0:bf:cc:c5:7c:86:52:56:64:86:6a:30:5c:22:0c:9b:
36:02:77:50
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDRGNDRFRkQ1MURGRUI3
Qzc1NjlBRDk5NDY4QzFDNTcxQkIxRUI5QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyGnVPioraNPfS5JOAaGZV2BTOpLk22EXCHHAH+LOj8cuFvJ1e
vhf52fPtdVRPJBhgpDUXYq2ebqIvL2lAyWAJyRPxi0QWZzJqnh9is56B/ebH57lu
OK/U3kwbujMhlc8CpvsTUO3kXtsky3vTl5RmeqiL9w0lq09rgl+ZyIzHiKewFpKI
cn81Ri/tgHup+vw9aksXUr4nySk+Z+R+iLuXJtq+qupYf+tpthKjllnGFyODpnva
w841R3DFV7L49MKULrfsxm3V+xyC7A5UKeBRft+kDFapFu/pS9D1c6S9F6BYQ5zt
db5WSb7wjKO8piU9zEPPQIgt0ie63UY/s5blAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUT0Tv1R3+t8dWmtmUaMHFcbseubQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1QwVHYxUjMtdDhkV210bVVh
TUhGY2JzZXViUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
nsgwDQYJKoZIhvcNAQELBQADggEBADUqECRmk4cfTQyzsJMOaeHYE6NbENlHSZN2
GvOfc2P97qJDCKieYED3B6kDm8FJNX/1X7sOMtdeUMIqggn750x5FleFwJawQQis
meYAMcWjfrLPf9/XVXikPqeFaSlFIDQ/eyVb+kKANYIt1FC7YnHNdKesJaai2qKl
5FQaKbj2SYCZhVUTTR1MLGr9HZBOVdjtS78bGjZfnSk0llxCRh39E75x9JuYjZIz
nNbcOq7DdhjDeUMPb/tQQpPRcgShTOKQ6uOvTsFOCevLLLdCN97CnFORQ647N2bO
ERRebXchYPWFPsAoOPjcl1YL4L/MxXyGUlZkhmowXCIMmzYCd1A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org