Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UDao1d5WakuuetHZUyQNYdrcb64.roa
File: UDao1d5WakuuetHZUyQNYdrcb64.roa (raw, json)
Hash identifier: x4TYBNgt/xg4ZU2TEmFa5vM9VKvOg4h1I6IYh+Sk5NY=
Subject key identifier: 50:36:A8:D5:DE:56:6A:4B:AE:7A:D1:D9:53:24:0D:61:DA:DC:6F:AE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18F8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UDao1d5WakuuetHZUyQNYdrcb64.roa
Signing time: Sat 22 Oct 2022 06:05:56 +0000
ROA not before: Sat 22 Oct 2022 06:05:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 114.198.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6392 (0x18f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5036A8D5DE566A4BAE7AD1D953240D61DADC6FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:7c:fb:25:57:46:de:c6:df:17:60:fd:af:
9f:18:cc:d7:52:39:f5:c0:aa:81:d5:28:50:e8:df:
64:cb:cd:4c:e8:67:48:b3:c0:77:16:32:c4:eb:02:
f9:13:20:ce:6a:c3:4c:5a:b5:0a:cc:05:20:d6:73:
55:76:33:98:9b:ed:f9:bd:dc:57:3e:72:67:15:b5:
a7:59:92:f4:af:27:cd:d5:18:8e:b5:97:6c:1e:8b:
19:ff:f4:21:1e:ee:66:4a:d3:2b:d0:0d:65:6f:55:
d4:42:bb:65:f2:12:0b:ca:49:bf:3e:79:12:21:3f:
b9:6d:b3:f5:e6:f8:c2:ed:f5:a6:10:e2:12:1b:dd:
16:c8:09:60:8a:40:b6:cc:34:fa:59:52:a3:9b:5c:
04:f5:33:14:81:06:1a:9b:96:f3:79:e7:e7:bd:ae:
b7:b0:2b:e2:6c:8a:f9:79:1b:c8:c2:a7:a9:1a:6e:
5e:45:48:af:53:90:fd:df:b0:0f:4c:aa:d6:bc:b3:
06:06:0a:2b:24:9e:6a:c3:84:75:18:17:7e:39:26:
74:bd:8f:69:2e:ad:68:fb:24:0d:52:5b:1c:2a:c4:
da:3f:b5:ae:c3:af:d6:de:38:69:f2:89:b8:f3:1d:
03:e7:d1:15:8f:8f:07:8c:7f:9b:78:85:4a:d6:c1:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:A8:D5:DE:56:6A:4B:AE:7A:D1:D9:53:24:0D:61:DA:DC:6F:AE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UDao1d5WakuuetHZUyQNYdrcb64.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
56:b1:63:c5:b9:cd:a1:a6:12:ee:fb:5e:09:f6:c3:66:da:46:
4f:a6:b5:e7:f5:0a:d4:af:90:67:da:86:6e:aa:5e:ad:b5:e4:
86:76:f4:5f:b4:6b:64:38:4a:ab:5c:9f:66:c6:60:59:0c:ef:
fe:e6:27:e5:10:71:88:ec:10:8e:53:a2:3f:39:c8:90:24:6f:
73:8b:11:f1:14:fb:2d:bc:81:cb:09:3a:ae:1c:09:f1:0c:30:
e1:44:22:00:43:26:cf:61:55:86:b6:6c:43:19:81:fb:a7:3e:
d0:69:3a:0a:69:0a:5c:e2:65:f4:5e:49:42:04:e6:21:30:61:
79:da:12:0b:ed:33:69:01:23:97:08:be:55:09:9c:10:cf:88:
03:1a:51:45:ca:e4:4d:fa:04:bd:b6:cf:6a:7c:24:60:af:59:
d7:f8:cb:8c:6c:a0:26:fe:77:5d:63:a2:42:2f:8f:87:29:e8:
48:cd:0d:96:c7:bc:08:54:64:cb:67:dc:b3:b9:26:f0:c7:fa:
00:54:2b:0d:aa:5a:1c:de:df:7a:75:03:32:34:77:fe:8e:12:
54:73:cb:12:c7:51:c4:5d:76:2e:fe:4d:35:93:13:69:29:c7:
b0:de:6c:aa:b1:d1:01:fb:08:31:04:74:84:38:62:2a:5b:59:
3c:b2:f2:45
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDUwMzZBOEQ1REU1NjZB
NEJBRTdBRDFEOTUzMjQwRDYxREFEQzZGQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5nnz7JVdG3sbfF2D9r58YzNdSOfXAqoHVKFDo32TLzUzoZ0iz
wHcWMsTrAvkTIM5qw0xatQrMBSDWc1V2M5ib7fm93Fc+cmcVtadZkvSvJ83VGI61
l2weixn/9CEe7mZK0yvQDWVvVdRCu2XyEgvKSb8+eRIhP7lts/Xm+MLt9aYQ4hIb
3RbICWCKQLbMNPpZUqObXAT1MxSBBhqblvN55+e9rrewK+Jsivl5G8jCp6kabl5F
SK9TkP3fsA9Mqta8swYGCisknmrDhHUYF345JnS9j2kurWj7JA1SWxwqxNo/ta7D
r9beOGnyibjzHQPn0RWPjweMf5t4hUrWwRORAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUDao1d5WakuuetHZUyQNYdrcb64wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1VEYW8xZDVXYWt1dWV0SFpV
eVFOWWRyY2I2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy
xqAwDQYJKoZIhvcNAQELBQADggEBAFaxY8W5zaGmEu77Xgn2w2baRk+mtef1CtSv
kGfahm6qXq215IZ29F+0a2Q4Sqtcn2bGYFkM7/7mJ+UQcYjsEI5Toj85yJAkb3OL
EfEU+y28gcsJOq4cCfEMMOFEIgBDJs9hVYa2bEMZgfunPtBpOgppClziZfReSUIE
5iEwYXnaEgvtM2kBI5cIvlUJnBDPiAMaUUXK5E36BL22z2p8JGCvWdf4y4xsoCb+
d11jokIvj4cp6EjNDZbHvAhUZMtn3LO5JvDH+gBUKw2qWhze33p1AzI0d/6OElRz
yxLHUcRddi7+TTWTE2kpx7DebKqx0QH7CDEEdIQ4YipbWTyy8kU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org