Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UoJjUpB9K0qcnITVqIM7b9vFoc4.roa
File: UoJjUpB9K0qcnITVqIM7b9vFoc4.roa (raw, json)
Hash identifier: rziN1x+F0mCJen72pgZIFzRbL46BZYHY7893ZNwQjsY=
Subject key identifier: 52:82:63:52:90:7D:2B:4A:9C:9C:84:D5:A8:83:3B:6F:DB:C5:A1:CE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A33
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UoJjUpB9K0qcnITVqIM7b9vFoc4.roa
Signing time: Mon 24 Oct 2022 03:26:22 +0000
ROA not before: Mon 24 Oct 2022 03:26:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.58.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6707 (0x1a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 24 03:26:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=52826352907D2B4A9C9C84D5A8833B6FDBC5A1CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:08:be:c5:43:ef:24:03:48:cf:3f:97:dd:
87:81:1a:89:65:79:aa:15:e2:3e:fc:d5:50:7a:6a:
9c:69:75:18:92:12:90:42:35:10:32:d4:a5:2a:3e:
94:76:53:29:29:8a:1e:5a:b6:61:25:95:a0:55:28:
b0:e8:a0:20:32:00:0d:d4:b6:b2:d2:11:81:b0:a1:
e5:07:74:ab:0d:5e:9b:75:1f:04:fc:ec:0e:ad:1e:
4c:97:cf:4c:2d:25:87:65:5d:c8:f8:77:c5:5b:31:
af:90:5e:c6:59:78:bd:f9:f4:45:5e:07:ee:c5:04:
ad:78:9e:2e:e0:0a:33:c1:86:43:e6:0a:50:dc:4d:
61:75:d7:a8:cf:5c:4f:10:87:d1:d6:fb:17:fa:d1:
21:91:2c:09:b0:c2:9a:5d:72:49:73:56:b9:cc:64:
a8:40:8f:58:90:4f:5c:bc:16:ad:5d:e0:ee:4a:ae:
27:88:fe:8c:3c:ca:09:9e:f8:fe:10:b1:74:40:0b:
19:8e:e9:2c:6f:15:5c:2b:81:a8:8b:25:55:9c:0b:
26:ef:8b:2e:2c:33:67:c8:ce:29:0a:d1:1c:f0:99:
ff:e7:43:d1:52:ca:c7:9d:3a:20:b8:5a:a3:16:d0:
e6:22:bd:0e:23:9e:9d:47:0e:ad:20:ef:c8:e5:b2:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:63:52:90:7D:2B:4A:9C:9C:84:D5:A8:83:3B:6F:DB:C5:A1:CE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UoJjUpB9K0qcnITVqIM7b9vFoc4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
69:8d:69:cb:50:65:7d:dd:e8:5e:62:c3:e3:65:b7:ce:e9:29:
fb:51:f3:d9:75:46:73:5c:47:64:2a:40:b5:72:7b:d8:22:a3:
ea:c5:df:d5:8e:97:02:ee:17:32:6a:99:85:7e:db:4c:31:02:
dd:f2:16:41:0c:d5:00:3c:44:80:18:13:59:6a:a7:1b:ea:0e:
8b:4d:b3:0b:b9:a8:84:e1:46:2e:6b:cf:16:6d:63:3a:ef:93:
2d:1f:6d:58:ed:09:ed:cb:34:9c:fc:8a:88:14:24:b0:8d:bf:
1d:18:37:6c:89:90:b6:e9:19:94:b4:db:68:d0:58:c6:57:a5:
02:66:64:4e:1f:11:19:27:c9:ac:f1:a1:77:bb:c7:f9:df:12:
03:f9:5c:b6:93:f6:a4:23:24:ab:44:4e:b2:c5:59:aa:a3:91:
4f:42:68:e3:2f:4c:96:e9:58:a1:1e:23:26:44:43:e4:7d:ef:
69:e4:f7:d9:73:4a:ec:1d:5c:e3:9d:39:32:b6:71:9b:4a:be:
82:3e:fc:c1:94:ec:86:52:31:6e:64:5c:e9:06:aa:da:96:26:
f2:35:14:ee:61:02:ed:78:35:16:2e:b0:6f:19:3a:9c:41:37:
e7:72:d8:b9:e0:74:e7:25:ba:2f:46:eb:b0:10:56:c0:2d:ef:
36:36:bb:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjQw
MzI2MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDUyODI2MzUyOTA3RDJC
NEE5QzlDODRENUE4ODMzQjZGREJDNUExQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzwgi+xUPvJANIzz+X3YeBGolleaoV4j781VB6apxpdRiSEpBC
NRAy1KUqPpR2Uykpih5atmEllaBVKLDooCAyAA3UtrLSEYGwoeUHdKsNXpt1HwT8
7A6tHkyXz0wtJYdlXcj4d8VbMa+QXsZZeL359EVeB+7FBK14ni7gCjPBhkPmClDc
TWF116jPXE8Qh9HW+xf60SGRLAmwwppdcklzVrnMZKhAj1iQT1y8Fq1d4O5KrieI
/ow8ygme+P4QsXRACxmO6SxvFVwrgaiLJVWcCybviy4sM2fIzikK0Rzwmf/nQ9FS
ysedOiC4WqMW0OYivQ4jnp1HDq0g78jlsgWBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUoJjUpB9K0qcnITVqIM7b9vFoc4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1VvSmpVcEI5SzBxY25JVFZx
SU03Yjl2Rm9jNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9
OmAwDQYJKoZIhvcNAQELBQADggEBAGmNactQZX3d6F5iw+Nlt87pKftR89l1RnNc
R2QqQLVye9gio+rF39WOlwLuFzJqmYV+20wxAt3yFkEM1QA8RIAYE1lqpxvqDotN
swu5qIThRi5rzxZtYzrvky0fbVjtCe3LNJz8iogUJLCNvx0YN2yJkLbpGZS022jQ
WMZXpQJmZE4fERknyazxoXe7x/nfEgP5XLaT9qQjJKtETrLFWaqjkU9CaOMvTJbp
WKEeIyZEQ+R972nk99lzSuwdXOOdOTK2cZtKvoI+/MGU7IZSMW5kXOkGqtqWJvI1
FO5hAu14NRYusG8ZOpxBN+dy2LngdOclui9G67AQVsAt7zY2u+s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org