Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y2e5R1ZN2kBHOt9GnAOSTry3yJs.roa
File: Y2e5R1ZN2kBHOt9GnAOSTry3yJs.roa (raw, json)
Hash identifier: qCKVh9T3Fx+YM5Me9eOx4Fp/N3fj5amwdqWuvLzG3EI=
Subject key identifier: 63:67:B9:47:56:4D:DA:40:47:3A:DF:46:9C:03:92:4E:BC:B7:C8:9B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y2e5R1ZN2kBHOt9GnAOSTry3yJs.roa
Signing time: Thu 15 Sep 2022 02:36:16 +0000
ROA not before: Thu 15 Sep 2022 02:36:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 124.6.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6367B947564DDA40473ADF469C03924EBCB7C89B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:b0:b2:0b:64:e2:e3:1a:cf:bb:76:86:0b:
5a:64:31:16:a5:10:28:39:e1:e4:ba:24:47:9a:2e:
31:ba:3b:71:37:98:5c:3e:90:4d:af:da:8a:62:08:
73:ff:8a:40:d6:17:d2:54:85:61:82:65:ba:99:58:
38:3f:0f:80:99:89:c2:14:19:51:79:b6:67:ea:2c:
58:30:57:5c:ed:0e:9c:f8:84:40:64:0f:48:29:57:
ba:f0:b8:ff:4a:bb:91:0a:ab:f0:ed:46:ad:b0:b9:
a6:40:cc:6e:8c:32:62:9d:ae:15:25:c5:87:51:24:
15:a1:d4:af:1a:6b:e7:c9:06:2f:b1:06:ea:55:84:
7b:c7:65:6a:1b:80:0e:7d:37:78:42:08:a8:13:20:
f6:bc:a1:f6:a5:c8:28:a5:08:b4:78:b0:42:43:11:
8e:89:66:dc:da:4e:99:2a:a2:52:9e:ac:8a:2e:c3:
d6:76:21:8b:50:30:eb:1e:53:4c:16:05:b2:a1:06:
85:99:3f:cb:b5:1b:da:5b:e5:31:04:bc:43:0a:ee:
fc:99:fb:25:2e:77:af:95:cf:7c:45:d6:a8:2f:ba:
1e:17:dd:70:c3:01:92:7a:7e:c4:ea:c5:61:c3:72:
44:a2:f6:e3:23:ab:9d:d4:58:f0:8f:c5:f8:75:e4:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:67:B9:47:56:4D:DA:40:47:3A:DF:46:9C:03:92:4E:BC:B7:C8:9B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y2e5R1ZN2kBHOt9GnAOSTry3yJs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.0.0/19
Signature Algorithm: sha256WithRSAEncryption
33:68:e3:f6:68:e2:32:d7:2e:7a:db:0f:0c:8c:e2:9b:fd:59:
c9:eb:d8:d7:93:db:55:64:0b:d6:f8:e2:37:80:97:7e:2d:67:
de:7a:1f:67:be:69:3c:0a:c4:97:69:0d:a8:35:88:f2:d0:18:
21:ae:b9:b1:24:ba:0d:07:49:3f:d2:34:07:d5:e1:88:92:d7:
70:60:f7:a4:f9:d1:a5:c8:60:d3:f8:bd:86:54:95:c4:7a:cd:
8f:bc:be:92:4f:61:48:8e:3d:c6:0b:f1:70:1c:7b:69:b6:60:
65:f5:ad:23:93:1b:03:81:84:42:91:b3:91:26:df:3f:3e:21:
d4:4a:2c:5b:d1:df:5c:9c:f1:74:1e:26:fe:59:a2:a8:e3:c7:
8e:fd:3f:24:95:8b:f8:31:e9:b3:e5:b9:69:de:2a:72:1d:c9:
ba:7b:b3:fc:3a:4e:7a:47:59:15:c5:be:e8:8b:a6:84:c1:55:
54:7f:4d:a8:86:ba:7f:6f:77:fd:c5:63:25:87:99:fb:91:d1:
0d:0d:10:ab:e8:fe:65:0b:02:56:56:1f:98:51:01:01:4d:6c:
6c:31:c0:f6:8d:8e:a0:9c:d4:80:e8:86:86:08:4b:98:92:d8:
e3:11:39:4d:a1:19:33:c3:23:db:ea:6d:21:c8:74:38:ce:5d:
7d:e6:9c:ff
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYzNjdCOTQ3NTY0RERB
NDA0NzNBREY0NjlDMDM5MjRFQkNCN0M4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXtrCyC2Ti4xrPu3aGC1pkMRalECg54eS6JEeaLjG6O3E3mFw+
kE2v2opiCHP/ikDWF9JUhWGCZbqZWDg/D4CZicIUGVF5tmfqLFgwV1ztDpz4hEBk
D0gpV7rwuP9Ku5EKq/DtRq2wuaZAzG6MMmKdrhUlxYdRJBWh1K8aa+fJBi+xBupV
hHvHZWobgA59N3hCCKgTIPa8ofalyCilCLR4sEJDEY6JZtzaTpkqolKerIouw9Z2
IYtQMOseU0wWBbKhBoWZP8u1G9pb5TEEvEMK7vyZ+yUud6+Vz3xF1qgvuh4X3XDD
AZJ6fsTqxWHDckSi9uMjq53UWPCPxfh15HTdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUY2e5R1ZN2kBHOt9GnAOSTry3yJswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1kyZTVSMVpOMmtCSE90OUdu
QU9TVHJ5M3lKcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV8
BgAwDQYJKoZIhvcNAQELBQADggEBADNo4/Zo4jLXLnrbDwyM4pv9Wcnr2NeT21Vk
C9b44jeAl34tZ956H2e+aTwKxJdpDag1iPLQGCGuubEkug0HST/SNAfV4YiS13Bg
96T50aXIYNP4vYZUlcR6zY+8vpJPYUiOPcYL8XAce2m2YGX1rSOTGwOBhEKRs5Em
3z8+IdRKLFvR31yc8XQeJv5Zoqjjx479PySVi/gx6bPluWneKnIdybp7s/w6TnpH
WRXFvuiLpoTBVVR/TaiGun9vd/3FYyWHmfuR0Q0NEKvo/mULAlZWH5hRAQFNbGwx
wPaNjqCc1IDohoYIS5iS2OMROU2hGTPDI9vqbSHIdDjOXX3mnP8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org