Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YgaP4cZgF_iJTKZMJXWeW2hh-y4.roa
File: YgaP4cZgF_iJTKZMJXWeW2hh-y4.roa (raw, json)
Hash identifier: HS4LXIKyIFbXga4/jkA+SajBSQCQQMm7afEnotJOu5Y=
Subject key identifier: 62:06:8F:E1:C6:60:17:F8:89:4C:A6:4C:25:75:9E:5B:68:61:FB:2E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14B7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YgaP4cZgF_iJTKZMJXWeW2hh-y4.roa
Signing time: Wed 24 Aug 2022 04:01:59 +0000
ROA not before: Wed 24 Aug 2022 04:01:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 2407:4b00:fd01::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5303 (0x14b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 24 04:01:59 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=62068FE1C66017F8894CA64C25759E5B6861FB2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:d3:20:c5:51:79:1e:9f:51:c3:4e:c3:62:
9b:80:00:2e:a6:27:c2:1e:42:20:d6:17:4e:85:2d:
89:31:74:c2:08:b1:f4:6d:68:28:89:a7:6e:72:a4:
12:63:61:b4:f0:24:c9:a1:91:f7:d4:12:4e:93:f7:
86:6d:4a:94:0e:62:89:fa:ca:15:5b:f3:71:7f:0a:
dc:29:6f:ad:0f:3a:dd:eb:42:a9:44:85:d3:45:7f:
46:e5:09:94:af:52:ad:c0:1f:bd:47:56:28:33:46:
5a:25:52:86:6b:48:d7:34:ad:9e:7e:c4:c4:0f:f7:
03:6a:05:ce:e8:10:52:41:bb:9a:b2:53:0e:0f:a9:
ec:09:fd:de:b4:85:9d:a8:d9:d6:97:e3:f5:d1:60:
9e:70:0c:89:8c:9c:23:ec:b2:15:50:78:12:ee:e1:
e1:52:7c:a0:1e:59:74:e8:75:fa:66:cd:94:cd:60:
21:c7:08:ff:41:99:f3:52:51:f9:6f:ee:88:57:97:
e1:e9:63:ec:65:21:db:a3:0c:dd:cf:92:c2:43:32:
77:43:93:c1:c0:eb:de:19:c8:40:b4:fb:ef:d8:2a:
1c:22:b0:67:17:e6:1b:38:84:81:8d:16:80:6b:5e:
fb:86:46:6f:86:8f:3d:35:fc:e4:75:c8:8f:2a:92:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:8F:E1:C6:60:17:F8:89:4C:A6:4C:25:75:9E:5B:68:61:FB:2E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YgaP4cZgF_iJTKZMJXWeW2hh-y4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00:fd01::/48
Signature Algorithm: sha256WithRSAEncryption
04:fb:c6:47:61:e0:f8:76:cc:eb:a7:86:f2:58:df:c2:a2:53:
8c:f4:01:35:2e:e6:f8:98:20:7e:7e:6b:dd:fd:63:b1:bd:a0:
f3:5b:83:e9:12:9d:c8:d7:90:e7:01:00:0f:b4:9c:1b:ba:94:
7f:3b:9d:49:75:fc:88:53:2d:83:39:78:68:6d:3d:35:99:15:
d1:39:77:29:c3:d2:a8:66:0f:0a:0e:13:4b:5b:82:59:6c:37:
54:72:23:22:ab:89:e6:9e:38:4c:d2:37:7c:05:e6:cf:02:34:
a0:a5:83:69:0e:e7:a8:bb:8d:b3:48:8b:a9:30:a1:36:f4:88:
bb:56:66:b4:0f:13:e8:d8:7b:2b:0b:a8:7e:9e:02:0e:58:f8:
e2:69:dd:ce:56:36:42:74:30:ef:dd:4d:45:96:63:6c:f0:74:
73:38:f7:69:24:59:fe:41:af:fc:50:d0:f3:08:2e:ae:88:bd:
1b:a1:38:5c:23:99:4d:54:9a:8c:82:aa:cd:17:12:cc:c9:8c:
4b:dc:fe:f4:fe:ce:a3:32:eb:24:16:7e:02:8d:ad:31:7c:f8:
b8:e4:24:df:aa:57:34:1f:4a:14:05:40:ea:1d:2e:de:55:36:
25:96:13:db:37:f6:3c:5e:8d:a6:eb:bb:8e:56:64:c4:d2:24:
1f:9e:72:35
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA4MjQw
NDAxNTlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDYyMDY4RkUxQzY2MDE3
Rjg4OTRDQTY0QzI1NzU5RTVCNjg2MUZCMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiGdMgxVF5Hp9Rw07DYpuAAC6mJ8IeQiDWF06FLYkxdMIIsfRt
aCiJp25ypBJjYbTwJMmhkffUEk6T94ZtSpQOYon6yhVb83F/Ctwpb60POt3rQqlE
hdNFf0blCZSvUq3AH71HVigzRlolUoZrSNc0rZ5+xMQP9wNqBc7oEFJBu5qyUw4P
qewJ/d60hZ2o2daX4/XRYJ5wDImMnCPsshVQeBLu4eFSfKAeWXTodfpmzZTNYCHH
CP9BmfNSUflv7ohXl+HpY+xlIdujDN3PksJDMndDk8HA694ZyEC0++/YKhwisGcX
5hs4hIGNFoBrXvuGRm+Gjz01/OR1yI8qkr5rAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUYgaP4cZgF/iJTKZMJXWeW2hh+y4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1lnYVA0Y1pnRl9pSlRLWk1K
WFdlVzJoaC15NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B0sA/QEwDQYJKoZIhvcNAQELBQADggEBAAT7xkdh4Ph2zOunhvJY38KiU4z0ATUu
5viYIH5+a939Y7G9oPNbg+kSncjXkOcBAA+0nBu6lH87nUl1/IhTLYM5eGhtPTWZ
FdE5dynD0qhmDwoOE0tbgllsN1RyIyKrieaeOEzSN3wF5s8CNKClg2kO56i7jbNI
i6kwoTb0iLtWZrQPE+jYeysLqH6eAg5Y+OJp3c5WNkJ0MO/dTUWWY2zwdHM492kk
Wf5Br/xQ0PMILq6IvRuhOFwjmU1UmoyCqs0XEszJjEvc/vT+zqMy6yQWfgKNrTF8
+LjkJN+qVzQfShQFQOodLt5VNiWWE9s39jxejabru45WZMTSJB+ecjU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org