Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z39_n29D3oX4H-dC3coFQqndqCw.roa
File: Z39_n29D3oX4H-dC3coFQqndqCw.roa (raw, json)
Hash identifier: 1nPs42kHfAQfgEWM9qPk+OvBIcYMz8aeYW96BesGWac=
Subject key identifier: 67:7F:7F:9F:6F:43:DE:85:F8:1F:E7:42:DD:CA:05:42:A9:DD:A8:2C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1F3B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z39_n29D3oX4H-dC3coFQqndqCw.roa
Signing time: Tue 30 Jan 2024 08:56:05 +0000
ROA not before: Tue 30 Jan 2024 08:56:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.56.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7995 (0x1f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 30 08:56:05 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=677F7F9F6F43DE85F81FE742DDCA0542A9DDA82C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:36:1c:a2:c4:cf:2b:8f:fb:7e:66:0e:19:
9d:1b:f5:a4:a5:7c:4c:2e:73:ab:0f:61:eb:e0:7c:
8c:1d:85:ee:3a:72:2d:d8:74:b0:d6:a0:06:da:9b:
a4:f6:89:43:66:98:a7:56:4a:d4:24:23:ca:b8:de:
20:ae:ea:91:44:0c:57:25:dc:5f:c7:bd:db:79:3b:
7e:25:86:11:ab:ad:6b:35:f3:cc:f7:d5:16:f5:04:
5b:5b:8d:7f:e7:3c:93:21:fe:90:28:30:73:74:59:
9d:08:f9:25:56:85:07:b9:6d:a8:9d:a7:85:72:c5:
f2:41:21:e3:04:cd:dd:df:a2:b2:18:c1:02:a1:a6:
dd:df:f2:2d:09:a1:c8:11:77:ff:f8:9b:66:cb:3b:
e3:6d:80:56:12:3f:99:f9:5c:f4:d7:d7:3f:22:b8:
a0:23:e6:cb:db:72:ba:a7:e2:7d:b1:cf:09:e6:83:
75:66:4b:e7:3f:5b:8d:a3:40:25:af:01:3f:12:77:
20:74:3f:79:17:ae:53:1d:1b:d0:44:12:b7:09:aa:
8b:6c:82:5c:4e:6a:3e:f6:95:6b:4e:6d:96:17:bf:
05:fb:f3:fa:24:98:4c:bd:5b:63:30:6e:d7:96:f1:
2f:34:e8:2b:b4:1e:af:c8:66:22:48:a0:59:b4:b7:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:7F:9F:6F:43:DE:85:F8:1F:E7:42:DD:CA:05:42:A9:DD:A8:2C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z39_n29D3oX4H-dC3coFQqndqCw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:15:9f:b7:25:9a:22:6f:a8:0b:7f:19:2a:be:8b:ee:02:33:
f8:98:59:19:b4:07:19:55:40:fb:19:3e:72:0e:82:83:1f:7a:
98:d1:54:5e:0e:d1:9c:20:53:05:a6:dd:5d:ba:0a:29:e6:2a:
11:0e:28:dc:05:d9:3a:18:0d:3e:59:9c:b4:c2:93:d2:29:70:
4f:40:96:4b:bd:c7:4e:14:fe:c8:22:92:53:e5:f0:57:8b:93:
ff:63:36:ef:f3:b9:3d:e0:9d:0c:67:8f:0c:30:14:12:0d:14:
03:e2:6c:1a:0c:a0:cb:25:17:16:d3:74:5b:bb:4b:54:77:af:
9f:0f:f3:e3:3a:a4:3a:36:8e:71:e3:e9:2b:b5:66:4d:a5:41:
49:1e:bf:cb:20:29:6a:11:a0:18:74:3f:84:bb:39:24:da:11:
b4:ad:ea:f1:bb:60:22:8d:d1:39:4c:51:ea:75:14:83:1e:b2:
17:c7:a6:90:70:38:02:da:04:78:c3:51:e9:a0:d4:d8:ed:e0:
52:b2:a5:7e:e8:07:e4:e4:d3:c4:dc:d4:ed:75:03:a6:06:ce:
0a:18:74:aa:2b:9f:20:3b:e6:f4:3f:2d:f6:a8:2e:05:ff:71:
ee:cc:11:a7:c5:e8:97:b8:00:9b:fb:54:11:1e:5c:8f:20:1e:
ee:99:e6:ba
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHzswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDAxMzAw
ODU2MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY3N0Y3RjlGNkY0M0RF
ODVGODFGRTc0MkREQ0EwNTQyQTlEREE4MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy4zYcosTPK4/7fmYOGZ0b9aSlfEwuc6sPYevgfIwdhe46ci3Y
dLDWoAbam6T2iUNmmKdWStQkI8q43iCu6pFEDFcl3F/Hvdt5O34lhhGrrWs188z3
1Rb1BFtbjX/nPJMh/pAoMHN0WZ0I+SVWhQe5baidp4VyxfJBIeMEzd3forIYwQKh
pt3f8i0JocgRd//4m2bLO+NtgFYSP5n5XPTX1z8iuKAj5svbcrqn4n2xzwnmg3Vm
S+c/W42jQCWvAT8SdyB0P3kXrlMdG9BEErcJqotsglxOaj72lWtObZYXvwX78/ok
mEy9W2MwbteW8S806Cu0Hq/IZiJIoFm0t2ofAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZ39/n29D3oX4H+dC3coFQqndqCwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ozOV9uMjlEM29YNEgtZEMz
Y29GUXFuZHFDdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9
OKAwDQYJKoZIhvcNAQELBQADggEBAI0Vn7clmiJvqAt/GSq+i+4CM/iYWRm0BxlV
QPsZPnIOgoMfepjRVF4O0ZwgUwWm3V26CinmKhEOKNwF2ToYDT5ZnLTCk9IpcE9A
lku9x04U/sgiklPl8FeLk/9jNu/zuT3gnQxnjwwwFBINFAPibBoMoMslFxbTdFu7
S1R3r58P8+M6pDo2jnHj6Su1Zk2lQUkev8sgKWoRoBh0P4S7OSTaEbSt6vG7YCKN
0TlMUep1FIMeshfHppBwOALaBHjDUemg1Njt4FKypX7oB+Tk08Tc1O11A6YGzgoY
dKornyA75vQ/LfaoLgX/ce7MEafF6Je4AJv7VBEeXI8gHu6Z5ro=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:14 2025 by rpki-client