Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_c5ARK94KwLPKgIJHnf8O5Ra2xM.roa
File: _c5ARK94KwLPKgIJHnf8O5Ra2xM.roa (raw, json)
Hash identifier: MoIEkpAPDXp1GV0i8dJkclZc0ytDIzi2r9xBgxb/fmw=
Subject key identifier: FD:CE:40:44:AF:78:2B:02:CF:2A:02:09:1E:77:FC:3B:94:5A:DB:13
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 189C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_c5ARK94KwLPKgIJHnf8O5Ra2xM.roa
Signing time: Sat 22 Oct 2022 06:01:23 +0000
ROA not before: Sat 22 Oct 2022 06:01:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6300 (0x189c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:01:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FDCE4044AF782B02CF2A02091E77FC3B945ADB13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:3a:16:fb:5b:f5:fd:4d:d1:8b:81:9e:4a:
e3:c1:72:2f:a5:6c:f5:24:65:20:be:6e:c0:80:4a:
02:5f:d6:f1:bf:47:d0:a1:54:4a:8d:fe:b8:8f:13:
17:e7:37:8d:7d:33:18:11:47:70:e6:41:43:cf:14:
27:d7:d3:23:4b:3e:89:f9:68:90:70:c4:a5:03:fa:
df:4b:4c:2f:17:e1:0d:e7:40:71:c6:7f:90:b4:de:
d2:5d:96:86:ff:c0:53:57:a6:6d:aa:ba:8c:77:9c:
59:27:74:8f:83:83:fe:f6:e9:e4:fb:34:e1:8a:a1:
b1:c7:77:9a:d6:bd:78:4b:45:8f:18:d3:85:2d:19:
d3:1e:57:d3:4c:4f:da:d0:76:32:03:52:d4:e1:47:
28:6e:6e:cd:27:a8:5a:40:ec:2f:80:d8:b7:e3:50:
1c:75:97:5d:c1:03:45:63:f6:69:f6:10:ea:3b:91:
f9:ba:b8:af:10:3f:8e:29:31:63:61:52:50:c9:75:
ec:b9:34:70:55:c7:bd:99:95:1a:e1:0c:bf:fc:f8:
bf:73:76:11:2a:eb:a9:65:a0:75:59:1e:e8:7d:ee:
c8:7e:08:36:05:9f:0b:e5:6d:01:6b:fc:73:9d:38:
78:3d:4f:c5:ee:a5:fb:ad:2a:e9:c8:65:be:aa:bd:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:40:44:AF:78:2B:02:CF:2A:02:09:1E:77:FC:3B:94:5A:DB:13
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_c5ARK94KwLPKgIJHnf8O5Ra2xM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.56.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:18:9b:af:e0:2a:5c:12:27:87:50:c2:d7:b1:43:7b:be:26:
84:30:ba:7a:c4:ce:e6:17:76:9d:dd:70:10:40:f4:c2:fb:c8:
76:76:7c:cb:bc:b4:75:ec:d3:4a:f6:3a:aa:77:21:6d:cb:fa:
c3:23:8e:b0:f5:81:e5:2d:6b:6a:a0:ed:25:e5:7e:5c:52:db:
e9:2a:28:55:54:20:17:01:c6:52:f5:50:55:aa:46:57:d1:8c:
08:26:5e:f7:29:06:17:22:8c:cb:73:c6:b1:b5:3d:a2:51:26:
61:2e:8e:c0:be:23:72:10:69:91:00:ab:24:ce:17:2e:3c:14:
48:67:ab:94:fb:80:50:1f:26:92:6a:6a:42:ec:39:a9:59:be:
f4:cb:71:ac:94:2d:2e:1a:c1:42:0a:3e:b2:12:15:4b:65:bb:
63:2f:9c:1c:ff:33:99:6e:ff:79:94:18:1e:f6:1b:03:7a:be:
fb:b4:3d:83:b6:05:b4:c7:a1:ce:4c:8f:83:cb:53:db:94:20:
c4:d6:62:a3:9c:6e:ee:71:f1:0f:a3:6b:82:d8:25:b7:fd:5e:
ee:a4:07:23:e4:21:1b:10:5e:ca:d6:2e:8a:52:1f:29:a2:49:
a0:1a:68:d4:33:8d:0d:9e:17:f1:d0:5b:bd:17:69:05:1d:d6:
68:ba:a3:31
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjAxMjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZEQ0U0MDQ0QUY3ODJC
MDJDRjJBMDIwOTFFNzdGQzNCOTQ1QURCMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDULzoW+1v1/U3Ri4GeSuPBci+lbPUkZSC+bsCASgJf1vG/R9Ch
VEqN/riPExfnN419MxgRR3DmQUPPFCfX0yNLPon5aJBwxKUD+t9LTC8X4Q3nQHHG
f5C03tJdlob/wFNXpm2quox3nFkndI+Dg/726eT7NOGKobHHd5rWvXhLRY8Y04Ut
GdMeV9NMT9rQdjIDUtThRyhubs0nqFpA7C+A2LfjUBx1l13BA0Vj9mn2EOo7kfm6
uK8QP44pMWNhUlDJdey5NHBVx72ZlRrhDL/8+L9zdhEq66lloHVZHuh97sh+CDYF
nwvlbQFr/HOdOHg9T8XupfutKunIZb6qvQm7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/c5ARK94KwLPKgIJHnf8O5Ra2xMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL19jNUFSSzk0S3dMUEtnSUpI
bmY4TzVSYTJ4TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
njgwDQYJKoZIhvcNAQELBQADggEBAGwYm6/gKlwSJ4dQwtexQ3u+JoQwunrEzuYX
dp3dcBBA9ML7yHZ2fMu8tHXs00r2Oqp3IW3L+sMjjrD1geUta2qg7SXlflxS2+kq
KFVUIBcBxlL1UFWqRlfRjAgmXvcpBhcijMtzxrG1PaJRJmEujsC+I3IQaZEAqyTO
Fy48FEhnq5T7gFAfJpJqakLsOalZvvTLcayULS4awUIKPrISFUtlu2MvnBz/M5lu
/3mUGB72GwN6vvu0PYO2BbTHoc5Mj4PLU9uUIMTWYqOcbu5x8Q+ja4LYJbf9Xu6k
ByPkIRsQXsrWLopSHymiSaAaaNQzjQ2eF/HQW70XaQUd1mi6ozE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org