Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_i3xs6DKfFgk5DIH25HWalP1_v4.roa
File: _i3xs6DKfFgk5DIH25HWalP1_v4.roa (raw, json)
Hash identifier: KeF2LRWnKQuFGJIQeVM60B08xVxOfuT3qVeUmCNEBto=
Subject key identifier: FE:2D:F1:B3:A0:CA:7C:58:24:E4:32:07:DB:91:D6:6A:53:F5:FE:FE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14F5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_i3xs6DKfFgk5DIH25HWalP1_v4.roa
Signing time: Thu 08 Sep 2022 04:18:14 +0000
ROA not before: Thu 08 Sep 2022 04:18:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 123.0.48.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5365 (0x14f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 8 04:18:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FE2DF1B3A0CA7C5824E43207DB91D66A53F5FEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:e0:0d:1c:be:97:d2:8f:1e:b0:32:68:4b:
8d:b5:ea:09:aa:da:c7:72:be:98:d9:75:8e:72:71:
32:14:34:50:55:c3:10:94:0a:88:a0:4b:ee:2d:e7:
9c:b1:1a:76:53:be:69:08:73:c9:f8:6d:76:56:11:
b2:f7:f0:5d:41:79:86:ac:ce:a6:83:ca:1b:7a:a7:
17:9f:2f:0b:8c:a4:ab:7d:cb:0d:8f:1f:f9:e3:6b:
ec:1b:81:2f:97:e8:b8:00:dd:b5:c0:fa:63:75:5b:
26:5e:82:3a:ac:98:29:c8:8a:06:1d:a6:ff:79:62:
6c:49:e7:38:34:70:4e:ad:c2:8b:38:b8:77:ee:5f:
6d:7a:94:72:6b:88:47:f2:61:b9:c6:53:3f:12:af:
f1:11:0b:e3:71:95:94:92:59:db:f6:d8:a8:23:c7:
e2:76:e7:f4:54:50:32:5e:f8:b7:fc:7d:a7:40:68:
28:b1:c5:0e:ed:bb:c5:8c:e3:e3:5f:59:9f:2b:da:
17:79:c0:68:e5:d8:d6:bc:1b:cf:64:e5:62:a8:d7:
87:13:db:cc:4a:b4:0c:01:de:e5:c5:63:d8:3a:ff:
ef:74:7c:1f:8c:c4:3c:d5:ed:cb:7e:2a:94:91:20:
99:ac:ac:06:d0:e9:90:5c:51:3d:b9:01:bf:46:69:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:F1:B3:A0:CA:7C:58:24:E4:32:07:DB:91:D6:6A:53:F5:FE:FE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_i3xs6DKfFgk5DIH25HWalP1_v4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.48.0/20
Signature Algorithm: sha256WithRSAEncryption
22:59:2f:78:30:d9:b3:c3:86:ba:42:29:f6:39:82:59:62:b0:
44:0e:d8:80:06:f4:7d:08:43:26:0f:f9:44:b9:60:23:0f:58:
77:eb:1e:c2:e6:7e:6b:9a:53:01:0d:5a:c8:f4:b2:38:82:0e:
05:e6:2c:f8:5a:9e:04:dd:cf:d0:b4:dc:84:41:b6:ca:a0:7c:
96:eb:20:bf:ba:de:5b:85:e6:3f:ed:39:9a:73:2d:cf:9f:f4:
a7:a2:73:84:99:30:55:af:24:e3:9d:ac:39:b0:77:c4:04:0e:
1f:e4:c4:a3:69:ad:87:72:e9:07:31:70:23:c4:a7:de:e8:85:
ca:42:ae:bb:3d:88:b7:96:28:c7:24:b5:e6:47:6c:01:91:94:
48:d8:fb:7c:e5:b1:12:5d:52:95:12:1e:30:89:92:24:a1:63:
3c:21:b1:0f:9a:65:89:b4:ab:8d:ca:17:b2:f4:fc:71:28:7e:
e8:77:e8:c5:02:31:9f:b1:32:dd:d1:56:d3:f1:37:9b:39:1c:
51:fa:bf:cc:88:ec:c4:8d:0e:50:0b:9c:93:a3:c7:99:c9:6e:
ff:60:ea:8b:bd:c8:c4:6c:64:88:ca:db:75:bc:5e:4c:f5:51:
80:5e:78:1b:1e:6f:32:40:d5:74:21:f5:cf:73:2b:6e:31:77:
36:59:a8:a8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MDgw
NDE4MTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZFMkRGMUIzQTBDQTdD
NTgyNEU0MzIwN0RCOTFENjZBNTNGNUZFRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFbuANHL6X0o8esDJoS4216gmq2sdyvpjZdY5ycTIUNFBVwxCU
CoigS+4t55yxGnZTvmkIc8n4bXZWEbL38F1BeYaszqaDyht6pxefLwuMpKt9yw2P
H/nja+wbgS+X6LgA3bXA+mN1WyZegjqsmCnIigYdpv95YmxJ5zg0cE6twos4uHfu
X216lHJriEfyYbnGUz8Sr/ERC+NxlZSSWdv22Kgjx+J25/RUUDJe+Lf8fadAaCix
xQ7tu8WM4+NfWZ8r2hd5wGjl2Na8G89k5WKo14cT28xKtAwB3uXFY9g6/+90fB+M
xDzV7ct+KpSRIJmsrAbQ6ZBcUT25Ab9GaY4zAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/i3xs6DKfFgk5DIH25HWalP1/v4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL19pM3hzNkRLZkZnazVESUgy
NUhXYWxQMV92NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
ADAwDQYJKoZIhvcNAQELBQADggEBACJZL3gw2bPDhrpCKfY5gllisEQO2IAG9H0I
QyYP+US5YCMPWHfrHsLmfmuaUwENWsj0sjiCDgXmLPhangTdz9C03IRBtsqgfJbr
IL+63luF5j/tOZpzLc+f9Keic4SZMFWvJOOdrDmwd8QEDh/kxKNprYdy6QcxcCPE
p97ohcpCrrs9iLeWKMckteZHbAGRlEjY+3zlsRJdUpUSHjCJkiShYzwhsQ+aZYm0
q43KF7L0/HEofuh36MUCMZ+xMt3RVtPxN5s5HFH6v8yI7MSNDlALnJOjx5nJbv9g
6ou9yMRsZIjK23W8Xkz1UYBeeBsebzJA1XQh9c9zK24xdzZZqKg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org