Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b1sz_B0ZtSGMCLjYvJ-nb1Au2s8.roa
File: b1sz_B0ZtSGMCLjYvJ-nb1Au2s8.roa (raw, json)
Hash identifier: AxlxPLVImVkCubI7Pb9GXFAJAxgn7gPd2MqvAfhzE8g=
Subject key identifier: 6F:5B:33:FC:1D:19:B5:21:8C:08:B8:D8:BC:9F:A7:6F:50:2E:DA:CF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14C2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b1sz_B0ZtSGMCLjYvJ-nb1Au2s8.roa
Signing time: Wed 31 Aug 2022 02:29:17 +0000
ROA not before: Wed 31 Aug 2022 02:29:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 122.100.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5314 (0x14c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 31 02:29:17 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6F5B33FC1D19B5218C08B8D8BC9FA76F502EDACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:b1:15:eb:3e:e8:bc:02:db:d4:59:02:50:
1b:2e:bc:66:fd:0c:c9:b9:16:d5:ef:44:26:36:45:
3a:ee:01:ee:17:ba:9f:75:9b:ff:4c:56:7c:14:e6:
48:23:92:bd:88:a3:e0:85:bf:1e:7e:74:5a:68:1c:
17:0c:0b:97:28:b9:35:d9:0a:fe:90:bf:0d:aa:f1:
5e:14:20:53:dc:83:f7:f0:0b:56:df:ea:83:ff:f9:
82:d5:38:ce:85:da:a1:ee:68:bc:f6:86:a9:43:0b:
b2:53:97:8d:02:95:97:3b:dd:7a:7a:74:3e:8f:ba:
ab:45:50:11:6e:74:98:85:c5:ec:a3:f8:9a:be:4d:
48:1b:07:cc:c3:ee:76:20:e3:4a:45:2e:ff:05:60:
4e:69:6a:17:f9:8c:5b:42:ea:6b:23:66:cc:dd:eb:
b4:36:ca:78:39:de:6a:e0:92:01:8f:df:18:da:fe:
a8:93:28:cd:89:82:e7:30:77:6d:45:6d:63:09:4c:
ae:ef:1c:fe:59:54:7a:54:d3:90:ca:75:82:c5:60:
3d:fb:1f:b0:5c:dc:5a:f4:ac:b0:81:ad:b6:b7:44:
0d:17:e2:b8:4c:fa:d9:76:29:43:81:d8:a1:41:ff:
3f:1c:6a:70:c8:19:d2:24:69:65:9e:22:8a:0b:19:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5B:33:FC:1D:19:B5:21:8C:08:B8:D8:BC:9F:A7:6F:50:2E:DA:CF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b1sz_B0ZtSGMCLjYvJ-nb1Au2s8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.96.0/21
Signature Algorithm: sha256WithRSAEncryption
92:92:e1:71:83:f2:26:a6:77:b2:7a:eb:88:da:df:a6:41:70:
54:2f:84:aa:dd:e8:87:52:17:a9:b7:fd:cf:b3:4f:db:57:1b:
76:a2:bc:36:32:26:a6:0d:40:9c:e7:f3:8d:49:28:fa:f7:9c:
00:7a:58:ec:24:17:a6:4d:17:c4:b6:9c:34:56:d5:2d:97:30:
61:80:61:7b:96:e7:a0:bf:89:3e:db:6b:81:c5:ef:98:d8:2d:
25:4f:ff:4d:2a:42:04:43:52:2d:0c:a6:30:d5:24:3a:49:ea:
2a:26:3f:90:fd:23:53:db:f2:05:7d:2a:44:9a:e3:6f:90:41:
03:49:01:7e:d1:6e:1e:f8:35:c9:e7:f5:0c:35:b6:4e:a9:39:
55:84:d4:a0:17:65:24:a6:bd:0a:24:4f:c1:58:f4:94:0e:65:
52:a9:4f:40:76:19:8a:5d:7a:f9:02:32:19:80:bd:98:12:ac:
1c:f8:5f:83:5f:ce:da:e4:9e:97:ff:c1:7b:22:76:e7:e2:dd:
49:7e:f5:48:3c:9e:20:c9:73:79:03:65:6e:dc:61:5d:ad:9d:
1d:af:5c:38:88:6c:cd:9e:df:21:5d:9b:98:56:2d:43:87:f1:
94:c2:86:0d:35:56:bb:d3:1d:cd:f2:be:a2:e3:e5:43:a8:ef:
94:09:59:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA4MzEw
MjI5MTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZGNUIzM0ZDMUQxOUI1
MjE4QzA4QjhEOEJDOUZBNzZGNTAyRURBQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRXbEV6z7ovALb1FkCUBsuvGb9DMm5FtXvRCY2RTruAe4Xup91
m/9MVnwU5kgjkr2Io+CFvx5+dFpoHBcMC5couTXZCv6Qvw2q8V4UIFPcg/fwC1bf
6oP/+YLVOM6F2qHuaLz2hqlDC7JTl40ClZc73Xp6dD6PuqtFUBFudJiFxeyj+Jq+
TUgbB8zD7nYg40pFLv8FYE5pahf5jFtC6msjZszd67Q2yng53mrgkgGP3xja/qiT
KM2Jgucwd21FbWMJTK7vHP5ZVHpU05DKdYLFYD37H7Bc3Fr0rLCBrba3RA0X4rhM
+tl2KUOB2KFB/z8canDIGdIkaWWeIooLGUoFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUb1sz/B0ZtSGMCLjYvJ+nb1Au2s8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2Ixc3pfQjBadFNHTUNMall2
Si1uYjFBdTJzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
ZGAwDQYJKoZIhvcNAQELBQADggEBAJKS4XGD8iamd7J664ja36ZBcFQvhKrd6IdS
F6m3/c+zT9tXG3aivDYyJqYNQJzn841JKPr3nAB6WOwkF6ZNF8S2nDRW1S2XMGGA
YXuW56C/iT7ba4HF75jYLSVP/00qQgRDUi0MpjDVJDpJ6iomP5D9I1Pb8gV9KkSa
42+QQQNJAX7Rbh74Ncnn9Qw1tk6pOVWE1KAXZSSmvQokT8FY9JQOZVKpT0B2GYpd
evkCMhmAvZgSrBz4X4Nfztrknpf/wXsidufi3Ul+9Ug8niDJc3kDZW7cYV2tnR2v
XDiIbM2e3yFdm5hWLUOH8ZTChg01VrvTHc3yvqLj5UOo75QJWdo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org