Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c-0YL_JlUniT3Cb8lSyVPk_LQ9s.roa
File: c-0YL_JlUniT3Cb8lSyVPk_LQ9s.roa (raw, json)
Hash identifier: R/LR4h4HGvDqbqW2uWggD7WDYfg+xl9VY8frhM/HZNg=
Subject key identifier: 73:ED:18:2F:F2:65:52:78:93:DC:26:FC:95:2C:95:3E:4F:CB:43:DB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1417
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c-0YL_JlUniT3Cb8lSyVPk_LQ9s.roa
Signing time: Fri 29 Apr 2022 10:24:28 +0000
ROA not before: Fri 29 Apr 2022 10:24:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5143 (0x1417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 29 10:24:28 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=73ED182FF265527893DC26FC952C953E4FCB43DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:af:b9:c7:74:88:04:39:0e:5d:50:b3:31:
7c:08:f8:fb:03:b9:0d:86:13:c7:b3:fe:4f:fe:d1:
e1:ec:f0:94:56:05:56:30:40:2d:71:8f:0f:b2:60:
c1:dd:bc:01:ba:4c:7d:10:ff:86:6f:76:6e:1a:0a:
ef:dd:02:eb:fc:1b:b4:6a:a0:e4:98:1a:e6:51:aa:
9a:fd:0a:2c:97:f1:fa:e5:e1:25:e2:72:05:b7:2c:
5d:5b:72:7c:2f:29:13:81:67:e1:75:02:67:e5:ed:
69:44:b7:72:4d:04:14:ca:5d:77:df:42:19:55:7b:
d3:e7:d0:4d:ce:bf:42:d9:8d:e3:df:bf:7d:3d:56:
bf:da:22:84:69:cb:cd:88:e8:fa:f1:d2:82:ae:0a:
c7:a0:c4:fa:14:60:99:58:6c:6c:1a:b4:6e:9e:30:
68:c4:5a:69:3c:1b:85:4e:ea:02:da:0b:c8:f7:5a:
b3:2e:29:ab:a3:a7:ce:7b:46:6e:35:4d:d9:f6:a6:
f9:1f:de:e6:b8:33:c2:66:ec:0f:0d:bb:a4:13:92:
39:e8:92:9a:35:7e:2a:e2:4f:e7:fa:15:f7:cd:05:
bf:94:37:33:4b:c9:1b:ac:e1:e7:1a:6f:cc:08:b4:
cf:6a:1a:3c:38:32:ec:9d:f3:6c:1f:01:99:ae:64:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:ED:18:2F:F2:65:52:78:93:DC:26:FC:95:2C:95:3E:4F:CB:43:DB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c-0YL_JlUniT3Cb8lSyVPk_LQ9s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.24.0/21
Signature Algorithm: sha256WithRSAEncryption
48:45:19:2f:59:32:1d:20:cd:dc:42:bc:22:6e:2e:67:b9:fc:
61:40:9a:7b:3d:b3:49:f7:61:4d:5e:f8:bf:5c:d5:14:27:d1:
38:c5:d0:96:8d:e2:91:ec:9c:88:8d:76:2a:ed:02:96:ae:e6:
cd:86:36:a6:bd:3d:85:bb:5b:2d:6e:db:2e:76:81:28:90:5c:
0e:31:5b:ac:80:1d:c0:63:75:0a:71:37:fa:42:74:17:f9:60:
ee:f5:78:8c:89:f3:42:ed:fe:58:33:60:4c:d2:f3:7f:b8:34:
23:2d:a7:af:9c:53:f3:1c:be:58:66:41:70:b3:2e:85:d3:90:
7d:2a:d9:c8:39:ce:94:84:02:31:23:a6:cd:d8:9a:92:13:0b:
54:b7:62:c9:81:8c:7d:e2:f8:e1:44:a0:07:ff:83:ab:a4:ee:
09:30:98:d7:d1:74:d3:b2:7e:7c:1b:ee:0c:83:bf:f6:6d:1b:
0c:7a:f3:56:92:fe:79:98:c3:ed:59:32:bc:a9:d5:03:a9:0d:
46:da:69:2a:1f:ab:6a:4b:4f:69:f1:53:10:b0:a4:44:29:1f:
e5:a7:c5:68:08:3c:b2:53:10:55:d2:ae:b5:c0:89:a9:ba:c0:
96:f1:50:b1:3e:60:75:46:18:83:74:20:f5:27:8f:1c:30:c3:
74:99:1e:92
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA0Mjkx
MDI0MjhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDczRUQxODJGRjI2NTUy
Nzg5M0RDMjZGQzk1MkM5NTNFNEZDQjQzREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrFq+5x3SIBDkOXVCzMXwI+PsDuQ2GE8ez/k/+0eHs8JRWBVYw
QC1xjw+yYMHdvAG6TH0Q/4Zvdm4aCu/dAuv8G7RqoOSYGuZRqpr9CiyX8frl4SXi
cgW3LF1bcnwvKROBZ+F1Amfl7WlEt3JNBBTKXXffQhlVe9Pn0E3Ov0LZjePfv309
Vr/aIoRpy82I6Prx0oKuCsegxPoUYJlYbGwatG6eMGjEWmk8G4VO6gLaC8j3WrMu
Kaujp857Rm41Tdn2pvkf3ua4M8Jm7A8Nu6QTkjnokpo1firiT+f6FffNBb+UNzNL
yRus4ecab8wItM9qGjw4Muyd82wfAZmuZH31AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUc+0YL/JlUniT3Cb8lSyVPk/LQ9swHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2MtMFlMX0psVW5pVDNDYjhs
U3lWUGtfTFE5cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nxgwDQYJKoZIhvcNAQELBQADggEBAEhFGS9ZMh0gzdxCvCJuLme5/GFAmns9s0n3
YU1e+L9c1RQn0TjF0JaN4pHsnIiNdirtApau5s2GNqa9PYW7Wy1u2y52gSiQXA4x
W6yAHcBjdQpxN/pCdBf5YO71eIyJ80Lt/lgzYEzS83+4NCMtp6+cU/McvlhmQXCz
LoXTkH0q2cg5zpSEAjEjps3YmpITC1S3YsmBjH3i+OFEoAf/g6uk7gkwmNfRdNOy
fnwb7gyDv/ZtGwx681aS/nmYw+1ZMryp1QOpDUbaaSofq2pLT2nxUxCwpEQpH+Wn
xWgIPLJTEFXSrrXAiam6wJbxULE+YHVGGIN0IPUnjxwww3SZHpI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org