Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dgSFPSrr1cTS8OGyEgqLCbLkqDA.roa
File: dgSFPSrr1cTS8OGyEgqLCbLkqDA.roa (raw, json)
Hash identifier: 5Gat5s6J19PFWPe9k1u/1B8dWomZcpqBhv92/WKwAjQ=
Subject key identifier: 76:04:85:3D:2A:EB:D5:C4:D2:F0:E1:B2:12:0A:8B:09:B2:E4:A8:30
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 195A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dgSFPSrr1cTS8OGyEgqLCbLkqDA.roa
Signing time: Sat 22 Oct 2022 06:06:25 +0000
ROA not before: Sat 22 Oct 2022 06:06:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6490 (0x195a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7604853D2AEBD5C4D2F0E1B2120A8B09B2E4A830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:13:55:5c:4e:d7:f7:ec:29:d7:54:9a:54:
32:18:23:11:27:3e:50:cf:e9:a8:d2:4f:a9:e3:98:
b5:39:dc:f9:15:1f:18:1c:32:0e:d5:ce:61:dd:d2:
b0:7a:00:3b:7c:68:64:42:a7:42:e8:f6:d4:4c:cd:
21:11:bc:12:c9:70:1e:31:e9:f0:d8:c5:5a:c6:e4:
71:fa:87:bd:e0:b1:a2:ed:10:a5:4f:1c:fc:e9:71:
10:97:35:ff:0e:39:7c:1d:c1:8a:58:eb:78:f8:ac:
cf:43:e9:b2:cf:a2:56:27:1c:ae:4e:0f:6f:2d:42:
9e:89:37:9a:a0:69:07:d2:89:c1:ac:d4:c9:74:4d:
db:7d:fe:d2:ec:c9:dc:47:ea:a5:c9:02:7d:26:ac:
e0:63:79:53:f9:bb:aa:0b:fd:22:4a:19:2c:51:80:
43:2d:06:aa:68:e5:35:ff:b9:e5:3c:8c:60:cf:67:
d2:90:16:b8:e6:7b:9a:3f:69:42:69:bb:1f:4d:de:
f1:9b:6c:5e:7f:32:80:f8:7d:33:d2:e8:26:ac:7b:
9b:42:98:e7:d0:ad:b6:03:e1:d6:3b:1d:6d:11:29:
37:b3:fd:af:86:6d:c7:7a:96:b1:af:20:db:e4:c8:
bf:e1:5e:b6:f9:85:89:61:ca:e6:3f:03:b2:5c:1d:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:85:3D:2A:EB:D5:C4:D2:F0:E1:B2:12:0A:8B:09:B2:E4:A8:30
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dgSFPSrr1cTS8OGyEgqLCbLkqDA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.62.0/24
Signature Algorithm: sha256WithRSAEncryption
42:05:bd:ab:f7:97:85:88:9b:ef:39:2e:b7:e2:4e:6a:ea:02:
3b:78:85:43:e2:f6:9f:93:20:51:6f:97:ca:6a:30:a2:4f:1b:
35:08:07:d7:fe:e4:7f:61:38:55:15:e1:de:6d:1b:65:3b:e6:
68:28:49:db:25:fa:ce:35:4f:15:42:95:08:5f:88:c6:39:f5:
2d:83:20:9c:6f:1a:34:ad:02:27:84:0a:01:0d:b2:b3:12:41:
5e:29:3d:35:57:a8:e8:96:e5:1c:72:38:3a:9c:75:34:ae:ca:
ac:82:a2:fb:48:5b:ce:85:9e:35:e3:8b:f5:7c:de:38:0a:b2:
87:af:2e:1b:6f:5f:df:a6:43:7e:de:ae:7a:f8:42:fa:c6:dc:
4e:cc:5f:1c:6d:5a:c7:76:59:62:a4:21:68:6e:42:38:aa:a8:
89:46:a6:48:46:6a:9a:d4:d5:48:6d:e7:08:9f:05:36:7e:76:
fb:5e:36:86:1f:f4:cc:c0:76:76:e2:21:80:1b:93:bc:2a:30:
7b:56:56:ea:9a:0e:3a:62:02:71:39:96:c7:ef:77:de:31:36:
40:ee:31:92:af:1e:de:7d:ab:b9:6b:8a:7e:b5:e8:6d:7b:16:
4c:33:c1:0d:43:3c:31:70:b7:8e:92:ac:0b:53:e0:72:b8:9d:
56:12:06:21
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc2MDQ4NTNEMkFFQkQ1
QzREMkYwRTFCMjEyMEE4QjA5QjJFNEE4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJHhNVXE7X9+wp11SaVDIYIxEnPlDP6ajST6njmLU53PkVHxgc
Mg7VzmHd0rB6ADt8aGRCp0Lo9tRMzSERvBLJcB4x6fDYxVrG5HH6h73gsaLtEKVP
HPzpcRCXNf8OOXwdwYpY63j4rM9D6bLPolYnHK5OD28tQp6JN5qgaQfSicGs1Ml0
Tdt9/tLsydxH6qXJAn0mrOBjeVP5u6oL/SJKGSxRgEMtBqpo5TX/ueU8jGDPZ9KQ
Frjme5o/aUJpux9N3vGbbF5/MoD4fTPS6Case5tCmOfQrbYD4dY7HW0RKTez/a+G
bcd6lrGvINvkyL/hXrb5hYlhyuY/A7JcHRSNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdgSFPSrr1cTS8OGyEgqLCbLkqDAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2RnU0ZQU3JyMWNUUzhPR3lF
Z3FMQ2JMa3FEQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TD4wDQYJKoZIhvcNAQELBQADggEBAEIFvav3l4WIm+85LrfiTmrqAjt4hUPi9p+T
IFFvl8pqMKJPGzUIB9f+5H9hOFUV4d5tG2U75mgoSdsl+s41TxVClQhfiMY59S2D
IJxvGjStAieECgENsrMSQV4pPTVXqOiW5RxyODqcdTSuyqyCovtIW86FnjXji/V8
3jgKsoevLhtvX9+mQ37ernr4QvrG3E7MXxxtWsd2WWKkIWhuQjiqqIlGpkhGaprU
1Uht5wifBTZ+dvteNoYf9MzAdnbiIYAbk7wqMHtWVuqaDjpiAnE5lsfvd94xNkDu
MZKvHt59q7lrin616G17FkwzwQ1DPDFwt46SrAtT4HK4nVYSBiE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org