Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ewyzIKr7V37DstUMsYKxdkX_7gw.roa
File: ewyzIKr7V37DstUMsYKxdkX_7gw.roa (raw, json)
Hash identifier: vw+gz+/CqahKbEPHfty1PZUxR7aAfHhnYC7LT0IPai0=
Subject key identifier: 7B:0C:B3:20:AA:FB:57:7E:C3:B2:D5:0C:B1:82:B1:76:45:FF:EE:0C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1073
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ewyzIKr7V37DstUMsYKxdkX_7gw.roa
Signing time: Sun 07 Feb 2021 12:45:37 +0000
ROA not before: Sun 07 Feb 2021 12:45:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4211 (0x1073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:45:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7B0CB320AAFB577EC3B2D50CB182B17645FFEE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:43:72:b3:6f:2b:d2:d8:fe:cd:96:00:cd:
d8:90:1e:8f:38:07:52:ca:60:6d:d0:bc:e5:c0:a6:
7a:83:ad:ad:ca:14:f2:fa:2c:2f:50:3c:4e:93:0e:
08:62:f2:9c:a0:68:18:dd:b4:5d:de:24:4e:a1:a1:
28:01:5d:47:42:18:62:1b:32:df:37:34:0a:15:86:
cd:1d:8d:be:59:ca:ad:85:65:b6:91:68:1f:47:cb:
78:f2:5e:f5:d9:27:be:46:d9:a0:c7:97:df:af:b0:
6c:36:33:d9:30:4e:a7:48:b9:8f:cc:aa:fd:ff:7b:
ec:7b:9e:66:10:53:2f:3b:da:0c:5a:7b:71:61:c1:
e6:c7:21:02:99:cd:52:51:ae:05:d3:7c:15:50:96:
b3:b8:d2:d7:7c:7e:10:08:c6:9b:9f:45:5f:96:29:
4a:12:64:af:cb:f4:85:a9:28:10:5b:e6:9a:a9:98:
13:32:1b:2b:c0:51:c2:b7:b1:b0:de:8e:f4:39:b5:
ea:a1:ba:d9:9b:65:0b:8c:1b:bd:e0:80:1a:ea:0a:
09:30:2d:8a:9e:10:23:58:f1:e3:f1:01:42:5e:fe:
f1:9f:a7:c2:5c:17:0d:da:83:97:85:15:9c:57:9c:
7d:7f:45:5c:a6:73:3e:4e:80:36:23:cb:fa:2e:9f:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0C:B3:20:AA:FB:57:7E:C3:B2:D5:0C:B1:82:B1:76:45:FF:EE:0C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ewyzIKr7V37DstUMsYKxdkX_7gw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.140.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:59:60:36:07:9a:2c:f4:30:a6:04:1e:e1:d6:51:d0:6b:cf:
b0:79:2e:f0:0c:aa:0f:45:f4:7f:28:90:36:11:2b:c3:79:e1:
d9:cd:bc:34:97:88:8d:ab:e3:cc:8a:b6:05:49:02:6a:a0:aa:
4f:8f:8d:89:95:86:e2:56:d7:ab:7f:b3:7b:a6:76:bf:e8:c8:
af:79:5b:b6:7f:ca:41:be:e1:53:7d:1a:86:e3:71:76:f2:10:
c9:bf:14:01:94:65:34:12:29:e4:04:23:4d:6d:32:b2:51:92:
47:35:34:c8:67:04:6e:85:0d:42:33:4d:43:33:c4:e3:62:bc:
4b:c6:ad:d8:70:3e:b2:3c:03:10:ea:fe:13:b1:0a:bd:1f:8d:
76:aa:c5:fa:db:18:08:cf:89:62:d4:1e:07:f5:02:81:a5:6e:
dd:82:dc:57:58:da:9c:68:c3:ca:0d:0c:7f:f8:c1:15:2c:ba:
54:5e:ce:1d:a6:fc:4f:17:a2:e2:3f:09:ad:25:70:f4:6e:b0:
9d:23:3c:c4:d1:b1:02:53:35:ab:97:78:3f:41:78:9d:c3:57:
ef:0e:fe:c1:81:b3:1f:96:41:74:88:f2:17:49:bb:a1:a8:87:
f0:7e:b9:71:bf:d1:c3:00:d6:37:e7:cd:b1:4a:4b:3a:36:13:
9c:60:74:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEHMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ1MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdCMENCMzIwQUFGQjU3
N0VDM0IyRDUwQ0IxODJCMTc2NDVGRkVFMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYgENys28r0tj+zZYAzdiQHo84B1LKYG3QvOXApnqDra3KFPL6
LC9QPE6TDghi8pygaBjdtF3eJE6hoSgBXUdCGGIbMt83NAoVhs0djb5Zyq2FZbaR
aB9Hy3jyXvXZJ75G2aDHl9+vsGw2M9kwTqdIuY/Mqv3/e+x7nmYQUy872gxae3Fh
webHIQKZzVJRrgXTfBVQlrO40td8fhAIxpufRV+WKUoSZK/L9IWpKBBb5pqpmBMy
GyvAUcK3sbDejvQ5teqhutmbZQuMG73ggBrqCgkwLYqeECNY8ePxAUJe/vGfp8Jc
Fw3ag5eFFZxXnH1/RVymcz5OgDYjy/ounwWlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUewyzIKr7V37DstUMsYKxdkX/7gwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2V3eXpJS3I3VjM3RHN0VU1z
WUt4ZGtYXzdndy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
nowwDQYJKoZIhvcNAQELBQADggEBAG5ZYDYHmiz0MKYEHuHWUdBrz7B5LvAMqg9F
9H8okDYRK8N54dnNvDSXiI2r48yKtgVJAmqgqk+PjYmVhuJW16t/s3umdr/oyK95
W7Z/ykG+4VN9GobjcXbyEMm/FAGUZTQSKeQEI01tMrJRkkc1NMhnBG6FDUIzTUMz
xONivEvGrdhwPrI8AxDq/hOxCr0fjXaqxfrbGAjPiWLUHgf1AoGlbt2C3FdY2pxo
w8oNDH/4wRUsulRezh2m/E8XouI/Ca0lcPRusJ0jPMTRsQJTNauXeD9BeJ3DV+8O
/sGBsx+WQXSI8hdJu6Goh/B+uXG/0cMA1jfnzbFKSzo2E5xgdOM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org