Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ezmxnP2Alr2oPco8uDJrL_7tDyg.roa
File: ezmxnP2Alr2oPco8uDJrL_7tDyg.roa (raw, json)
Hash identifier: ulZleTyeg7YFKiNsqd08Zc2OxGHL48UeG5jzWuQXp9E=
Subject key identifier: 7B:39:B1:9C:FD:80:96:BD:A8:3D:CA:3C:B8:32:6B:2F:FE:ED:0F:28
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ezmxnP2Alr2oPco8uDJrL_7tDyg.roa
Signing time: Thu 15 Sep 2022 02:35:57 +0000
ROA not before: Thu 15 Sep 2022 02:35:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.158.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7B39B19CFD8096BDA83DCA3CB8326B2FFEED0F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b8:08:39:2b:e1:c1:8a:9e:8b:04:7b:5f:4e:
14:39:c2:42:f6:f8:3f:32:9a:56:9a:bc:5d:86:be:
c3:da:80:7c:2e:4e:66:e3:39:6a:28:d3:9b:c1:a1:
d4:18:5e:38:42:78:32:b8:96:c9:ce:e6:d5:98:3d:
93:15:61:5c:d2:ba:00:1a:38:ff:70:13:6d:e4:8b:
5f:9f:42:82:e7:a6:37:d8:87:3a:3c:be:d4:58:74:
4e:ed:1c:ea:6a:a7:f8:80:c4:01:cf:77:86:87:ad:
58:d7:00:45:2d:49:01:bb:61:38:6b:9b:7b:99:c4:
a5:46:37:fd:40:77:69:f1:94:e7:ec:b4:83:a9:73:
fd:9d:e4:6e:0d:52:e8:62:1c:b6:14:8b:7d:c5:fa:
4a:92:35:5a:e6:29:c8:56:c1:b1:c0:e8:f3:b9:7d:
96:77:f4:5f:14:57:58:f8:7b:97:46:cc:86:0a:16:
2d:7b:ee:f3:db:d9:1c:1f:ab:e2:8e:72:dc:d9:70:
72:20:55:39:1e:b5:97:1c:ce:59:98:93:bf:f2:b1:
0d:a2:f6:e3:32:63:c1:ea:72:b8:1f:99:48:30:6a:
fb:17:d1:f1:b5:c8:1f:84:bd:5a:1e:53:3d:97:9f:
a5:78:32:38:f7:c9:50:94:6e:14:3f:e4:c9:b8:30:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:39:B1:9C:FD:80:96:BD:A8:3D:CA:3C:B8:32:6B:2F:FE:ED:0F:28
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ezmxnP2Alr2oPco8uDJrL_7tDyg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:f9:88:79:6e:85:06:9c:84:a0:88:0b:03:03:31:4f:c1:61:
21:d9:f4:cc:87:7f:4a:6c:e3:62:28:a4:ce:dc:02:4e:a1:ee:
6e:62:cc:c6:fe:9d:82:f9:9f:24:0a:ed:7e:42:ec:a3:2f:d9:
b6:82:ec:13:c4:7a:67:a9:bc:5a:27:d1:91:c1:34:aa:0d:8b:
e5:54:22:f0:ef:d1:d8:36:91:e1:31:25:a0:07:86:34:64:11:
a4:05:51:7d:7e:d2:f4:89:76:81:05:bc:02:a4:ca:e9:9f:9d:
d3:89:a8:90:41:82:4b:66:75:be:d1:8d:77:ed:06:d9:3c:45:
79:7e:ba:c5:0a:e7:e3:5b:8f:f6:96:97:6c:c8:af:ca:06:98:
b7:77:19:5d:26:35:fc:51:3a:37:e4:ba:31:00:13:70:6a:e2:
35:cb:3b:16:52:64:55:63:51:3a:7a:bb:31:07:24:f9:14:d6:
83:a7:62:18:70:8d:b3:9a:5f:c7:cb:0b:c2:8f:f5:93:ec:7f:
b8:76:19:f5:f3:0d:da:25:e0:e4:b0:f7:9b:2b:e9:64:b7:e7:
c0:78:bb:34:ed:ac:1f:ce:ff:aa:1d:1c:c8:5b:46:75:a1:47:
fa:b4:9a:e0:d0:34:f5:a9:ab:a0:8b:50:1f:9b:3a:f0:ef:6c:
4f:1c:96:c5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdCMzlCMTlDRkQ4MDk2
QkRBODNEQ0EzQ0I4MzI2QjJGRkVFRDBGMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD0uAg5K+HBip6LBHtfThQ5wkL2+D8ymlaavF2GvsPagHwuTmbj
OWoo05vBodQYXjhCeDK4lsnO5tWYPZMVYVzSugAaOP9wE23ki1+fQoLnpjfYhzo8
vtRYdE7tHOpqp/iAxAHPd4aHrVjXAEUtSQG7YThrm3uZxKVGN/1Ad2nxlOfstIOp
c/2d5G4NUuhiHLYUi33F+kqSNVrmKchWwbHA6PO5fZZ39F8UV1j4e5dGzIYKFi17
7vPb2Rwfq+KOctzZcHIgVTketZcczlmYk7/ysQ2i9uMyY8HqcrgfmUgwavsX0fG1
yB+EvVoeUz2Xn6V4Mjj3yVCUbhQ/5Mm4MAyPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUezmxnP2Alr2oPco8uDJrL/7tDygwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2V6bXhuUDJBbHIyb1Bjbzh1
REpyTF83dER5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
ntgwDQYJKoZIhvcNAQELBQADggEBAIr5iHluhQachKCICwMDMU/BYSHZ9MyHf0ps
42IopM7cAk6h7m5izMb+nYL5nyQK7X5C7KMv2baC7BPEemepvFon0ZHBNKoNi+VU
IvDv0dg2keExJaAHhjRkEaQFUX1+0vSJdoEFvAKkyumfndOJqJBBgktmdb7RjXft
Btk8RXl+usUK5+Nbj/aWl2zIr8oGmLd3GV0mNfxROjfkujEAE3Bq4jXLOxZSZFVj
UTp6uzEHJPkU1oOnYhhwjbOaX8fLC8KP9ZPsf7h2GfXzDdol4OSw95sr6WS358B4
uzTtrB/O/6odHMhbRnWhR/q0muDQNPWpq6CLUB+bOvDvbE8clsU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org