Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fNtzoCltaYncYux2AtNhdpL9OXc.roa
File: fNtzoCltaYncYux2AtNhdpL9OXc.roa (raw, json)
Hash identifier: gAHG9dNoUSlqT5Qfl7rL0ySLCv1BHC5dVVh/x5i0XKo=
Subject key identifier: 7C:DB:73:A0:29:6D:69:89:DC:62:EC:76:02:D3:61:76:92:FD:39:77
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 16D8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fNtzoCltaYncYux2AtNhdpL9OXc.roa
Signing time: Sat 22 Oct 2022 05:26:52 +0000
ROA not before: Sat 22 Oct 2022 05:26:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5848 (0x16d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:26:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7CDB73A0296D6989DC62EC7602D3617692FD3977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:b8:43:61:dd:9f:26:99:61:70:59:26:be:
14:64:64:dd:af:48:31:ca:33:bd:ee:d9:12:51:b6:
ae:2c:cb:7c:3b:80:90:8d:5f:92:6f:34:24:3c:f7:
55:34:a4:39:2b:94:dc:9c:0c:6c:8d:7a:29:c9:71:
7c:fa:04:11:bf:c3:96:f4:55:dc:ed:cb:61:a2:66:
80:8b:78:34:61:73:5d:b7:2a:c7:88:df:be:7f:0f:
e0:bc:49:68:3e:38:94:e5:02:de:5f:50:08:6b:4e:
87:f6:d6:cf:fc:c8:cc:00:30:84:98:66:ed:d2:c0:
d9:af:ce:70:d6:17:b8:47:80:b7:f4:d4:d8:cd:ff:
a3:ef:2e:d7:79:99:ac:50:1f:1b:f7:f5:69:72:43:
cf:55:a3:d8:69:08:17:f1:91:d5:fe:cb:9e:cb:f1:
7c:a6:43:aa:72:58:6f:6a:67:b5:eb:c7:5d:08:7d:
4e:ed:d9:50:4b:12:0c:8e:60:77:12:c5:ac:76:d2:
ef:10:7e:d8:58:28:d5:b0:ed:88:cf:36:f6:8c:0b:
0d:1c:09:08:f8:c2:4d:94:66:72:83:44:2b:b2:2e:
09:e9:75:98:40:89:73:1a:47:cf:ed:87:49:a9:98:
18:da:61:46:d1:ec:b9:27:5a:05:fd:a1:f5:c8:e6:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:73:A0:29:6D:69:89:DC:62:EC:76:02:D3:61:76:92:FD:39:77
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fNtzoCltaYncYux2AtNhdpL9OXc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:0f:da:a5:ca:0f:f0:75:e3:08:ba:41:f2:38:af:23:b7:a4:
d6:df:d0:04:d7:b1:ef:56:e7:fe:38:f4:3b:d5:78:da:51:66:
e5:e5:e5:8f:e8:6f:86:a9:05:30:6a:4d:c1:9e:39:89:dc:ab:
9a:a8:42:74:9a:ea:bb:c5:a4:c1:ff:87:3a:f8:50:e7:3c:72:
35:cd:84:0c:91:aa:92:8f:d9:83:dd:6b:99:28:5d:02:5d:be:
d0:4d:4b:e6:16:3a:7b:44:25:98:f3:46:71:6f:8a:3b:a5:cc:
93:23:54:34:49:96:c5:df:3a:9f:21:a3:6c:11:38:e2:4f:ea:
0d:28:f2:bc:6f:53:4f:86:8d:fc:6a:58:52:89:2f:07:61:12:
54:60:29:e5:ab:98:d4:88:a9:28:b0:bd:fa:9f:08:64:6f:69:
f5:92:0a:64:70:aa:64:98:b6:71:3b:f4:c3:18:0c:d0:3d:f5:
ae:37:6c:58:03:06:0a:c6:c1:ea:06:e5:98:8a:73:10:a0:36:
36:6e:1c:6d:34:c0:f5:37:ba:4a:85:29:be:f8:82:82:30:2c:
f6:cd:98:d2:52:68:10:42:12:79:60:0a:9a:60:3a:7e:7e:0c:
68:d2:d3:ef:3f:30:8d:34:88:3f:7b:17:b2:d2:60:31:5f:1a:
6b:82:ec:32
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFtgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NTI2NTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdDREI3M0EwMjk2RDY5
ODlEQzYyRUM3NjAyRDM2MTc2OTJGRDM5NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6jbhDYd2fJplhcFkmvhRkZN2vSDHKM73u2RJRtq4sy3w7gJCN
X5JvNCQ891U0pDkrlNycDGyNeinJcXz6BBG/w5b0Vdzty2GiZoCLeDRhc123KseI
375/D+C8SWg+OJTlAt5fUAhrTof21s/8yMwAMISYZu3SwNmvznDWF7hHgLf01NjN
/6PvLtd5maxQHxv39WlyQ89Vo9hpCBfxkdX+y57L8XymQ6pyWG9qZ7Xrx10IfU7t
2VBLEgyOYHcSxax20u8QfthYKNWw7YjPNvaMCw0cCQj4wk2UZnKDRCuyLgnpdZhA
iXMaR8/th0mpmBjaYUbR7LknWgX9ofXI5utzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfNtzoCltaYncYux2AtNhdpL9OXcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZOdHpvQ2x0YVluY1l1eDJB
dE5oZHBMOU9YYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJy
xqgwDQYJKoZIhvcNAQELBQADggEBAEsP2qXKD/B14wi6QfI4ryO3pNbf0ATXse9W
5/449DvVeNpRZuXl5Y/ob4apBTBqTcGeOYncq5qoQnSa6rvFpMH/hzr4UOc8cjXN
hAyRqpKP2YPda5koXQJdvtBNS+YWOntEJZjzRnFvijulzJMjVDRJlsXfOp8ho2wR
OOJP6g0o8rxvU0+GjfxqWFKJLwdhElRgKeWrmNSIqSiwvfqfCGRvafWSCmRwqmSY
tnE79MMYDNA99a43bFgDBgrGweoG5ZiKcxCgNjZuHG00wPU3ukqFKb74goIwLPbN
mNJSaBBCEnlgCppgOn5+DGjS0+8/MI00iD97F7LSYDFfGmuC7DI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:08 2025 by rpki-client