Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fjn6AZraK6j8hK-Xg1bLl1836hA.roa
File: fjn6AZraK6j8hK-Xg1bLl1836hA.roa (raw, json)
Hash identifier: TK/bEtwkM7XB3Leo9E3fBk95pXhNCtzpp29j93wwP8M=
Subject key identifier: 7E:39:FA:01:9A:DA:2B:A8:FC:84:AF:97:83:56:CB:97:5F:37:EA:10
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BA1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fjn6AZraK6j8hK-Xg1bLl1836hA.roa
Signing time: Tue 29 Sep 2020 10:08:39 +0000
ROA not before: Tue 29 Sep 2020 10:08:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.158.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2977 (0xba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7E39FA019ADA2BA8FC84AF978356CB975F37EA10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:cb:5e:2a:c6:3f:bc:d2:bd:52:9b:c9:a4:
65:3e:2e:05:4b:46:d9:a3:f5:b3:64:18:a2:b6:55:
0a:da:05:61:f3:96:ef:0e:70:45:d7:db:c8:37:73:
66:7d:31:6d:ad:54:b9:18:00:f0:e7:9f:a4:ba:17:
b8:12:56:d8:d2:ba:27:ae:21:d6:ba:0f:7a:5c:53:
ac:06:6b:84:2d:b8:94:25:ec:78:a9:07:b8:9a:31:
23:1b:28:9e:da:0d:06:f5:34:4c:31:ba:8a:d1:a2:
6d:61:0b:da:85:05:13:bc:39:17:32:72:b9:64:b0:
57:59:4d:8b:16:4b:04:9a:8d:ea:94:ea:5e:21:c2:
5a:88:40:ee:26:a8:fd:7a:36:9d:7f:16:03:3b:d5:
e3:e5:c0:6e:9d:b9:f8:f5:e3:0c:ed:8f:b3:35:cc:
5a:f4:d2:05:ae:2d:28:32:35:65:ca:ee:b4:3a:63:
ab:4e:c7:01:af:c2:8b:2f:eb:7f:00:ca:c3:2c:95:
a7:78:8b:94:2a:71:97:fd:8c:7f:86:09:5a:c7:cf:
49:d1:97:60:84:4c:6a:49:5e:c2:58:f2:96:cc:d6:
ef:3d:42:52:26:78:5a:11:9c:4c:16:d5:38:31:ed:
a2:90:71:f7:11:7b:07:39:bd:92:90:3b:e8:62:1c:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:FA:01:9A:DA:2B:A8:FC:84:AF:97:83:56:CB:97:5F:37:EA:10
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fjn6AZraK6j8hK-Xg1bLl1836hA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.224.0/21
Signature Algorithm: sha256WithRSAEncryption
79:f3:63:d0:0d:11:bf:f9:85:4d:6b:6b:07:c5:e1:20:01:df:
12:61:d8:e8:f0:31:50:47:ae:eb:06:ea:63:e4:03:02:12:c8:
5f:8e:22:5f:c5:93:d8:15:9d:52:18:a3:8b:d9:26:87:43:e6:
e7:15:17:bc:7c:6f:db:e1:d7:15:c1:c4:5c:79:b6:67:18:b2:
21:3c:cc:1b:1c:65:6f:5f:f5:dc:b2:6b:ff:74:7f:b5:36:06:
f7:1e:e3:08:c3:49:62:8c:f0:38:1d:12:8a:f3:5b:ef:7b:ad:
dc:a9:24:89:cc:e1:04:7f:9e:3c:6f:dd:b5:70:3b:7c:39:ba:
98:24:66:28:d1:8a:7b:eb:3d:90:6b:d4:f8:f2:6d:ac:69:3c:
ee:b6:9d:42:da:4e:08:57:6e:ba:3d:a4:aa:1a:7e:f5:d7:88:
64:9b:90:46:62:1d:cd:39:18:c9:3c:8b:36:f8:67:b8:b2:e7:
4d:96:32:5f:08:55:2d:5f:07:da:ec:e6:e8:4a:aa:cc:29:ec:
0f:d7:bc:e3:30:09:a6:ac:8b:5f:b9:7e:50:53:41:20:a7:29:
e7:5f:90:a3:46:39:4c:65:99:03:6d:38:b9:e1:ad:57:29:a5:
46:1c:83:17:b8:db:10:85:dc:b7:b2:19:26:91:d0:34:f6:3a:
3a:b7:70:35
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdFMzlGQTAxOUFEQTJC
QThGQzg0QUY5NzgzNTZDQjk3NUYzN0VBMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1osteKsY/vNK9UpvJpGU+LgVLRtmj9bNkGKK2VQraBWHzlu8O
cEXX28g3c2Z9MW2tVLkYAPDnn6S6F7gSVtjSuieuIda6D3pcU6wGa4QtuJQl7Hip
B7iaMSMbKJ7aDQb1NEwxuorRom1hC9qFBRO8ORcycrlksFdZTYsWSwSajeqU6l4h
wlqIQO4mqP16Np1/FgM71ePlwG6dufj14wztj7M1zFr00gWuLSgyNWXK7rQ6Y6tO
xwGvwosv638AysMslad4i5QqcZf9jH+GCVrHz0nRl2CETGpJXsJY8pbM1u89QlIm
eFoRnEwW1Tgx7aKQcfcRewc5vZKQO+hiHCudAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfjn6AZraK6j8hK+Xg1bLl1836hAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZqbjZBWnJhSzZqOGhLLVhn
MWJMbDE4MzZoQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nuAwDQYJKoZIhvcNAQELBQADggEBAHnzY9ANEb/5hU1rawfF4SAB3xJh2OjwMVBH
rusG6mPkAwISyF+OIl/Fk9gVnVIYo4vZJodD5ucVF7x8b9vh1xXBxFx5tmcYsiE8
zBscZW9f9dyya/90f7U2Bvce4wjDSWKM8DgdEorzW+97rdypJInM4QR/njxv3bVw
O3w5upgkZijRinvrPZBr1PjybaxpPO62nULaTghXbro9pKoafvXXiGSbkEZiHc05
GMk8izb4Z7iy502WMl8IVS1fB9rs5uhKqswp7A/XvOMwCaasi1+5flBTQSCnKedf
kKNGOUxlmQNtOLnhrVcppUYcgxe42xCF3LeyGSaR0DT2Ojq3cDU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org