Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fm6bZ7zpgXOCtMyko5593bPGfug.roa
File: fm6bZ7zpgXOCtMyko5593bPGfug.roa (raw, json)
Hash identifier: WQErS0J0yvYFW/HcdTG8bK67+3ZE48D0UNuHzTC+CsE=
Subject key identifier: 7E:6E:9B:67:BC:E9:81:73:82:B4:CC:A4:A3:9E:7D:DD:B3:C6:7E:E8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F95
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fm6bZ7zpgXOCtMyko5593bPGfug.roa
Signing time: Sun 07 Feb 2021 12:34:52 +0000
ROA not before: Sun 07 Feb 2021 12:34:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 211.76.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3989 (0xf95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7E6E9B67BCE9817382B4CCA4A39E7DDDB3C67EE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:d5:62:33:96:ff:f2:db:06:35:dc:2a:c8:
f8:50:91:01:93:d8:5f:f4:a5:da:28:dc:68:6e:1a:
3c:6e:4e:43:38:39:02:28:78:63:df:3c:16:4d:d1:
5a:74:10:6e:45:83:84:40:86:d7:2d:55:c3:92:3b:
af:79:44:98:8e:8a:11:46:d6:73:9c:71:31:69:78:
10:2b:d1:d2:e0:bf:1d:ab:88:35:c7:2a:a3:e0:40:
17:f8:84:24:79:af:52:46:b7:03:fa:fb:46:e5:84:
08:0f:65:0f:e3:93:04:c8:f6:d6:44:6c:66:d7:42:
e7:c6:cb:be:ee:c0:09:59:57:c9:15:0f:ef:66:8b:
d5:05:12:55:7a:67:ed:e5:b2:a8:7e:d9:57:a2:42:
7c:7e:41:7d:e9:71:18:f4:95:95:13:1a:7a:e9:4f:
63:08:43:32:ef:e8:36:c6:6e:c0:d8:53:8c:16:53:
3c:3b:74:98:ee:da:d4:f2:46:1a:d3:34:7b:50:98:
30:ef:c1:6c:ec:34:4e:38:53:37:1e:6a:f8:e3:d7:
f6:6f:ba:75:87:3e:fa:18:24:9b:3b:d3:79:c7:62:
99:c7:6a:7c:7b:d7:a8:be:3f:d4:9a:00:e6:91:fb:
32:39:b8:10:24:ac:c0:b1:bd:c0:dd:29:b4:47:7e:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:9B:67:BC:E9:81:73:82:B4:CC:A4:A3:9E:7D:DD:B3:C6:7E:E8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fm6bZ7zpgXOCtMyko5593bPGfug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.77.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d4:3f:c9:a3:85:95:c5:06:65:94:e6:ae:4e:67:2d:df:4e:
64:6b:f0:a3:cf:1c:06:6a:3f:71:7d:55:19:0a:04:40:2e:2f:
d4:e6:d8:70:12:25:0a:69:f9:9a:c7:6b:df:37:4e:3d:9b:b7:
8d:91:dc:9c:79:a8:fb:2c:6b:04:bb:98:5e:be:ff:08:f9:c7:
a3:fb:42:8c:5c:b6:55:c4:a7:75:8b:49:df:ca:36:bb:5b:a7:
67:86:03:ea:e8:59:ea:56:ca:63:4d:4d:ad:d7:5a:97:35:ec:
88:6a:e5:77:d0:a5:e2:10:82:eb:a1:92:a0:db:d1:da:e6:ec:
93:12:cf:f3:f8:0b:4d:07:90:47:07:37:07:b2:3c:c1:50:25:
c9:1d:6d:69:b6:9e:cb:9d:09:41:8b:65:41:67:41:99:7e:56:
b7:9a:8e:2b:26:24:3f:b4:fa:ce:fa:49:78:0d:93:36:22:68:
40:29:5a:ee:1e:c5:92:a6:e5:7f:d5:92:d2:f4:05:ac:28:ba:
0a:c1:1c:95:f8:ac:e4:64:f6:94:c5:d0:77:82:3f:c3:d4:60:
dc:aa:9e:07:f2:09:a0:29:fd:1b:91:72:cb:c1:39:3b:e2:58:
db:c3:d0:37:ee:c3:8c:6a:f5:f5:2c:e7:cb:44:9d:18:3a:8e:
08:ee:44:b4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM0NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdFNkU5QjY3QkNFOTgx
NzM4MkI0Q0NBNEEzOUU3REREQjNDNjdFRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOYNViM5b/8tsGNdwqyPhQkQGT2F/0pdoo3GhuGjxuTkM4OQIo
eGPfPBZN0Vp0EG5Fg4RAhtctVcOSO695RJiOihFG1nOccTFpeBAr0dLgvx2riDXH
KqPgQBf4hCR5r1JGtwP6+0blhAgPZQ/jkwTI9tZEbGbXQufGy77uwAlZV8kVD+9m
i9UFElV6Z+3lsqh+2VeiQnx+QX3pcRj0lZUTGnrpT2MIQzLv6DbGbsDYU4wWUzw7
dJju2tTyRhrTNHtQmDDvwWzsNE44Uzceavjj1/ZvunWHPvoYJJs703nHYpnHanx7
16i+P9SaAOaR+zI5uBAkrMCxvcDdKbRHfhZdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfm6bZ7zpgXOCtMyko5593bPGfugwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZtNmJaN3pwZ1hPQ3RNeWtv
NTU5M2JQR2Z1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TE0wDQYJKoZIhvcNAQELBQADggEBAJDUP8mjhZXFBmWU5q5OZy3fTmRr8KPPHAZq
P3F9VRkKBEAuL9Tm2HASJQpp+ZrHa983Tj2bt42R3Jx5qPssawS7mF6+/wj5x6P7
QoxctlXEp3WLSd/KNrtbp2eGA+roWepWymNNTa3XWpc17Ihq5XfQpeIQguuhkqDb
0drm7JMSz/P4C00HkEcHNweyPMFQJckdbWm2nsudCUGLZUFnQZl+VreajismJD+0
+s76SXgNkzYiaEApWu4exZKm5X/VktL0BawougrBHJX4rORk9pTF0HeCP8PUYNyq
ngfyCaAp/RuRcsvBOTviWNvD0Dfuw4xq9fUs58tEnRg6jgjuRLQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org