Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8ZedYgogMhR_WaP8QYY0is4Guk.roa
File: g8ZedYgogMhR_WaP8QYY0is4Guk.roa (raw, json)
Hash identifier: tdd0WrpIR2spelemy6PD+HXsP2OoPIF3hJ9riO2C/5k=
Subject key identifier: 83:C6:5E:75:88:28:80:C8:51:FD:66:8F:F1:06:18:D2:2B:38:1A:E9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BA2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8ZedYgogMhR_WaP8QYY0is4Guk.roa
Signing time: Tue 29 Sep 2020 10:08:39 +0000
ROA not before: Tue 29 Sep 2020 10:08:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2978 (0xba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=83C65E75882880C851FD668FF10618D22B381AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:e5:4b:d5:ed:0f:83:9f:91:33:66:5d:e3:
aa:ad:d7:1a:c3:9f:0c:a6:77:81:b1:59:c8:db:68:
39:37:77:06:df:87:df:9e:ba:3b:35:9a:16:c7:bc:
cb:03:4a:82:55:ae:6e:d6:b8:da:8b:53:1e:c2:bb:
09:db:5f:7b:80:ad:73:48:00:e0:2a:46:8b:30:b0:
46:72:f3:c1:be:01:b6:2d:f2:1a:e0:95:e8:2e:b6:
e4:a9:cc:29:57:9a:2a:4c:64:2a:49:83:b1:d9:fb:
11:f7:df:4d:0a:df:b7:57:50:f0:64:f6:72:f5:16:
50:9b:32:9f:8e:63:b0:57:af:31:c8:8d:0f:a2:7f:
49:ac:9d:53:0c:43:b3:6a:4c:6a:3f:64:27:fd:b7:
61:30:df:05:d3:9d:76:2e:59:87:4f:1b:4f:93:c7:
59:66:6b:45:bc:e8:74:41:36:fe:2a:f2:a7:b4:be:
35:11:2f:d3:7c:34:f5:32:c2:a6:7b:48:da:56:dd:
47:95:fb:53:9e:09:a0:b3:92:b8:d4:1b:9b:2e:e6:
53:bd:15:b2:b2:3f:fe:12:ca:27:29:62:df:6c:7d:
a1:49:c8:bc:7f:c1:16:6f:80:82:8e:62:8d:db:19:
5d:7d:48:26:42:0b:1e:30:69:c3:a9:84:0a:c7:83:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:5E:75:88:28:80:C8:51:FD:66:8F:F1:06:18:D2:2B:38:1A:E9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8ZedYgogMhR_WaP8QYY0is4Guk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:b3:c7:32:cd:10:15:c6:d7:3f:9c:9b:7d:c8:11:39:4a:ff:
79:8d:70:7d:ca:72:b0:dc:e5:84:14:f4:9a:a8:ec:b4:49:01:
07:99:e1:4b:19:eb:84:3b:c5:c7:3e:33:2b:c8:75:1e:1a:19:
b7:f4:26:7b:6a:7d:2d:e0:13:97:07:22:d0:e2:2a:9a:cd:1b:
46:ae:31:3e:e8:d1:03:7a:86:ed:5b:c0:7c:eb:d4:cb:22:00:
b0:2d:22:c8:aa:92:5c:24:ca:15:ab:5d:98:08:4b:18:67:2c:
14:7e:dc:cb:87:81:7e:0b:b8:1f:ec:49:53:51:58:e2:90:4b:
cb:e2:09:ef:d5:4c:46:a2:a8:6b:95:fe:b1:d3:4e:b8:ac:8d:
e7:2a:5b:60:cc:3a:42:2d:ec:5e:29:6e:cd:7b:fc:7c:34:05:
93:46:66:f5:1b:39:d4:b6:6c:e0:43:28:48:fc:7c:c5:67:ce:
b4:4b:1e:f3:5b:98:df:3f:6f:e5:8a:12:3b:b8:a3:2c:8e:8e:
26:60:f3:06:2d:dd:91:69:9c:86:fd:7a:67:94:4d:55:49:dd:
46:58:b8:e9:34:22:25:72:1b:43:b1:d2:01:5e:a7:2e:ce:21:
9e:09:f2:fb:21:35:45:f4:c3:86:5c:2e:bb:c6:30:a4:08:9f:
dc:52:e4:1b
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgzQzY1RTc1ODgyODgw
Qzg1MUZENjY4RkYxMDYxOEQyMkIzODFBRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+UeVL1e0Pg5+RM2Zd46qt1xrDnwymd4GxWcjbaDk3dwbfh9+e
ujs1mhbHvMsDSoJVrm7WuNqLUx7CuwnbX3uArXNIAOAqRoswsEZy88G+AbYt8hrg
legutuSpzClXmipMZCpJg7HZ+xH3300K37dXUPBk9nL1FlCbMp+OY7BXrzHIjQ+i
f0msnVMMQ7NqTGo/ZCf9t2Ew3wXTnXYuWYdPG0+Tx1lma0W86HRBNv4q8qe0vjUR
L9N8NPUywqZ7SNpW3UeV+1OeCaCzkrjUG5su5lO9FbKyP/4SyicpYt9sfaFJyLx/
wRZvgIKOYo3bGV19SCZCCx4wacOphArHg2WBAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUg8ZedYgogMhR/WaP8QYY0is4GukwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2c4WmVkWWdvZ01oUl9XYVA4
UVlZMGlzNEd1ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx
njANBgkqhkiG9w0BAQsFAAOCAQEAALPHMs0QFcbXP5ybfcgROUr/eY1wfcpysNzl
hBT0mqjstEkBB5nhSxnrhDvFxz4zK8h1HhoZt/Qme2p9LeATlwci0OIqms0bRq4x
PujRA3qG7VvAfOvUyyIAsC0iyKqSXCTKFatdmAhLGGcsFH7cy4eBfgu4H+xJU1FY
4pBLy+IJ79VMRqKoa5X+sdNOuKyN5ypbYMw6Qi3sXiluzXv8fDQFk0Zm9Rs51LZs
4EMoSPx8xWfOtEse81uY3z9v5YoSO7ijLI6OJmDzBi3dkWmchv16Z5RNVUndRli4
6TQiJXIbQ7HSAV6nLs4hngny+yE1RfTDhlwuu8YwpAif3FLkGw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org