Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gQlsTAbHcEYGbuoO9TTqVsWo6J0.roa
File: gQlsTAbHcEYGbuoO9TTqVsWo6J0.roa (raw, json)
Hash identifier: m2wYYOUoBx54iKQMHJNk0z1e6G3JeO0oH7sUrkF8O80=
Subject key identifier: 81:09:6C:4C:06:C7:70:46:06:6E:EA:0E:F5:34:EA:56:C5:A8:E8:9D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1293
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gQlsTAbHcEYGbuoO9TTqVsWo6J0.roa
Signing time: Wed 29 Sep 2021 02:54:44 +0000
ROA not before: Wed 29 Sep 2021 02:54:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4755 (0x1293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=81096C4C06C77046066EEA0EF534EA56C5A8E89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:4a:f8:11:14:1b:39:7f:25:95:a2:b6:1e:
6a:38:3b:3a:34:b1:d7:9f:aa:ad:f7:36:f7:15:91:
4e:16:c1:4e:6a:c2:c3:6d:1a:9e:9e:f1:2a:ab:bc:
b2:b1:32:65:1a:53:ac:1d:dc:99:70:2b:39:ba:f1:
18:c2:55:fa:27:7e:c2:1d:59:6e:34:de:9b:46:f8:
45:ea:a7:4d:91:b4:21:16:20:18:98:bb:f2:5d:d0:
7d:a6:ff:5b:3e:d8:d0:80:7f:03:7f:e0:aa:03:bb:
f6:6b:f5:ac:1c:92:a9:e5:6e:47:55:61:d8:7c:7a:
ee:66:e1:30:04:d5:ef:eb:40:fd:fc:eb:91:58:d9:
67:6d:93:66:44:d0:4d:77:f3:e9:4a:e0:9e:ed:ca:
d7:92:fa:c9:aa:85:98:ce:4b:9d:9c:51:0b:2e:e0:
2a:9f:eb:12:17:30:13:9d:f4:2f:13:69:a0:dc:67:
6f:db:21:d8:2a:6d:8f:4a:98:97:e5:32:20:81:fc:
ad:e1:ba:a4:ba:67:d6:12:e7:74:05:d9:67:e5:37:
ed:b4:56:13:5e:61:9c:2c:9e:2a:70:87:30:29:cf:
f2:00:08:40:4f:4e:1f:a3:8b:e4:02:d5:6f:ec:95:
80:fc:15:bc:b1:ca:1e:47:a2:5a:30:75:84:a2:90:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:6C:4C:06:C7:70:46:06:6E:EA:0E:F5:34:EA:56:C5:A8:E8:9D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gQlsTAbHcEYGbuoO9TTqVsWo6J0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.147.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6d:24:d2:42:16:71:a9:f5:2d:83:49:42:28:57:38:ad:da:
b1:d5:0b:80:8f:ea:fd:cb:8d:1c:e7:9b:61:2d:66:c4:23:d2:
ed:56:13:3f:f6:ed:23:24:ee:b5:1b:36:54:f0:54:a1:0a:d0:
ac:0b:29:ca:7f:73:b1:84:18:17:2a:46:9e:6d:32:1b:09:98:
30:cd:7a:4e:51:7d:73:7d:5d:87:59:40:fb:dc:20:64:18:65:
b0:dc:6f:7f:36:4d:c2:ee:fb:88:bc:98:95:17:9e:ef:f0:e2:
f9:25:7e:55:8d:5d:2d:d7:90:ea:a7:2a:1e:1f:9c:82:7f:b9:
14:6d:02:9e:cb:a6:c4:be:59:61:07:e9:82:c8:27:fd:fe:a0:
f8:64:4c:29:d3:99:83:0f:0d:3d:16:b4:c8:22:26:95:62:2f:
83:3a:9b:c6:46:d7:12:b7:b5:3b:2d:1f:20:e9:c1:ca:86:41:
ec:19:11:57:be:77:42:47:d5:f3:f8:70:63:dc:48:3c:54:4f:
30:65:77:c9:f0:89:e5:b1:85:bf:16:ba:74:30:f5:2a:b5:41:
27:75:cc:86:2e:ed:30:6c:89:3e:a2:23:fd:0b:2a:86:67:88:
80:02:f2:72:2f:9c:2f:86:c7:c1:11:95:7f:b4:1b:2c:e5:79:
90:3e:f9:29
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDgxMDk2QzRDMDZDNzcw
NDYwNjZFRUEwRUY1MzRFQTU2QzVBOEU4OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW6kr4ERQbOX8llaK2Hmo4Ozo0sdefqq33NvcVkU4WwU5qwsNt
Gp6e8SqrvLKxMmUaU6wd3JlwKzm68RjCVfonfsIdWW403ptG+EXqp02RtCEWIBiY
u/Jd0H2m/1s+2NCAfwN/4KoDu/Zr9awckqnlbkdVYdh8eu5m4TAE1e/rQP3865FY
2Wdtk2ZE0E138+lK4J7tyteS+smqhZjOS52cUQsu4Cqf6xIXMBOd9C8TaaDcZ2/b
IdgqbY9KmJflMiCB/K3huqS6Z9YS53QF2WflN+20VhNeYZwsnipwhzApz/IACEBP
Th+ji+QC1W/slYD8Fbyxyh5HolowdYSikHIxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgQlsTAbHcEYGbuoO9TTqVsWo6J0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2dRbHNUQWJIY0VZR2J1b085
VFRxVnNXbzZKMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
npMwDQYJKoZIhvcNAQELBQADggEBABltJNJCFnGp9S2DSUIoVzit2rHVC4CP6v3L
jRznm2EtZsQj0u1WEz/27SMk7rUbNlTwVKEK0KwLKcp/c7GEGBcqRp5tMhsJmDDN
ek5RfXN9XYdZQPvcIGQYZbDcb382TcLu+4i8mJUXnu/w4vklflWNXS3XkOqnKh4f
nIJ/uRRtAp7LpsS+WWEH6YLIJ/3+oPhkTCnTmYMPDT0WtMgiJpViL4M6m8ZG1xK3
tTstHyDpwcqGQewZEVe+d0JH1fP4cGPcSDxUTzBld8nwieWxhb8WunQw9Sq1QSd1
zIYu7TBsiT6iI/0LKoZniIAC8nIvnC+Gx8ERlX+0GyzleZA++Sk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org