Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hWKHHv3_Wf4A-P9muUnVWrGd9F0.roa
File: hWKHHv3_Wf4A-P9muUnVWrGd9F0.roa (raw, json)
Hash identifier: byiCXofCHJs5KTbKfqacSyeb5WsR4JRPeENcltAt7+4=
Subject key identifier: 85:62:87:1E:FD:FF:59:FE:00:F8:FF:66:B9:49:D5:5A:B1:9D:F4:5D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B99
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hWKHHv3_Wf4A-P9muUnVWrGd9F0.roa
Signing time: Tue 29 Sep 2020 10:08:37 +0000
ROA not before: Tue 29 Sep 2020 10:08:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.56.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8562871EFDFF59FE00F8FF66B949D55AB19DF45D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:df:2b:cb:2a:13:1c:c4:78:93:6b:ba:d8:
8c:57:23:16:36:a7:bb:7e:2b:a0:56:81:69:ba:10:
84:84:0f:a7:92:e3:0a:32:b3:0b:b7:73:9b:9c:28:
94:c6:f7:ad:2e:2d:02:de:bb:4c:b6:3d:88:1d:e5:
21:af:d2:7e:4f:a5:ee:58:b7:8d:31:0b:f4:52:24:
8c:da:8a:de:ac:ec:cd:97:26:e7:9f:31:23:d3:4d:
f2:2f:b4:c9:77:66:ca:c8:28:9f:86:32:fc:4f:0a:
56:fc:7a:fa:2c:22:b5:1a:bd:82:9d:34:2e:b0:28:
00:ee:a2:1c:36:72:a9:f6:2e:7c:57:c7:4e:4f:cb:
16:ba:e4:83:34:9d:4d:50:83:49:b4:99:45:f9:50:
be:dd:68:93:b4:b3:c1:4d:99:9d:1f:51:41:c0:be:
0a:f0:0d:c6:ed:6b:24:61:27:3d:12:f9:d1:b6:ab:
67:5c:7d:f6:e0:26:38:47:d0:71:79:a5:25:7a:8d:
72:2a:bb:a8:4a:ef:e1:15:1e:b5:ca:12:1f:82:af:
4e:81:ed:fd:79:f0:c2:82:54:34:c3:2e:dd:5e:63:
23:34:de:47:f2:14:55:bd:c6:2c:27:b6:fd:3d:e7:
0f:f7:7e:bc:a1:cd:f3:70:dd:a1:3a:84:2a:d1:28:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:62:87:1E:FD:FF:59:FE:00:F8:FF:66:B9:49:D5:5A:B1:9D:F4:5D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hWKHHv3_Wf4A-P9muUnVWrGd9F0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b0:2d:f7:4b:7c:6a:01:64:a5:91:93:da:39:7b:21:80:bd:
d2:8e:e9:2d:4c:01:0d:92:2c:75:08:e7:fd:11:77:43:6f:a1:
a9:6b:eb:19:e0:d6:ff:52:83:70:4d:f8:6c:77:74:84:b4:9e:
00:5d:67:b6:14:2b:91:b9:43:ea:4e:58:c0:36:8f:1b:ae:4f:
51:07:4e:1f:e6:e7:45:b1:aa:fc:af:17:5d:39:e7:59:8e:8a:
a7:11:91:f1:b6:5e:3c:97:af:d4:f3:77:3d:7a:9c:1e:5b:22:
77:5a:a1:69:22:06:7d:1b:d5:21:f0:f0:8b:23:6c:75:a3:c8:
75:ec:89:38:67:2e:c2:4a:8a:16:22:57:4c:c3:b8:6a:93:5c:
0d:c2:b7:9f:55:33:5f:3d:c4:17:ae:70:15:f2:51:ff:70:c1:
d7:f0:c9:19:95:2c:c4:86:ae:94:1c:78:6a:63:90:50:17:80:
5d:33:17:a0:a8:c6:d0:1a:45:4e:bb:ba:8e:51:e3:23:df:db:
83:da:26:b7:5e:27:cb:bc:e2:d6:ef:f1:71:a4:ea:82:c6:d7:
e7:93:39:3b:01:b6:b9:ac:a5:77:94:9b:d1:e8:8f:07:43:a0:
a4:c6:26:69:7f:1a:a5:8e:3c:83:b1:8e:41:ba:1a:14:0e:1e:
52:7a:a6:0a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDg1NjI4NzFFRkRGRjU5
RkUwMEY4RkY2NkI5NDlENTVBQjE5REY0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnHt8ryyoTHMR4k2u62IxXIxY2p7t+K6BWgWm6EISED6eS4woy
swu3c5ucKJTG960uLQLeu0y2PYgd5SGv0n5Ppe5Yt40xC/RSJIzait6s7M2XJuef
MSPTTfIvtMl3ZsrIKJ+GMvxPClb8evosIrUavYKdNC6wKADuohw2cqn2LnxXx05P
yxa65IM0nU1Qg0m0mUX5UL7daJO0s8FNmZ0fUUHAvgrwDcbtayRhJz0S+dG2q2dc
ffbgJjhH0HF5pSV6jXIqu6hK7+EVHrXKEh+Cr06B7f158MKCVDTDLt1eYyM03kfy
FFW9xiwntv095w/3fryhzfNw3aE6hCrRKOWdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhWKHHv3/Wf4A+P9muUnVWrGd9F0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hXS0hIdjNfV2Y0QS1QOW11
VW5WV3JHZDlGMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9
OL8wDQYJKoZIhvcNAQELBQADggEBAFuwLfdLfGoBZKWRk9o5eyGAvdKO6S1MAQ2S
LHUI5/0Rd0Nvoalr6xng1v9Sg3BN+Gx3dIS0ngBdZ7YUK5G5Q+pOWMA2jxuuT1EH
Th/m50WxqvyvF10551mOiqcRkfG2XjyXr9Tzdz16nB5bIndaoWkiBn0b1SHw8Isj
bHWjyHXsiThnLsJKihYiV0zDuGqTXA3Ct59VM189xBeucBXyUf9wwdfwyRmVLMSG
rpQceGpjkFAXgF0zF6CoxtAaRU67uo5R4yPf24PaJrdeJ8u84tbv8XGk6oLG1+eT
OTsBtrmspXeUm9HojwdDoKTGJml/GqWOPIOxjkG6GhQOHlJ6pgo=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org