Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jICC3CZDFwCFQh4PAY0NOvm49wg.roa
File: jICC3CZDFwCFQh4PAY0NOvm49wg.roa (raw, json)
Hash identifier: X44rbhZvde/+UWxLDveA7EiOEfoKnrtKHD1xut47SKY=
Subject key identifier: 8C:80:82:DC:26:43:17:00:85:42:1E:0F:01:8D:0D:3A:F9:B8:F7:08
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B9C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jICC3CZDFwCFQh4PAY0NOvm49wg.roa
Signing time: Tue 29 Sep 2020 10:08:37 +0000
ROA not before: Tue 29 Sep 2020 10:08:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2972 (0xb9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8C8082DC2643170085421E0F018D0D3AF9B8F708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:3a:6b:bb:0d:92:76:34:78:5a:63:24:de:
b8:b5:dd:46:e8:f3:15:9b:d1:03:94:c4:9a:a6:5e:
fe:ff:99:57:9a:b3:0f:ce:9b:f4:70:23:c1:e3:e4:
79:51:7f:57:07:aa:d1:13:4f:00:a7:0d:e2:c1:4a:
fa:f1:5e:a5:ad:b4:0d:ff:3e:26:9c:61:33:5b:1f:
fc:ee:b0:33:95:fa:62:c3:df:b8:e5:20:c5:d1:66:
e0:ae:99:4f:12:87:be:8c:1c:ce:d9:c4:a1:25:d9:
a6:46:c0:f6:8b:3d:43:f1:95:d9:e6:d3:70:4c:ee:
d0:32:1c:21:5d:bd:06:af:11:33:5e:4d:ba:38:b7:
42:0b:2f:ea:92:dd:d0:ed:0e:e9:62:5a:f9:09:df:
c1:9b:61:23:3d:f4:57:ef:bf:8c:de:34:df:52:66:
37:74:4e:4e:55:b3:a7:83:6a:bb:db:f0:d1:b8:b2:
17:b5:df:08:f1:c2:4d:66:ee:58:95:35:ff:ce:fc:
df:d0:bb:c5:94:ae:15:17:3a:22:17:dc:82:56:0e:
67:40:14:11:1c:fe:72:2b:99:cd:67:ef:a1:82:28:
a3:3f:c8:0a:31:6e:5a:f9:5e:ff:06:54:2f:41:0e:
a3:74:4a:9a:bd:08:0d:54:71:6a:76:dd:28:40:cf:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:80:82:DC:26:43:17:00:85:42:1E:0F:01:8D:0D:3A:F9:B8:F7:08
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jICC3CZDFwCFQh4PAY0NOvm49wg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.88.0/22
Signature Algorithm: sha256WithRSAEncryption
87:6a:66:df:05:46:f6:28:d1:31:ad:30:e8:91:ef:4a:00:50:
aa:4a:d9:27:80:a0:2a:0f:15:a0:12:d3:91:8f:a8:f3:05:77:
e2:68:e1:11:70:82:8f:ac:64:f3:ee:f7:ae:00:f1:d7:21:eb:
61:13:5b:70:fe:d2:2d:07:be:b5:8b:e7:7d:88:c2:a5:85:6b:
23:47:3e:cd:f5:46:7b:6a:e7:0b:03:b7:22:9f:56:e4:34:1d:
c7:67:40:31:ca:1f:76:1c:81:2f:81:9d:05:27:32:39:c8:22:
3a:fe:f4:77:65:95:14:7c:71:14:24:a8:3c:98:62:cf:3f:51:
c7:02:8c:37:19:a7:16:5a:ae:d6:d9:54:e1:7f:2f:de:76:a6:
ac:c1:93:35:38:a2:45:5a:fd:93:8f:55:48:bc:ba:5d:b0:63:
15:9a:39:54:88:9a:86:5f:01:1e:37:fb:38:c5:84:4f:bb:d4:
09:24:49:83:fc:34:d4:50:20:e6:a8:74:17:18:1a:e7:15:56:
46:da:4b:cc:08:e9:bf:6a:cf:1f:86:ed:6c:a5:69:9e:c6:60:
a2:40:38:5c:cf:6c:e1:1d:12:e1:a4:fb:1b:dc:1c:3e:8d:67:
93:e9:7e:f3:f6:d8:99:9d:c9:22:b1:6b:e5:2a:7a:48:d3:51:
1b:1d:16:73
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhDODA4MkRDMjY0MzE3
MDA4NTQyMUUwRjAxOEQwRDNBRjlCOEY3MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsXjpruw2SdjR4WmMk3ri13Ubo8xWb0QOUxJqmXv7/mVeasw/O
m/RwI8Hj5HlRf1cHqtETTwCnDeLBSvrxXqWttA3/PiacYTNbH/zusDOV+mLD37jl
IMXRZuCumU8Sh76MHM7ZxKEl2aZGwPaLPUPxldnm03BM7tAyHCFdvQavETNeTbo4
t0ILL+qS3dDtDuliWvkJ38GbYSM99Ffvv4zeNN9SZjd0Tk5Vs6eDarvb8NG4she1
3wjxwk1m7liVNf/O/N/Qu8WUrhUXOiIX3IJWDmdAFBEc/nIrmc1n76GCKKM/yAox
blr5Xv8GVC9BDqN0Spq9CA1UcWp23ShAz1rzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjICC3CZDFwCFQh4PAY0NOvm49wgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pJQ0MzQ1pERndDRlFoNFBB
WTBOT3ZtNDl3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6
ZFgwDQYJKoZIhvcNAQELBQADggEBAIdqZt8FRvYo0TGtMOiR70oAUKpK2SeAoCoP
FaAS05GPqPMFd+Jo4RFwgo+sZPPu964A8dch62ETW3D+0i0HvrWL532IwqWFayNH
Ps31Rntq5wsDtyKfVuQ0HcdnQDHKH3YcgS+BnQUnMjnIIjr+9HdllRR8cRQkqDyY
Ys8/UccCjDcZpxZartbZVOF/L952pqzBkzU4okVa/ZOPVUi8ul2wYxWaOVSImoZf
AR43+zjFhE+71AkkSYP8NNRQIOaodBcYGucVVkbaS8wI6b9qzx+G7WylaZ7GYKJA
OFzPbOEdEuGk+xvcHD6NZ5PpfvP22JmdySKxa+UqekjTURsdFnM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org