Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l-Uf93Z3P0RtQF8GxG4MZK9WvcU.roa
File: l-Uf93Z3P0RtQF8GxG4MZK9WvcU.roa (raw, json)
Hash identifier: Xp/v45TQOUCtNZ+i8BrhetWG3YhCMgx34kpYfPn6yaU=
Subject key identifier: 97:E5:1F:F7:76:77:3F:44:6D:40:5F:06:C4:6E:0C:64:AF:56:BD:C5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AAB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l-Uf93Z3P0RtQF8GxG4MZK9WvcU.roa
Signing time: Tue 29 Sep 2020 10:07:29 +0000
ROA not before: Tue 29 Sep 2020 10:07:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 211.76.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=97E51FF776773F446D405F06C46E0C64AF56BDC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:39:9b:45:39:b6:c2:90:0c:57:7f:28:cc:
54:38:20:d5:dc:53:56:eb:b2:0b:6b:fe:60:6b:73:
39:74:57:9d:71:2d:be:8a:3d:ee:df:3f:39:94:d7:
e6:70:3a:f8:f9:8b:9b:d6:f7:4c:e3:ba:57:63:4d:
5d:09:7a:e3:e2:11:f5:59:c0:a3:d1:b1:fb:1c:9e:
d8:70:c6:fd:bf:87:b1:cb:e6:3b:94:cd:41:b4:78:
4e:4a:1b:36:c8:53:a4:fa:2e:9f:f2:31:b1:6e:bd:
82:52:da:94:6b:4f:35:54:03:92:7f:f4:70:d4:8a:
72:44:13:4b:26:a5:63:cd:fa:3f:fc:70:94:d5:78:
cb:fa:d5:dd:85:64:0d:c2:f6:79:7f:15:16:c8:e8:
09:0f:8e:a4:bf:0a:15:74:97:fd:cc:14:0c:16:b5:
2b:f7:96:e4:85:c8:83:8a:a9:fe:61:ba:5e:e3:15:
1c:42:51:ff:2e:81:64:10:23:5a:89:5b:7e:0a:c9:
bf:8c:bf:b7:f8:29:fc:85:b1:82:99:1f:a0:d2:d6:
13:dd:7a:c7:e6:95:04:0b:8c:1d:26:c3:ce:4e:14:
d2:e7:e2:9c:eb:2d:eb:ca:47:ee:88:da:70:f5:4a:
80:3d:ec:9d:1a:0e:00:70:2c:d5:2a:95:ee:68:7e:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:1F:F7:76:77:3F:44:6D:40:5F:06:C4:6E:0C:64:AF:56:BD:C5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l-Uf93Z3P0RtQF8GxG4MZK9WvcU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.40.0/22
Signature Algorithm: sha256WithRSAEncryption
79:db:5a:34:40:ba:e8:56:47:70:ea:65:06:b0:54:09:af:78:
18:0d:60:46:cd:90:4a:97:77:6c:7b:5b:dd:26:33:48:59:49:
cc:12:f4:3d:43:3e:66:cf:57:c3:e1:cf:8e:b3:aa:94:51:8a:
c3:fb:16:62:f3:da:32:08:7b:f8:2b:a4:cc:36:a6:d3:7e:3b:
bc:59:99:7f:d8:91:36:b8:25:44:04:96:e5:dd:82:38:3b:93:
06:cc:5f:9a:40:c3:ce:e2:e1:ff:c9:bd:c8:35:53:2f:21:cc:
d6:48:fd:0a:7f:91:ff:8e:aa:e6:dd:36:69:aa:64:4e:b0:c7:
e3:82:4a:6c:48:05:ea:45:68:95:6a:57:35:42:c9:a9:a2:76:
e4:49:39:d9:fa:0a:0b:2a:70:0e:ff:6a:c8:4a:85:da:f3:01:
b1:da:a2:a9:da:69:ce:ca:2e:99:cd:f7:6d:45:57:af:5d:61:
ca:7a:84:8b:f6:d9:a6:b6:74:0c:de:3c:cd:c2:64:22:93:c7:
76:c5:63:1e:31:91:53:17:b9:2e:53:56:76:3c:f1:fa:d7:38:
eb:ee:cb:df:fe:33:5f:0f:cc:c4:36:38:8b:44:8c:e5:6a:2b:
38:92:52:bf:94:be:f6:25:0c:b8:f6:df:c2:1a:99:0a:21:f1:
a0:e9:76:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3MjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDk3RTUxRkY3NzY3NzNG
NDQ2RDQwNUYwNkM0NkUwQzY0QUY1NkJEQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7LDmbRTm2wpAMV38ozFQ4INXcU1brsgtr/mBrczl0V51xLb6K
Pe7fPzmU1+ZwOvj5i5vW90zjuldjTV0JeuPiEfVZwKPRsfscnthwxv2/h7HL5juU
zUG0eE5KGzbIU6T6Lp/yMbFuvYJS2pRrTzVUA5J/9HDUinJEE0smpWPN+j/8cJTV
eMv61d2FZA3C9nl/FRbI6AkPjqS/ChV0l/3MFAwWtSv3luSFyIOKqf5hul7jFRxC
Uf8ugWQQI1qJW34Kyb+Mv7f4KfyFsYKZH6DS1hPdesfmlQQLjB0mw85OFNLn4pzr
LevKR+6I2nD1SoA97J0aDgBwLNUqle5ofmWPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUl+Uf93Z3P0RtQF8GxG4MZK9WvcUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2wtVWY5M1ozUDBSdFFGOEd4
RzRNWks5V3ZjVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALT
TCgwDQYJKoZIhvcNAQELBQADggEBAHnbWjRAuuhWR3DqZQawVAmveBgNYEbNkEqX
d2x7W90mM0hZScwS9D1DPmbPV8Phz46zqpRRisP7FmLz2jIIe/grpMw2ptN+O7xZ
mX/YkTa4JUQEluXdgjg7kwbMX5pAw87i4f/Jvcg1Uy8hzNZI/Qp/kf+OqubdNmmq
ZE6wx+OCSmxIBepFaJVqVzVCyamiduRJOdn6CgsqcA7/ashKhdrzAbHaoqnaac7K
LpnN921FV69dYcp6hIv22aa2dAzePM3CZCKTx3bFYx4xkVMXuS5TVnY88frXOOvu
y9/+M18PzMQ2OItEjOVqKziSUr+UvvYlDLj238IamQoh8aDpdgI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org