Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lWHWlcGzUIqXMek-qajfk4_3xe0.roa
File: lWHWlcGzUIqXMek-qajfk4_3xe0.roa (raw, json)
Hash identifier: u4IaXdAzliBuPyHeTHPsZJE6on6AhoynTta/SRXPEeQ=
Subject key identifier: 95:61:D6:95:C1:B3:50:8A:97:31:E9:3E:A9:A8:DF:93:8F:F7:C5:ED
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B6B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lWHWlcGzUIqXMek-qajfk4_3xe0.roa
Signing time: Tue 29 Sep 2020 10:08:24 +0000
ROA not before: Tue 29 Sep 2020 10:08:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2923 (0xb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:24 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9561D695C1B3508A9731E93EA9A8DF938FF7C5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:30:c5:46:5a:d9:ef:f3:d3:35:04:7d:11:
50:6b:30:1d:00:22:a8:b9:27:3e:f2:a1:b7:8b:c5:
13:f0:e5:37:c0:85:6c:b7:cf:9b:59:2c:36:ff:59:
49:0a:0c:9c:ca:d3:39:ce:f4:a2:f8:9e:94:cf:2e:
29:e1:b8:74:a8:45:4f:09:94:8e:50:5d:6a:99:97:
f2:0d:aa:0d:3b:bd:4b:ec:45:4b:4a:ad:d5:1c:c7:
1a:cf:26:a6:65:37:cb:eb:c1:05:ce:d2:6c:82:51:
94:97:ae:06:47:c6:e2:99:e0:03:bf:79:62:06:cb:
d3:65:b5:ff:e8:59:0f:ae:d2:e1:ef:76:f8:46:60:
a5:27:33:79:e8:16:a5:cf:cc:6a:64:e2:b9:9d:97:
88:3f:b5:9a:1e:e2:00:96:84:11:f1:4a:15:ec:d2:
91:c4:02:a1:2b:b1:cc:f2:18:41:dc:25:73:2a:73:
c2:41:26:e8:b0:33:51:8a:e4:d3:77:65:22:13:05:
6b:b0:ec:c8:91:d2:8d:82:02:03:62:42:f0:fe:0c:
5a:5b:e7:6d:8a:1d:b5:d4:7e:29:ce:a2:3e:15:21:
95:ec:3d:26:73:2e:88:7f:2f:47:bc:92:85:e2:9f:
3c:e0:63:d3:88:57:a3:c2:c5:35:2e:30:5d:91:fe:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:61:D6:95:C1:B3:50:8A:97:31:E9:3E:A9:A8:DF:93:8F:F7:C5:ED
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lWHWlcGzUIqXMek-qajfk4_3xe0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:6e:10:da:52:ec:49:e3:45:4c:36:cd:d9:e7:35:83:89:8c:
84:38:75:b7:c4:c3:3d:1a:23:e0:ef:ce:0e:c0:91:44:6d:be:
da:f2:e9:63:1f:b7:d4:18:c9:c1:02:30:8e:ce:60:3d:a3:cf:
f5:90:d5:31:99:1f:d1:5d:35:97:cd:cd:36:a4:7a:18:d5:b4:
79:3e:b0:68:c6:1e:ce:c5:db:e5:8f:09:ff:3e:1b:f9:c4:a4:
68:d6:71:c8:53:d3:45:44:be:47:61:79:87:9a:ad:5b:5d:7f:
3e:d3:c4:3e:72:03:94:72:9c:60:cc:57:54:77:09:95:cb:36:
63:82:5f:18:e4:7b:19:56:ab:d7:33:31:a6:56:7e:51:0c:f9:
0e:17:4e:6e:74:e2:42:dc:91:dc:ef:5b:32:33:b1:96:c9:1e:
40:32:7c:e7:ac:1a:b8:d6:74:a5:2d:f5:2c:ae:0f:1d:db:c0:
fe:f3:f0:40:e1:3f:b3:57:6a:8d:66:de:7f:4a:ee:5a:56:76:
f8:31:a5:67:a3:97:cc:80:38:09:4d:22:f6:66:47:5c:da:a4:
d0:9c:7e:41:b2:37:f3:79:c9:53:48:bc:d9:70:5e:15:88:d4:
bc:85:6e:b3:07:0c:b5:45:ff:b8:1b:7f:43:b2:bc:b4:ec:17:
c9:fa:9b:30
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC2swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDk1NjFENjk1QzFCMzUw
OEE5NzMxRTkzRUE5QThERjkzOEZGN0M1RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbNDDFRlrZ7/PTNQR9EVBrMB0AIqi5Jz7yobeLxRPw5TfAhWy3
z5tZLDb/WUkKDJzK0znO9KL4npTPLinhuHSoRU8JlI5QXWqZl/INqg07vUvsRUtK
rdUcxxrPJqZlN8vrwQXO0myCUZSXrgZHxuKZ4AO/eWIGy9Nltf/oWQ+u0uHvdvhG
YKUnM3noFqXPzGpk4rmdl4g/tZoe4gCWhBHxShXs0pHEAqErsczyGEHcJXMqc8JB
JuiwM1GK5NN3ZSITBWuw7MiR0o2CAgNiQvD+DFpb522KHbXUfinOoj4VIZXsPSZz
Loh/L0e8koXinzzgY9OIV6PCxTUuMF2R/vWnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlWHWlcGzUIqXMek+qajfk4/3xe0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xXSFdsY0d6VUlxWE1lay1x
YWpmazRfM3hlMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
ntQwDQYJKoZIhvcNAQELBQADggEBAB1uENpS7EnjRUw2zdnnNYOJjIQ4dbfEwz0a
I+Dvzg7AkURtvtry6WMft9QYycECMI7OYD2jz/WQ1TGZH9FdNZfNzTakehjVtHk+
sGjGHs7F2+WPCf8+G/nEpGjWcchT00VEvkdheYearVtdfz7TxD5yA5RynGDMV1R3
CZXLNmOCXxjkexlWq9czMaZWflEM+Q4XTm504kLckdzvWzIzsZbJHkAyfOesGrjW
dKUt9SyuDx3bwP7z8EDhP7NXao1m3n9K7lpWdvgxpWejl8yAOAlNIvZmR1zapNCc
fkGyN/N5yVNIvNlwXhWI1LyFbrMHDLVF/7gbf0OyvLTsF8n6mzA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:59 2025 by rpki-client