Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ntyhK5MHB8GdVpwt_R-lI3bV7IM.roa
File: ntyhK5MHB8GdVpwt_R-lI3bV7IM.roa (raw, json)
Hash identifier: d+2+5JuIABJot9yqgBuO3/RwQl3vr8bZCRRiE9kXfUk=
Subject key identifier: 9E:DC:A1:2B:93:07:07:C1:9D:56:9C:2D:FD:1F:A5:23:76:D5:EC:83
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 126E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ntyhK5MHB8GdVpwt_R-lI3bV7IM.roa
Signing time: Wed 29 Sep 2021 02:54:34 +0000
ROA not before: Wed 29 Sep 2021 02:54:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 124.6.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4718 (0x126e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9EDCA12B930707C19D569C2DFD1FA52376D5EC83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:80:84:a4:29:92:e6:97:27:f0:9c:da:6f:
98:23:15:7e:da:f1:29:71:8b:d7:c1:99:9e:09:b1:
d7:10:b0:77:df:58:2a:07:e4:42:7b:e1:8d:a5:0c:
69:aa:69:35:16:74:bb:07:bf:7d:ae:d8:a9:63:df:
20:1e:79:0c:68:7c:8f:ac:f0:3d:59:d8:32:0f:06:
54:c6:af:d9:e3:88:8f:e3:21:bc:a4:66:1d:1a:83:
82:ea:55:25:47:56:55:26:0a:55:83:28:f7:b2:94:
27:96:b4:9b:77:f6:9e:81:40:42:3c:dc:78:ba:cb:
fa:af:68:13:df:55:a6:db:ea:eb:20:b5:10:07:53:
1c:34:32:e5:07:b4:80:5c:76:b0:4c:a9:da:65:2e:
9d:3f:00:e6:cb:3c:0b:03:f4:bc:0d:af:7b:84:09:
de:09:d0:78:60:27:ea:bd:eb:1f:ae:94:d5:64:4a:
07:45:42:55:aa:74:1f:16:1b:17:32:ba:62:3a:eb:
ab:8d:44:39:9a:0c:91:74:13:3e:67:02:49:81:4a:
40:c9:8f:e4:30:1a:c7:15:93:2d:0b:05:44:64:40:
a5:ab:fd:be:ea:d8:36:d7:b3:fc:1b:f4:d5:3f:51:
b5:af:ef:02:0c:90:08:05:78:b6:0e:b0:ac:4a:bd:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DC:A1:2B:93:07:07:C1:9D:56:9C:2D:FD:1F:A5:23:76:D5:EC:83
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ntyhK5MHB8GdVpwt_R-lI3bV7IM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.0.0/21
Signature Algorithm: sha256WithRSAEncryption
66:b5:d2:1f:7e:03:18:5a:3a:f4:3c:a9:cd:d9:af:81:e1:0b:
ad:4c:9c:7c:a7:84:21:55:70:5c:2a:6e:57:2a:c7:2b:0a:8d:
b7:3c:6e:12:3f:19:7e:02:be:c3:9e:1b:98:43:05:10:06:ac:
8d:2f:4b:3f:29:04:49:48:9b:69:8b:01:d5:c0:a8:36:6a:e5:
79:34:8c:90:d5:97:5f:1a:70:5c:a7:40:1a:b3:a0:64:ac:b5:
3d:63:cf:33:91:08:eb:2f:10:9b:d7:45:65:ed:89:84:de:e0:
db:4b:71:59:5d:a2:98:3a:70:a9:57:96:0a:6f:7c:bc:cd:66:
76:e0:63:b7:fe:40:3f:d1:3a:a4:50:8a:99:f4:cd:ca:0d:92:
f7:b8:82:42:d7:f7:3a:3c:b2:23:1c:87:76:aa:f3:04:af:bc:
3c:79:62:19:2d:39:b6:42:c8:ac:b4:cf:30:dd:55:69:e7:16:
ac:33:af:e2:ee:50:d6:b3:63:8a:ec:a1:17:f5:77:c8:8f:87:
93:a7:fd:e8:38:78:97:14:c0:a8:7c:fb:cd:aa:6f:8b:c7:8b:
6a:39:8a:3d:2d:d4:ce:17:da:7e:bc:75:4f:70:79:ff:88:9d:
d1:58:cd:48:12:06:0b:42:8b:7c:cc:fb:04:78:29:f5:6c:09:
72:76:6b:81
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MzRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDlFRENBMTJCOTMwNzA3
QzE5RDU2OUMyREZEMUZBNTIzNzZENUVDODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCQoCEpCmS5pcn8Jzab5gjFX7a8Slxi9fBmZ4JsdcQsHffWCoH
5EJ74Y2lDGmqaTUWdLsHv32u2Klj3yAeeQxofI+s8D1Z2DIPBlTGr9njiI/jIbyk
Zh0ag4LqVSVHVlUmClWDKPeylCeWtJt39p6BQEI83Hi6y/qvaBPfVabb6usgtRAH
Uxw0MuUHtIBcdrBMqdplLp0/AObLPAsD9LwNr3uECd4J0HhgJ+q96x+ulNVkSgdF
QlWqdB8WGxcyumI666uNRDmaDJF0Ez5nAkmBSkDJj+QwGscVky0LBURkQKWr/b7q
2DbXs/wb9NU/UbWv7wIMkAgFeLYOsKxKvfdlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUntyhK5MHB8GdVpwt/R+lI3bV7IMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL250eWhLNU1IQjhHZFZwd3Rf
Ui1sSTNiVjdJTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN8
BgAwDQYJKoZIhvcNAQELBQADggEBAGa10h9+AxhaOvQ8qc3Zr4HhC61MnHynhCFV
cFwqblcqxysKjbc8bhI/GX4CvsOeG5hDBRAGrI0vSz8pBElIm2mLAdXAqDZq5Xk0
jJDVl18acFynQBqzoGSstT1jzzORCOsvEJvXRWXtiYTe4NtLcVldopg6cKlXlgpv
fLzNZnbgY7f+QD/ROqRQipn0zcoNkve4gkLX9zo8siMch3aq8wSvvDx5YhktObZC
yKy0zzDdVWnnFqwzr+LuUNazY4rsoRf1d8iPh5On/eg4eJcUwKh8+82qb4vHi2o5
ij0t1M4X2n68dU9wef+IndFYzUgSBgtCi3zM+wR4KfVsCXJ2a4E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org