Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q8RFa7SoO5Wa9o5KruDwUu2DcYI.roa
File: q8RFa7SoO5Wa9o5KruDwUu2DcYI.roa (raw, json)
Hash identifier: rAawkKhpbbh8lg5PWvSt+jxE0aorzLo7Bk+zynhv7XY=
Subject key identifier: AB:C4:45:6B:B4:A8:3B:95:9A:F6:8E:4A:AE:E0:F0:52:ED:83:71:82
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AEE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q8RFa7SoO5Wa9o5KruDwUu2DcYI.roa
Signing time: Tue 29 Sep 2020 10:07:47 +0000
ROA not before: Tue 29 Sep 2020 10:07:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ABC4456BB4A83B959AF68E4AAEE0F052ED837182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:04:93:5a:7c:03:22:5e:09:e4:0f:13:28:
90:e8:59:3d:1b:3a:5a:f5:87:a3:f7:bb:0b:59:a3:
4a:ff:1e:21:3f:1c:7b:dd:82:2a:59:79:fe:7a:a1:
60:85:bd:ce:33:67:8b:e1:eb:ce:2e:b2:43:8c:40:
33:38:70:5c:6f:ef:4f:39:30:4a:a6:72:b2:3e:26:
de:4a:6e:e8:19:23:8d:e3:e3:90:36:d4:98:e4:65:
39:74:52:2c:a3:95:26:66:f1:c7:35:73:7e:e7:f3:
38:fc:96:35:37:61:38:35:5a:bc:74:76:56:f9:f3:
da:70:93:84:2c:d8:ad:42:77:9d:ed:15:2a:74:f7:
98:98:a9:5c:57:72:9e:d8:25:90:ad:cc:6b:f4:12:
a1:ba:7f:c7:c8:a4:db:60:b8:b7:12:f4:a6:06:26:
d5:f4:08:7e:1d:4a:8a:80:82:fb:eb:56:41:6f:4b:
17:43:88:98:c5:0a:fd:5a:e7:9e:f0:11:8f:c6:e5:
f7:1b:b3:5e:d4:e3:a0:91:44:86:a7:9c:59:f3:b1:
6a:39:97:b6:bb:0a:9f:cc:1a:97:29:c9:0b:30:a2:
34:d4:a2:d5:a7:26:58:ac:5a:61:4b:b3:e1:a4:74:
8a:2c:3d:3c:98:bf:8c:a2:38:22:e8:b1:98:c6:be:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:45:6B:B4:A8:3B:95:9A:F6:8E:4A:AE:E0:F0:52:ED:83:71:82
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q8RFa7SoO5Wa9o5KruDwUu2DcYI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.76.0/22
Signature Algorithm: sha256WithRSAEncryption
95:25:25:8b:ad:42:56:08:be:e3:b5:4f:17:74:61:20:cf:86:
0f:24:93:1c:af:37:05:82:4c:38:0e:f0:63:91:9d:51:9a:31:
68:98:2f:5a:b9:39:aa:8f:90:8b:d4:8a:cd:59:63:51:18:26:
cf:46:58:30:9d:03:5c:ff:d7:f7:f7:4a:85:fd:4c:23:ce:b2:
81:b4:df:ba:f9:0c:75:96:3c:34:48:82:f7:2f:44:0b:ab:cd:
6c:31:ad:69:04:e8:25:73:84:97:c3:23:16:51:23:fa:60:48:
09:ac:d1:fe:ac:e4:5c:85:6a:1b:74:8d:91:32:7d:c9:49:91:
b3:dd:9f:fe:64:05:ed:27:32:cd:6d:8c:58:c5:ac:8e:ba:cd:
58:6e:b0:97:b2:d0:5c:07:44:85:09:1d:3c:b0:1c:12:0f:72:
af:66:4a:91:96:1e:84:f0:df:2a:3c:a7:76:b1:45:0f:88:1d:
14:f7:92:a0:08:02:8b:61:7d:5e:77:5d:f2:e3:83:2a:ab:07:
e5:4d:5c:de:90:86:3e:94:e6:e4:d9:b2:56:b0:9b:e1:2f:01:
b3:33:7b:46:06:cb:a2:2e:88:3b:55:3c:89:5c:a1:fa:bd:09:
71:11:94:aa:fb:91:45:9c:f2:24:38:98:81:5f:d1:aa:68:92:
2a:1e:c0:34
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFCQzQ0NTZCQjRBODNC
OTU5QUY2OEU0QUFFRTBGMDUyRUQ4MzcxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2HgSTWnwDIl4J5A8TKJDoWT0bOlr1h6P3uwtZo0r/HiE/HHvd
gipZef56oWCFvc4zZ4vh684uskOMQDM4cFxv7085MEqmcrI+Jt5KbugZI43j45A2
1JjkZTl0UiyjlSZm8cc1c37n8zj8ljU3YTg1Wrx0dlb589pwk4Qs2K1Cd53tFSp0
95iYqVxXcp7YJZCtzGv0EqG6f8fIpNtguLcS9KYGJtX0CH4dSoqAgvvrVkFvSxdD
iJjFCv1a557wEY/G5fcbs17U46CRRIannFnzsWo5l7a7Cp/MGpcpyQswojTUotWn
JlisWmFLs+GkdIosPTyYv4yiOCLosZjGvpgZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUq8RFa7SoO5Wa9o5KruDwUu2DcYIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3E4UkZhN1NvTzVXYTlvNUty
dUR3VXUyRGNZSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n0wwDQYJKoZIhvcNAQELBQADggEBAJUlJYutQlYIvuO1Txd0YSDPhg8kkxyvNwWC
TDgO8GORnVGaMWiYL1q5OaqPkIvUis1ZY1EYJs9GWDCdA1z/1/f3SoX9TCPOsoG0
37r5DHWWPDRIgvcvRAurzWwxrWkE6CVzhJfDIxZRI/pgSAms0f6s5FyFaht0jZEy
fclJkbPdn/5kBe0nMs1tjFjFrI66zVhusJey0FwHRIUJHTywHBIPcq9mSpGWHoTw
3yo8p3axRQ+IHRT3kqAIAothfV53XfLjgyqrB+VNXN6Qhj6U5uTZslawm+EvAbMz
e0YGy6IuiDtVPIlcofq9CXERlKr7kUWc8iQ4mIFf0apokioewDQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org