Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO4iQMVYVIXI7t-uHiKSDT_yPys.roa
File: qO4iQMVYVIXI7t-uHiKSDT_yPys.roa (raw, json)
Hash identifier: VfAk+HIdFIZF/5dE9cePX2SznDAXoOOc9SNGb0X1+tw=
Subject key identifier: A8:EE:22:40:C5:58:54:85:C8:EE:DF:AE:1E:22:92:0D:3F:F2:3F:2B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0EE3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO4iQMVYVIXI7t-uHiKSDT_yPys.roa
Signing time: Sun 07 Feb 2021 12:30:42 +0000
ROA not before: Sun 07 Feb 2021 12:30:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.244.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3811 (0xee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:30:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A8EE2240C5585485C8EEDFAE1E22920D3FF23F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:56:ba:6e:d4:75:e3:af:f8:85:0a:ed:d0:
8a:f2:af:a4:88:10:ca:7f:1d:f7:23:ec:b6:58:3e:
75:90:61:cb:77:fc:af:47:c7:8c:3d:66:97:48:52:
9b:c1:a6:9f:7f:38:da:a9:62:8f:6e:99:73:45:7b:
2a:a3:d3:51:00:af:90:90:96:0a:16:21:6c:1c:d1:
ff:a6:05:43:70:1b:bd:e0:3c:d6:f3:20:26:13:60:
8b:cc:16:38:fa:cf:34:a0:98:f5:52:76:7a:b0:02:
35:8e:97:f4:39:12:4f:d7:2e:8e:b6:ea:79:75:a5:
67:42:3a:57:2f:bb:be:69:fb:70:0b:71:94:c8:a8:
3b:37:ee:6c:d2:0b:d3:7e:8d:98:c5:73:ec:d5:96:
62:93:c8:26:dd:26:38:fb:0d:f8:b9:b2:01:0d:f8:
38:3c:cb:36:7e:12:da:5a:51:9e:3b:58:c9:1e:79:
5f:82:ce:e1:31:17:38:75:17:0b:ae:23:b6:9b:57:
e8:7d:5b:07:ba:8b:08:e4:8e:d2:f3:e6:10:67:c8:
fa:ff:2f:1e:67:9b:5b:c2:ab:bb:0a:07:1d:2d:86:
92:6a:20:07:c1:e7:5f:0e:9e:35:dd:0c:01:b2:e5:
e3:01:b7:6d:18:3d:0b:98:4a:49:14:7e:1d:8e:21:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EE:22:40:C5:58:54:85:C8:EE:DF:AE:1E:22:92:0D:3F:F2:3F:2B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO4iQMVYVIXI7t-uHiKSDT_yPys.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.244.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:72:2e:c1:6c:d4:cb:e6:72:e3:ff:89:f6:71:3b:88:dc:ec:
83:96:ec:3e:93:43:09:4d:93:7a:63:74:50:01:48:88:20:23:
da:05:53:83:c4:ba:47:01:11:af:dc:44:3a:c5:ed:3e:20:0d:
4e:e5:05:8a:4b:2f:63:a9:e0:ea:35:38:7d:67:c0:18:56:b1:
df:8b:bf:e0:af:ae:03:ca:7f:6b:c3:a8:2d:ba:96:c4:63:75:
ef:04:9f:9f:65:2e:ac:7a:39:7d:0f:57:7f:8f:eb:38:2a:b9:
c7:e1:e2:bf:45:07:c2:c4:6c:78:a8:78:94:3a:9b:09:17:80:
1a:f2:87:75:1f:78:77:7e:6c:7d:c7:9a:3b:bb:25:6b:f9:fb:
21:9b:30:82:92:8e:34:ac:13:29:76:ff:d4:3c:e3:36:32:c8:
b4:90:7f:54:d5:68:89:91:c0:86:4f:f1:48:de:3e:2b:1c:7c:
28:f0:1b:1b:f6:f2:56:b7:24:6e:16:47:fd:34:96:09:f7:ea:
9c:e6:45:08:c0:ad:85:b6:d4:8c:26:3e:de:e8:70:09:f2:e3:
54:16:c9:8c:05:0e:af:0b:26:81:ec:ea:39:5d:e2:ad:da:aa:
8a:13:60:37:22:24:f9:32:14:a2:61:d3:1a:dc:26:3f:ed:ee:
a1:62:90:2a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMwNDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE4RUUyMjQwQzU1ODU0
ODVDOEVFREZBRTFFMjI5MjBEM0ZGMjNGMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQGla6btR146/4hQrt0Iryr6SIEMp/Hfcj7LZYPnWQYct3/K9H
x4w9ZpdIUpvBpp9/ONqpYo9umXNFeyqj01EAr5CQlgoWIWwc0f+mBUNwG73gPNbz
ICYTYIvMFjj6zzSgmPVSdnqwAjWOl/Q5Ek/XLo626nl1pWdCOlcvu75p+3ALcZTI
qDs37mzSC9N+jZjFc+zVlmKTyCbdJjj7Dfi5sgEN+Dg8yzZ+EtpaUZ47WMkeeV+C
zuExFzh1FwuuI7abV+h9Wwe6iwjkjtLz5hBnyPr/Lx5nm1vCq7sKBx0thpJqIAfB
518OnjXdDAGy5eMBt20YPQuYSkkUfh2OIRLlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqO4iQMVYVIXI7t+uHiKSDT/yPyswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3FPNGlRTVZZVklYSTd0LXVI
aUtTRFRfeVB5cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF3
TfQwDQYJKoZIhvcNAQELBQADggEBAGtyLsFs1MvmcuP/ifZxO4jc7IOW7D6TQwlN
k3pjdFABSIggI9oFU4PEukcBEa/cRDrF7T4gDU7lBYpLL2Op4Oo1OH1nwBhWsd+L
v+CvrgPKf2vDqC26lsRjde8En59lLqx6OX0PV3+P6zgqucfh4r9FB8LEbHioeJQ6
mwkXgBryh3UfeHd+bH3Hmju7JWv5+yGbMIKSjjSsEyl2/9Q84zYyyLSQf1TVaImR
wIZP8UjePiscfCjwGxv28la3JG4WR/00lgn36pzmRQjArYW21IwmPt7ocAny41QW
yYwFDq8LJoHs6jld4q3aqooTYDciJPkyFKJh0xrcJj/t7qFikCo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org