Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qcpv1uK-KaM2U3ZHgi0Dk1LY7xU.roa
File: qcpv1uK-KaM2U3ZHgi0Dk1LY7xU.roa (raw, json)
Hash identifier: gG2Y/zXdIHVVuu1/HX9Hs+VQ/0EHZcqnSoLvKESDxUk=
Subject key identifier: A9:CA:6F:D6:E2:BE:29:A3:36:53:76:47:82:2D:03:93:52:D8:EF:15
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ECF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qcpv1uK-KaM2U3ZHgi0Dk1LY7xU.roa
Signing time: Sun 07 Feb 2021 11:56:09 +0000
ROA not before: Sun 07 Feb 2021 11:56:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3791 (0xecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 11:56:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A9CA6FD6E2BE29A336537647822D039352D8EF15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:5a:f1:1b:9a:38:cc:00:73:86:f7:9b:76:
60:de:88:84:1e:4f:b1:2f:2e:6d:a9:95:d8:bc:51:
9e:5d:9b:68:d2:c3:76:23:0f:8b:94:d3:b0:2e:44:
21:ec:c6:9c:50:7c:2e:66:e9:fd:a0:42:a8:1b:73:
34:04:56:62:5a:27:b9:a0:0a:ee:07:70:12:87:58:
a3:83:1a:a7:14:48:c2:13:d6:d0:d0:9f:8c:32:bb:
d7:6f:b5:b3:f0:3a:60:de:22:77:06:bb:40:76:19:
c3:22:aa:8c:8c:ef:e1:7b:0c:0d:f1:a9:4d:f9:c5:
e7:3e:ae:02:21:ab:77:30:f7:c9:c4:0d:20:9d:25:
ca:93:0d:dd:05:a2:ee:98:28:19:32:a2:62:c4:f0:
c6:c5:ae:57:3f:ce:b1:37:94:8e:83:30:6a:84:15:
35:d6:ba:85:bd:fc:28:5b:e4:a0:6c:df:94:16:bb:
cc:9e:06:e5:2e:a3:bb:7f:d3:01:78:38:d6:1a:b6:
7a:c7:3a:5a:4a:9a:5d:0a:d1:6f:d5:81:1b:cd:45:
dd:4b:08:b0:d0:d3:6e:37:ea:1b:ea:03:eb:07:01:
bc:e8:21:2c:aa:24:e4:d1:f6:90:77:9e:6d:2a:56:
b8:75:75:ad:8e:2c:a2:7b:5b:f8:30:67:46:21:93:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:6F:D6:E2:BE:29:A3:36:53:76:47:82:2D:03:93:52:D8:EF:15
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qcpv1uK-KaM2U3ZHgi0Dk1LY7xU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.160.0/19
Signature Algorithm: sha256WithRSAEncryption
76:83:37:75:78:05:19:d2:01:2f:5f:5c:05:d9:3b:5e:3b:e9:
e6:28:ca:2b:49:27:98:31:64:43:1f:9f:77:39:41:ff:67:71:
65:a1:ce:28:1e:0a:0b:dc:29:b6:11:68:63:af:84:93:5a:de:
ea:e8:fc:bc:da:f9:69:63:2d:d1:9b:aa:06:ec:6f:47:76:8c:
66:70:77:4f:d5:f2:ba:ae:54:62:7e:2d:0f:85:db:6a:6c:6f:
4a:97:7e:9a:a0:ea:36:15:c3:df:91:34:79:89:f2:b3:7c:68:
63:6a:c3:b8:38:a8:d0:3d:ab:31:92:e3:75:d1:79:00:81:0a:
46:fb:18:9a:21:67:10:78:fa:59:98:c9:ca:c5:c2:ad:2f:9a:
03:de:6d:36:03:6e:75:f2:c8:91:48:79:73:16:54:d7:29:0a:
94:ba:15:3c:0c:20:15:2d:06:a5:f3:3a:a1:fc:49:e9:a5:6e:
6d:24:09:cb:d3:96:bd:1d:a6:a4:81:1a:65:f2:3a:67:1d:5d:
13:b2:44:db:fc:a1:02:64:21:bf:69:65:c0:e8:34:26:3c:df:
5d:42:ca:54:09:a2:fc:5c:49:5a:6b:c4:49:13:57:51:0c:74:
8c:82:be:b8:56:fb:8a:9f:fd:b7:33:b7:ab:a7:e1:74:eb:a3:
0f:82:99:c7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MTU2MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE5Q0E2RkQ2RTJCRTI5
QTMzNjUzNzY0NzgyMkQwMzkzNTJEOEVGMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDliVrxG5o4zABzhvebdmDeiIQeT7EvLm2pldi8UZ5dm2jSw3Yj
D4uU07AuRCHsxpxQfC5m6f2gQqgbczQEVmJaJ7mgCu4HcBKHWKODGqcUSMIT1tDQ
n4wyu9dvtbPwOmDeIncGu0B2GcMiqoyM7+F7DA3xqU35xec+rgIhq3cw98nEDSCd
JcqTDd0Fou6YKBkyomLE8MbFrlc/zrE3lI6DMGqEFTXWuoW9/Chb5KBs35QWu8ye
BuUuo7t/0wF4ONYatnrHOlpKml0K0W/VgRvNRd1LCLDQ02436hvqA+sHAbzoISyq
JOTR9pB3nm0qVrh1da2OLKJ7W/gwZ0Yhk11hAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqcpv1uK+KaM2U3ZHgi0Dk1LY7xUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3FjcHYxdUstS2FNMlUzWkhn
aTBEazFMWTd4VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV3
TaAwDQYJKoZIhvcNAQELBQADggEBAHaDN3V4BRnSAS9fXAXZO1476eYoyitJJ5gx
ZEMfn3c5Qf9ncWWhzigeCgvcKbYRaGOvhJNa3uro/Lza+WljLdGbqgbsb0d2jGZw
d0/V8rquVGJ+LQ+F22psb0qXfpqg6jYVw9+RNHmJ8rN8aGNqw7g4qNA9qzGS43XR
eQCBCkb7GJohZxB4+lmYycrFwq0vmgPebTYDbnXyyJFIeXMWVNcpCpS6FTwMIBUt
BqXzOqH8Semlbm0kCcvTlr0dpqSBGmXyOmcdXROyRNv8oQJkIb9pZcDoNCY8311C
ylQJovxcSVprxEkTV1EMdIyCvrhW+4qf/bczt6un4XTrow+Cmcc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org