Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rFfs_564cp3VnKW6RNQJ1K5AS9c.roa
File: rFfs_564cp3VnKW6RNQJ1K5AS9c.roa (raw, json)
Hash identifier: qvaV2nYo4VSbLDkBOBGIKJ9EvbTPL5QwCgJtbHR/+Ek=
Subject key identifier: AC:57:EC:FF:9E:B8:72:9D:D5:9C:A5:BA:44:D4:09:D4:AE:40:4B:D7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12CE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rFfs_564cp3VnKW6RNQJ1K5AS9c.roa
Signing time: Wed 29 Sep 2021 02:55:01 +0000
ROA not before: Wed 29 Sep 2021 02:55:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 61.58.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4814 (0x12ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AC57ECFF9EB8729DD59CA5BA44D409D4AE404BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:1a:3c:de:99:98:19:f1:b9:de:fa:23:0f:
96:af:14:15:81:b5:5d:c6:5b:41:b6:44:22:01:a5:
b4:71:3a:18:e6:6f:db:d9:5b:6f:1d:6a:2d:83:58:
c1:d0:c1:3f:89:cb:cf:2e:75:d4:11:b2:a8:fc:fe:
a2:c0:ba:00:93:19:71:c4:c2:4f:f1:c6:39:cc:5e:
2d:8e:21:83:81:14:75:c4:89:64:04:03:12:60:01:
51:04:c4:4a:5b:d7:99:e3:60:1a:1f:fa:5c:b8:f2:
8e:34:6b:fd:d0:53:86:fe:c4:80:91:ef:a4:e1:66:
5e:ed:a1:2e:67:f3:bc:27:df:60:f4:42:ba:57:69:
58:c8:89:ce:1c:d3:bd:cb:d4:8d:20:76:7c:6a:3f:
74:94:22:24:79:ce:58:ea:50:4b:d1:eb:18:bc:46:
7a:e9:2f:8a:9c:e7:ef:84:8c:e5:93:5b:1b:52:69:
c2:8a:7f:39:a5:b7:59:3f:8d:6e:30:a8:ef:13:85:
ba:f9:89:4d:fb:0c:f5:8a:df:17:ee:54:22:5e:e8:
04:f3:77:12:c0:6b:b1:a4:ad:06:2b:57:b9:77:21:
50:95:33:3f:9f:4a:39:ee:82:a8:f1:f5:db:67:2a:
7b:5a:df:aa:af:61:4a:ec:09:36:3b:9e:9c:6b:5d:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:57:EC:FF:9E:B8:72:9D:D5:9C:A5:BA:44:D4:09:D4:AE:40:4B:D7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rFfs_564cp3VnKW6RNQJ1K5AS9c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/21
Signature Algorithm: sha256WithRSAEncryption
31:96:ff:28:4a:51:fc:d5:f5:db:5e:52:a6:82:65:d9:e4:f2:
b5:43:bb:5c:a0:c7:7a:c2:48:a1:92:6c:60:e4:76:9e:30:23:
9f:8f:5a:bc:bf:b3:b9:f2:d6:70:0b:9b:6a:89:3d:b8:6b:62:
92:45:24:22:8e:d2:c2:1b:bc:7f:a2:f1:ee:f0:a9:b9:22:1d:
37:f6:91:8d:07:82:b2:ce:23:2c:53:cb:44:c7:fd:bb:56:8d:
95:11:71:70:98:31:28:e8:7a:83:8c:b4:cf:93:67:77:fe:e0:
69:35:a0:a6:71:08:95:b4:b6:28:1a:ca:82:25:c8:3f:5b:55:
fb:5e:2c:32:1d:99:56:22:a1:5a:6c:e6:58:49:b4:36:e8:44:
60:b8:83:80:74:ee:c0:7c:2a:c5:05:d3:c0:db:75:fa:7e:7f:
19:ab:42:ac:68:04:c6:eb:78:c7:54:09:ae:9d:05:40:fd:21:
d7:b1:b2:54:90:8f:96:5f:39:63:09:2a:70:20:e3:91:14:fc:
25:bd:ab:8e:73:6c:80:bb:64:76:e7:37:35:68:e6:17:8e:5b:
93:8c:eb:05:87:4e:3c:a2:52:16:f1:af:6a:67:0b:58:6e:07:
7f:10:10:18:35:02:d9:70:14:58:07:20:10:43:dc:8f:30:ec:
fd:a6:b4:e0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEFDNTdFQ0ZGOUVCODcy
OURENTlDQTVCQTQ0RDQwOUQ0QUU0MDRCRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHqBo83pmYGfG53vojD5avFBWBtV3GW0G2RCIBpbRxOhjmb9vZ
W28dai2DWMHQwT+Jy88uddQRsqj8/qLAugCTGXHEwk/xxjnMXi2OIYOBFHXEiWQE
AxJgAVEExEpb15njYBof+ly48o40a/3QU4b+xICR76ThZl7toS5n87wn32D0QrpX
aVjIic4c073L1I0gdnxqP3SUIiR5zljqUEvR6xi8RnrpL4qc5++EjOWTWxtSacKK
fzmlt1k/jW4wqO8Thbr5iU37DPWK3xfuVCJe6ATzdxLAa7GkrQYrV7l3IVCVMz+f
Sjnugqjx9dtnKnta36qvYUrsCTY7npxrXQ6nAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrFfs/564cp3VnKW6RNQJ1K5AS9cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3JGZnNfNTY0Y3AzVm5LVzZS
TlFKMUs1QVM5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
OmAwDQYJKoZIhvcNAQELBQADggEBADGW/yhKUfzV9dteUqaCZdnk8rVDu1ygx3rC
SKGSbGDkdp4wI5+PWry/s7ny1nALm2qJPbhrYpJFJCKO0sIbvH+i8e7wqbkiHTf2
kY0HgrLOIyxTy0TH/btWjZURcXCYMSjoeoOMtM+TZ3f+4Gk1oKZxCJW0tigayoIl
yD9bVfteLDIdmVYioVps5lhJtDboRGC4g4B07sB8KsUF08Dbdfp+fxmrQqxoBMbr
eMdUCa6dBUD9IdexslSQj5ZfOWMJKnAg45EU/CW9q45zbIC7ZHbnNzVo5heOW5OM
6wWHTjyiUhbxr2pnC1huB38QEBg1AtlwFFgHIBBD3I8w7P2mtOA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org