Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sFHjuZ03dlis3XNl-i6iKRlM4lk.roa
File: sFHjuZ03dlis3XNl-i6iKRlM4lk.roa (raw, json)
Hash identifier: xmQM9yQZAOl8MNmDG6gUuXbg1fcP8ePFQ13gxJ8INdE=
Subject key identifier: B0:51:E3:B9:9D:37:76:58:AC:DD:73:65:FA:2E:A2:29:19:4C:E2:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FB5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sFHjuZ03dlis3XNl-i6iKRlM4lk.roa
Signing time: Sun 07 Feb 2021 12:35:41 +0000
ROA not before: Sun 07 Feb 2021 12:35:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4021 (0xfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B051E3B99D377658ACDD7365FA2EA229194CE259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:77:be:ef:3a:b5:17:41:8c:f3:7e:f5:72:
cb:89:9d:09:4d:35:a8:04:6c:1a:eb:3c:dc:79:fa:
d8:3b:85:b1:ff:20:1e:46:ef:88:d1:a6:b6:aa:9f:
6f:f4:6a:48:18:17:52:20:f5:f2:54:5a:38:6a:54:
aa:d8:76:2d:dd:dc:38:3d:67:3a:ab:f1:e6:6d:2a:
c9:c1:34:1a:a0:30:e5:3e:c6:7d:94:6c:61:a5:14:
35:a0:0f:7b:26:d8:15:35:5e:c8:49:b0:f2:22:c5:
e6:34:1a:37:94:f5:25:1e:66:c1:fb:6a:f8:a1:e7:
d4:e6:fd:5f:53:a4:3e:de:98:6b:71:be:ea:65:fd:
7f:81:82:2b:14:c5:99:ac:23:d2:b1:b6:f1:3b:36:
b7:43:ec:f1:fc:f0:a9:64:28:aa:4c:32:13:df:b4:
57:61:9e:16:d0:be:7a:40:0b:70:5b:d1:aa:b7:ac:
b8:ee:0d:dd:f4:49:ae:1a:b1:62:03:5b:02:31:23:
16:18:7f:95:18:83:52:5d:67:7e:38:57:96:4f:fa:
39:48:5f:2c:6f:df:2c:c4:70:02:6f:09:94:d7:d1:
7a:ea:4f:b1:1c:13:7b:d4:d8:5b:6d:bb:85:b0:0a:
bb:2c:2a:81:c1:56:65:07:6e:1a:87:7d:ce:52:f3:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:E3:B9:9D:37:76:58:AC:DD:73:65:FA:2E:A2:29:19:4C:E2:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sFHjuZ03dlis3XNl-i6iKRlM4lk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.148.0/22
Signature Algorithm: sha256WithRSAEncryption
17:45:39:4a:c2:a3:54:c0:a2:bc:25:ea:3e:51:8a:1e:90:8e:
c5:22:1e:b4:69:fa:b1:f0:e8:a4:2b:22:aa:74:93:8b:8a:d1:
cd:94:fa:a7:b6:f4:08:2a:37:e9:6a:35:c2:53:0f:6f:00:8f:
0f:85:8e:79:c5:be:20:28:10:96:92:4e:13:87:36:c9:10:d3:
ad:a0:93:a3:0f:4d:01:c8:90:bd:8a:ec:a8:96:76:60:c5:2a:
28:9f:1f:15:aa:2f:67:4a:09:a7:7a:66:a4:7c:e4:48:80:8c:
39:71:2d:cd:03:f5:ee:14:f9:7e:30:77:0b:87:dd:14:e5:d8:
78:32:83:be:81:6c:8f:a9:68:8a:8d:95:f7:9b:27:45:14:fe:
ff:ca:73:e3:4a:21:93:25:6e:50:e3:60:5f:81:2c:d4:43:59:
d4:0c:7b:3b:ba:fa:79:b5:00:77:b1:52:f2:7d:28:ee:f5:0f:
35:94:80:51:61:70:df:99:ce:15:1c:e6:dd:ea:14:f3:f6:3b:
11:49:c6:3e:5b:64:b2:b0:a5:a5:ac:64:6b:cd:a7:8e:26:e4:
1a:8c:f2:04:a1:54:08:7c:74:93:74:1e:5f:7b:85:f8:fa:11:
cb:db:6b:40:9a:90:cd:f7:e4:d5:5a:94:2b:a6:92:48:b4:21:
f9:31:4a:46
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM1NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEIwNTFFM0I5OUQzNzc2
NThBQ0RENzM2NUZBMkVBMjI5MTk0Q0UyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC683e+7zq1F0GM8371csuJnQlNNagEbBrrPNx5+tg7hbH/IB5G
74jRpraqn2/0akgYF1Ig9fJUWjhqVKrYdi3d3Dg9Zzqr8eZtKsnBNBqgMOU+xn2U
bGGlFDWgD3sm2BU1XshJsPIixeY0GjeU9SUeZsH7avih59Tm/V9TpD7emGtxvupl
/X+BgisUxZmsI9KxtvE7NrdD7PH88KlkKKpMMhPftFdhnhbQvnpAC3Bb0aq3rLju
Dd30Sa4asWIDWwIxIxYYf5UYg1JdZ344V5ZP+jlIXyxv3yzEcAJvCZTX0XrqT7Ec
E3vU2Fttu4WwCrssKoHBVmUHbhqHfc5S81V1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsFHjuZ03dlis3XNl+i6iKRlM4lkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NGSGp1WjAzZGxpczNYTmwt
aTZpS1JsTTRsay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
npQwDQYJKoZIhvcNAQELBQADggEBABdFOUrCo1TAorwl6j5Rih6QjsUiHrRp+rHw
6KQrIqp0k4uK0c2U+qe29AgqN+lqNcJTD28Ajw+FjnnFviAoEJaSThOHNskQ062g
k6MPTQHIkL2K7KiWdmDFKiifHxWqL2dKCad6ZqR85EiAjDlxLc0D9e4U+X4wdwuH
3RTl2Hgyg76BbI+paIqNlfebJ0UU/v/Kc+NKIZMlblDjYF+BLNRDWdQMezu6+nm1
AHexUvJ9KO71DzWUgFFhcN+ZzhUc5t3qFPP2OxFJxj5bZLKwpaWsZGvNp44m5BqM
8gShVAh8dJN0Hl97hfj6Ecvba0CakM335NValCumkki0IfkxSkY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org