Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t7Dkn3kfZwuAt1BYqahnoYpnVjw.roa
File: t7Dkn3kfZwuAt1BYqahnoYpnVjw.roa (raw, json)
Hash identifier: F7ngFLq7To/XUCWXLYusepuHSahr7iJSlCabJDzqHJI=
Subject key identifier: B7:B0:E4:9F:79:1F:67:0B:80:B7:50:58:A9:A8:67:A1:8A:67:56:3C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B29
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t7Dkn3kfZwuAt1BYqahnoYpnVjw.roa
Signing time: Tue 29 Sep 2020 10:08:05 +0000
ROA not before: Tue 29 Sep 2020 10:08:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2857 (0xb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B7B0E49F791F670B80B75058A9A867A18A67563C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:c4:d5:06:aa:31:42:f1:bc:b4:ea:dd:7f:
b8:64:81:8e:f0:15:0e:7d:e4:57:cc:e3:a1:bd:fe:
07:c2:6a:ad:bb:70:df:90:bf:e9:1a:c6:af:f5:5f:
b8:ff:94:6b:2b:43:cd:7e:93:d6:c4:a0:13:e5:53:
56:97:6d:50:53:ea:59:1c:37:e3:2a:14:09:77:d9:
1d:7c:a3:f9:1e:ed:1b:a0:c1:ee:11:a8:eb:8d:87:
20:b5:a7:00:86:47:47:50:40:72:38:88:f1:da:3a:
28:de:8d:3d:99:32:44:01:6d:9f:36:45:94:ca:f2:
49:e4:e8:31:5b:b8:10:d4:2f:77:50:7c:2d:c5:2d:
2a:b8:61:88:f2:a5:10:14:12:f7:d7:9b:91:9f:25:
ac:b9:c2:3f:e7:1a:d4:93:36:6a:f0:ff:49:e5:bb:
19:3c:85:af:b9:6b:b8:03:1b:45:b2:36:1a:07:05:
de:9d:23:4d:b2:40:99:6f:59:47:91:3e:0a:23:18:
93:86:b2:c6:7c:00:de:a5:09:67:f7:95:be:0e:ff:
40:0b:2b:26:b6:f2:0d:44:88:83:1a:68:0c:2e:42:
c2:8f:dd:e1:02:47:8c:ac:86:46:a2:a3:fa:59:8c:
19:c4:c6:84:99:b4:67:10:4a:fe:17:5c:8f:cf:0a:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:E4:9F:79:1F:67:0B:80:B7:50:58:A9:A8:67:A1:8A:67:56:3C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t7Dkn3kfZwuAt1BYqahnoYpnVjw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.200.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:cc:36:ab:9f:28:5d:c2:9f:24:66:9c:45:bc:5f:af:d7:3e:
24:8d:33:d7:1c:48:b5:70:ca:ab:4e:22:63:d8:69:2d:f1:55:
7c:ec:3b:0c:8e:0b:c3:b6:51:35:24:1d:6f:54:f0:41:9a:62:
f7:c9:0b:49:a4:d8:f6:ca:6d:fd:b5:b4:e7:9b:a4:4b:8a:96:
b8:ca:aa:e6:10:83:6a:1c:54:30:5c:60:e3:44:5f:21:00:c6:
03:a1:5c:54:ea:46:b5:5a:00:08:3d:e6:d2:23:11:fe:28:aa:
54:8e:ea:28:c9:0c:15:44:bd:c8:0e:2c:af:d9:9e:76:50:38:
84:7e:8a:81:cc:9c:e7:06:a2:f8:69:70:31:70:a2:3b:21:02:
81:81:f0:27:c9:0d:26:7a:85:fa:74:e3:d6:61:2f:f4:ad:d9:
8d:3e:a2:c9:55:e4:0a:74:16:b4:9e:2d:c0:ed:e2:a8:49:96:
ff:ae:d9:f0:1c:56:4f:b2:b3:1d:7e:65:b9:7a:e9:55:88:86:
1b:01:6b:db:eb:4d:aa:d1:92:ff:d4:17:4d:85:d4:9f:d8:e0:
1f:cb:4d:ef:63:c4:41:0f:79:31:06:0c:88:86:82:6a:47:5b:
d9:c1:6f:a0:8a:00:e4:b9:5e:c4:75:25:2b:a1:b8:8c:a6:fd:
7c:4d:66:37
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI3QjBFNDlGNzkxRjY3
MEI4MEI3NTA1OEE5QTg2N0ExOEE2NzU2M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVncTVBqoxQvG8tOrdf7hkgY7wFQ595FfM46G9/gfCaq27cN+Q
v+kaxq/1X7j/lGsrQ81+k9bEoBPlU1aXbVBT6lkcN+MqFAl32R18o/ke7Rugwe4R
qOuNhyC1pwCGR0dQQHI4iPHaOijejT2ZMkQBbZ82RZTK8knk6DFbuBDUL3dQfC3F
LSq4YYjypRAUEvfXm5GfJay5wj/nGtSTNmrw/0nluxk8ha+5a7gDG0WyNhoHBd6d
I02yQJlvWUeRPgojGJOGssZ8AN6lCWf3lb4O/0ALKya28g1EiIMaaAwuQsKP3eEC
R4yshkaio/pZjBnExoSZtGcQSv4XXI/PCiKVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUt7Dkn3kfZwuAt1BYqahnoYpnVjwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3Q3RGtuM2tmWnd1QXQxQllx
YWhub1lwblZqdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANz
pcgwDQYJKoZIhvcNAQELBQADggEBAEvMNqufKF3CnyRmnEW8X6/XPiSNM9ccSLVw
yqtOImPYaS3xVXzsOwyOC8O2UTUkHW9U8EGaYvfJC0mk2PbKbf21tOebpEuKlrjK
quYQg2ocVDBcYONEXyEAxgOhXFTqRrVaAAg95tIjEf4oqlSO6ijJDBVEvcgOLK/Z
nnZQOIR+ioHMnOcGovhpcDFwojshAoGB8CfJDSZ6hfp049ZhL/St2Y0+oslV5Ap0
FrSeLcDt4qhJlv+u2fAcVk+ysx1+Zbl66VWIhhsBa9vrTarRkv/UF02F1J/Y4B/L
Te9jxEEPeTEGDIiGgmpHW9nBb6CKAOS5XsR1JSuhuIym/XxNZjc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org