Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tPkWOB7RCLlhmteMtayz2vY6Orw.roa
File: tPkWOB7RCLlhmteMtayz2vY6Orw.roa (raw, json)
Hash identifier: K9baYBdaQPuhvXk/e9BvXS0/DY3xzQ83f2dHDOjF2g4=
Subject key identifier: B4:F9:16:38:1E:D1:08:B9:61:9A:D7:8C:B5:AC:B3:DA:F6:3A:3A:BC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12AF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tPkWOB7RCLlhmteMtayz2vY6Orw.roa
Signing time: Wed 29 Sep 2021 02:54:51 +0000
ROA not before: Wed 29 Sep 2021 02:54:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4783 (0x12af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B4F916381ED108B9619AD78CB5ACB3DAF63A3ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:de:c6:7e:c3:a0:05:2d:c8:d1:2d:df:a3:
97:71:bf:ef:97:92:c3:2b:7a:42:b0:fd:7a:b0:a0:
aa:f4:87:51:05:c0:75:e3:74:38:47:1a:fb:dd:43:
bf:04:7b:58:fd:bf:47:b2:89:9d:6e:31:4d:1b:b4:
83:b4:01:8c:42:72:0c:38:21:6c:80:3e:14:43:58:
f7:43:09:19:66:ae:82:fa:3e:fc:54:51:65:0f:67:
1f:52:8c:69:e0:2a:64:aa:8f:2b:d7:84:f6:a1:48:
c4:72:9d:07:1f:ae:07:f2:89:66:2e:8d:3b:30:b3:
96:8e:8c:f1:ad:06:85:79:1f:87:49:64:b6:70:06:
c6:a5:1a:29:26:e5:aa:0c:e9:49:ad:f5:60:7f:a3:
f2:e3:ad:c0:e7:54:19:79:e1:be:ba:aa:ae:aa:63:
8d:79:16:81:c4:0c:bc:f5:aa:fe:76:29:64:07:35:
bf:e9:47:96:d4:5f:c5:ed:3d:e2:65:32:d3:eb:e2:
0a:b2:33:2c:a5:e8:33:9d:fb:1f:5f:fd:f8:3d:d8:
2a:d3:02:44:67:66:9a:26:34:e5:4a:bd:29:eb:cf:
53:0d:a0:db:82:25:c0:f9:01:b2:ba:47:dd:44:e9:
9e:74:cb:59:59:66:a9:89:2c:e2:d7:68:02:37:b2:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:16:38:1E:D1:08:B9:61:9A:D7:8C:B5:AC:B3:DA:F6:3A:3A:BC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tPkWOB7RCLlhmteMtayz2vY6Orw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.112.0/21
Signature Algorithm: sha256WithRSAEncryption
11:79:0d:d6:4b:94:27:e0:c2:f3:2c:f4:d1:06:37:d5:c3:1d:
fd:67:4a:29:80:02:a6:b7:03:6a:8b:2e:38:46:33:89:3a:8f:
e0:f5:a5:cd:1e:d9:db:3e:c0:d7:ce:aa:a5:28:33:f9:ce:6a:
67:b1:05:62:47:b0:2c:f7:38:bb:85:e3:74:68:0b:72:ef:a3:
ff:52:7b:46:1f:dd:fa:82:05:69:ec:4b:3a:23:91:ed:b7:ff:
62:1b:21:f0:cf:e6:f6:21:cf:ab:ed:b0:30:85:46:17:cd:0b:
48:f3:99:1c:84:d5:cc:85:68:83:d9:01:69:63:1e:a9:ff:4e:
b4:b5:de:42:89:03:5f:86:ca:14:0d:62:fd:91:29:1e:3a:89:
05:04:3d:08:f6:45:4c:17:a5:55:09:04:9d:49:94:9b:09:df:
73:a9:05:74:6f:02:fa:bf:84:b4:fe:f2:6f:3b:a2:25:d6:4e:
26:c6:a5:07:79:d7:90:31:3f:8d:f6:e4:a7:58:49:cb:af:be:
8e:00:bb:95:16:43:28:45:66:96:bc:de:24:24:22:bf:f9:82:
b9:93:14:e3:ed:15:a5:1b:e3:98:ad:30:12:31:3e:41:fb:c6:
22:ec:0c:81:bd:67:ec:ac:f8:cd:ba:33:86:d6:be:58:97:f4:
36:21:54:b2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI0RjkxNjM4MUVEMTA4
Qjk2MTlBRDc4Q0I1QUNCM0RBRjYzQTNBQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDk6N7GfsOgBS3I0S3fo5dxv++XksMrekKw/XqwoKr0h1EFwHXj
dDhHGvvdQ78Ee1j9v0eyiZ1uMU0btIO0AYxCcgw4IWyAPhRDWPdDCRlmroL6PvxU
UWUPZx9SjGngKmSqjyvXhPahSMRynQcfrgfyiWYujTsws5aOjPGtBoV5H4dJZLZw
BsalGikm5aoM6Umt9WB/o/LjrcDnVBl54b66qq6qY415FoHEDLz1qv52KWQHNb/p
R5bUX8XtPeJlMtPr4gqyMyyl6DOd+x9f/fg92CrTAkRnZpomNOVKvSnrz1MNoNuC
JcD5AbK6R91E6Z50y1lZZqmJLOLXaAI3stqhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtPkWOB7RCLlhmteMtayz2vY6OrwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3RQa1dPQjdSQ0xsaG10ZU10
YXl6MnZZNk9ydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n3AwDQYJKoZIhvcNAQELBQADggEBABF5DdZLlCfgwvMs9NEGN9XDHf1nSimAAqa3
A2qLLjhGM4k6j+D1pc0e2ds+wNfOqqUoM/nOamexBWJHsCz3OLuF43RoC3Lvo/9S
e0Yf3fqCBWnsSzojke23/2IbIfDP5vYhz6vtsDCFRhfNC0jzmRyE1cyFaIPZAWlj
Hqn/TrS13kKJA1+GyhQNYv2RKR46iQUEPQj2RUwXpVUJBJ1JlJsJ33OpBXRvAvq/
hLT+8m87oiXWTibGpQd515AxP4325KdYScuvvo4Au5UWQyhFZpa83iQkIr/5grmT
FOPtFaUb45itMBIxPkH7xiLsDIG9Z+ys+M26M4bWvliX9DYhVLI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org