Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uxR7ihp5-pUDte0XhmJqrWmQfo0.roa
File: uxR7ihp5-pUDte0XhmJqrWmQfo0.roa (raw, json)
Hash identifier: ykxod3whrIq3BFz9Y4SKcrlZIZd8CnOPDQ9CkIWjgJ4=
Subject key identifier: BB:14:7B:8A:1A:79:FA:95:03:B5:ED:17:86:62:6A:AD:69:90:7E:8D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12C5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uxR7ihp5-pUDte0XhmJqrWmQfo0.roa
Signing time: Wed 29 Sep 2021 02:54:58 +0000
ROA not before: Wed 29 Sep 2021 02:54:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4805 (0x12c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BB147B8A1A79FA9503B5ED1786626AAD69907E8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:b5:eb:8f:f5:f6:08:a5:9f:3c:e2:24:69:
01:e4:42:ad:a5:2d:f2:19:a2:02:81:d5:79:19:cc:
87:32:05:c9:73:4b:ba:37:92:bd:fa:a0:af:7f:43:
12:af:5f:4b:1d:14:1b:20:d7:b6:bd:f5:85:e7:c8:
98:5d:39:3e:47:00:40:69:30:5e:d7:88:70:29:03:
d8:c1:a1:8a:9f:3a:df:c7:2a:62:ae:a5:0b:17:d4:
6a:cb:35:7e:95:d9:e0:51:1d:64:38:91:6f:b0:9a:
bd:b6:49:6d:5d:4e:2a:7a:a3:93:bb:76:33:19:d2:
f8:e2:c2:3a:cc:cb:16:01:25:b5:b0:19:e4:40:a9:
b7:a7:47:1b:0e:6b:41:1c:54:c1:da:db:16:64:ba:
13:4d:73:31:1d:7a:36:60:eb:69:ed:e2:95:dc:67:
2b:d7:a3:6c:6d:15:43:41:ce:1f:8d:81:f0:37:8e:
02:fb:c8:93:10:9c:06:37:d0:e4:72:7d:d9:f4:bd:
0a:41:a7:f7:64:30:aa:ee:0c:d0:c8:4b:1a:04:86:
cc:15:07:b1:76:b1:f2:21:c5:2f:9e:3b:6d:cd:4c:
06:ff:21:40:a3:0a:ea:0c:67:79:89:4f:ee:7d:e5:
e0:10:20:9f:6a:18:9d:3a:9b:04:82:a3:ae:9d:37:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:7B:8A:1A:79:FA:95:03:B5:ED:17:86:62:6A:AD:69:90:7E:8D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uxR7ihp5-pUDte0XhmJqrWmQfo0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.80.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:91:b5:d4:d6:c2:53:9d:96:8a:53:86:08:68:f6:ea:a6:18:
05:d7:fa:6a:26:cb:7a:a5:15:a4:8c:6f:d7:7b:5b:c9:36:a7:
ce:a1:49:b8:11:bf:6b:24:f7:89:86:fe:2f:06:ca:3f:81:58:
ee:00:8c:c4:de:87:48:65:0d:72:4f:a0:63:64:ec:28:e5:ed:
64:9a:39:c3:66:a3:1a:de:89:34:af:4d:65:db:71:86:b3:81:
d4:7d:6b:52:2f:4a:13:ef:33:af:09:46:83:84:cd:86:4b:f9:
39:50:74:5b:02:02:a1:cb:e2:aa:91:e2:20:60:06:32:f8:cd:
87:1f:cc:3f:c3:5c:b5:29:61:85:6d:e9:15:07:b0:ff:da:a3:
0a:22:33:66:a5:c4:70:d7:97:2a:ae:49:be:18:af:c7:ff:af:
6c:ca:c1:ea:12:8e:70:10:e6:0b:fe:f2:7c:d0:53:30:f7:d5:
ca:0f:65:5a:d2:35:50:f8:35:67:cd:c4:96:51:15:f6:53:63:
0c:55:d9:1f:0f:18:5b:c1:a2:85:6d:d3:ca:ab:84:8b:3b:71:
c4:fc:ed:97:40:ca:df:36:1e:fe:fe:72:c5:04:02:23:42:aa:
50:28:0b:0d:75:0e:c0:fc:40:61:3e:54:f0:bd:bc:6f:59:7b:
39:12:ad:9e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJCMTQ3QjhBMUE3OUZB
OTUwM0I1RUQxNzg2NjI2QUFENjk5MDdFOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz1LXrj/X2CKWfPOIkaQHkQq2lLfIZogKB1XkZzIcyBclzS7o3
kr36oK9/QxKvX0sdFBsg17a99YXnyJhdOT5HAEBpMF7XiHApA9jBoYqfOt/HKmKu
pQsX1GrLNX6V2eBRHWQ4kW+wmr22SW1dTip6o5O7djMZ0vjiwjrMyxYBJbWwGeRA
qbenRxsOa0EcVMHa2xZkuhNNczEdejZg62nt4pXcZyvXo2xtFUNBzh+NgfA3jgL7
yJMQnAY30ORyfdn0vQpBp/dkMKruDNDISxoEhswVB7F2sfIhxS+eO23NTAb/IUCj
CuoMZ3mJT+595eAQIJ9qGJ06mwSCo66dN7H7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuxR7ihp5+pUDte0XhmJqrWmQfo0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3V4UjdpaHA1LXBVRHRlMFho
bUpxcldtUWZvMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n1AwDQYJKoZIhvcNAQELBQADggEBAB2RtdTWwlOdlopThgho9uqmGAXX+momy3ql
FaSMb9d7W8k2p86hSbgRv2sk94mG/i8Gyj+BWO4AjMTeh0hlDXJPoGNk7Cjl7WSa
OcNmoxreiTSvTWXbcYazgdR9a1IvShPvM68JRoOEzYZL+TlQdFsCAqHL4qqR4iBg
BjL4zYcfzD/DXLUpYYVt6RUHsP/aowoiM2alxHDXlyquSb4Yr8f/r2zKweoSjnAQ
5gv+8nzQUzD31coPZVrSNVD4NWfNxJZRFfZTYwxV2R8PGFvBooVt08qrhIs7ccT8
7ZdAyt82Hv7+csUEAiNCqlAoCw11DsD8QGE+VPC9vG9ZezkSrZ4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org