Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w76aHc-8dMos87tXr1bFYUyA3qc.roa
File: w76aHc-8dMos87tXr1bFYUyA3qc.roa (raw, json)
Hash identifier: eROspnsn8OSGOAyUx+zZqXbHFPANEfMWRk9iK7QxTrY=
Subject key identifier: C3:BE:9A:1D:CF:BC:74:CA:2C:F3:BB:57:AF:56:C5:61:4C:80:DE:A7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FAF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w76aHc-8dMos87tXr1bFYUyA3qc.roa
Signing time: Sun 07 Feb 2021 12:35:34 +0000
ROA not before: Sun 07 Feb 2021 12:35:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4015 (0xfaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C3BE9A1DCFBC74CA2CF3BB57AF56C5614C80DEA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:df:9c:3c:b1:7b:ad:ea:bf:a6:19:38:99:25:
5f:21:07:97:e9:a7:1c:f5:fd:06:11:c9:37:49:22:
f4:54:3e:80:37:1b:2a:62:25:5f:dc:c1:14:83:ec:
90:fb:be:b0:89:93:af:89:fa:21:12:55:90:e2:9a:
6a:9e:89:cd:65:f6:91:22:74:c3:ef:74:08:e7:f6:
d5:a4:e0:6d:4a:8b:31:5a:d2:a4:df:c2:45:15:cb:
cf:c1:9e:39:19:32:04:0d:68:c9:de:b2:eb:3c:83:
5d:0b:b8:d7:a7:68:0f:a7:10:3f:70:58:ca:02:92:
f8:7f:a7:00:72:4b:88:01:cc:ec:5a:8c:62:28:7a:
3d:95:6c:0d:26:0e:af:71:87:1d:52:e1:a7:0c:fe:
64:03:16:76:a6:9b:c9:0f:12:70:8e:20:39:1b:a7:
3f:44:bc:88:68:88:d5:d6:d0:71:75:93:86:48:08:
b5:85:f1:c3:8e:fc:92:dd:b7:da:50:06:3f:14:5e:
85:0b:e1:85:e2:a3:56:d2:d8:38:86:66:ac:12:78:
e2:d2:39:1c:b7:e2:34:2e:20:53:47:f3:49:b5:1c:
37:bd:4e:6f:ce:fa:bf:b2:bf:cf:98:fe:a4:6a:16:
20:76:08:fd:d8:68:b5:9c:d1:e5:a7:82:a5:e5:40:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:9A:1D:CF:BC:74:CA:2C:F3:BB:57:AF:56:C5:61:4C:80:DE:A7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w76aHc-8dMos87tXr1bFYUyA3qc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.145.0/24
Signature Algorithm: sha256WithRSAEncryption
88:91:2c:d4:0a:aa:b2:13:6c:2a:3c:de:aa:aa:65:c1:06:18:
91:f7:0f:0a:d0:29:59:ea:a0:f9:8d:30:1a:08:b5:45:15:cb:
8e:63:c1:73:42:3b:dc:db:53:b2:3c:c7:7d:52:be:c5:d4:7f:
99:ee:6f:98:82:f5:1d:4e:66:80:d1:ab:9a:2b:e4:10:21:3c:
5a:94:98:22:f1:8f:59:33:58:ed:a0:3a:00:d5:27:df:5c:72:
e8:49:a3:c7:a1:cf:27:19:68:4c:b0:c9:01:bc:77:e7:a0:8d:
cb:1a:dd:04:93:56:04:df:e0:13:4b:ab:a3:24:aa:12:64:9f:
19:6a:8b:51:fa:e6:0a:05:34:f0:76:e4:61:8d:0d:80:be:7e:
67:3b:12:49:0d:84:78:13:94:15:dc:65:ca:cf:70:ac:df:ef:
c7:cc:65:e0:d6:ae:bb:47:e0:8c:ee:6e:56:b6:07:9d:0b:98:
18:1d:7c:f1:36:53:08:de:ea:a5:4c:76:f0:97:a9:e8:ce:dc:
74:cb:01:b5:8b:25:ec:c2:36:37:d0:9f:69:45:fe:f3:a1:77:
03:ea:49:db:de:c9:ac:30:80:66:c1:4c:ca:ef:5b:f0:a4:e5:
9e:e2:1c:55:99:ce:cc:ef:44:8d:62:7a:83:a9:1e:e3:5d:92:
6d:c2:c8:0d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM1MzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMzQkU5QTFEQ0ZCQzc0
Q0EyQ0YzQkI1N0FGNTZDNTYxNEM4MERFQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD035w8sXut6r+mGTiZJV8hB5fppxz1/QYRyTdJIvRUPoA3Gypi
JV/cwRSD7JD7vrCJk6+J+iESVZDimmqeic1l9pEidMPvdAjn9tWk4G1KizFa0qTf
wkUVy8/BnjkZMgQNaMnesus8g10LuNenaA+nED9wWMoCkvh/pwByS4gBzOxajGIo
ej2VbA0mDq9xhx1S4acM/mQDFnamm8kPEnCOIDkbpz9EvIhoiNXW0HF1k4ZICLWF
8cOO/JLdt9pQBj8UXoUL4YXio1bS2DiGZqwSeOLSORy34jQuIFNH80m1HDe9Tm/O
+r+yv8+Y/qRqFiB2CP3YaLWc0eWngqXlQITFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUw76aHc+8dMos87tXr1bFYUyA3qcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3c3NmFIYy04ZE1vczg3dFhy
MWJGWVV5QTNxYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
npEwDQYJKoZIhvcNAQELBQADggEBAIiRLNQKqrITbCo83qqqZcEGGJH3DwrQKVnq
oPmNMBoItUUVy45jwXNCO9zbU7I8x31SvsXUf5nub5iC9R1OZoDRq5or5BAhPFqU
mCLxj1kzWO2gOgDVJ99ccuhJo8ehzycZaEywyQG8d+egjcsa3QSTVgTf4BNLq6Mk
qhJknxlqi1H65goFNPB25GGNDYC+fmc7EkkNhHgTlBXcZcrPcKzf78fMZeDWrrtH
4Izubla2B50LmBgdfPE2Uwje6qVMdvCXqejO3HTLAbWLJezCNjfQn2lF/vOhdwPq
SdveyawwgGbBTMrvW/Ck5Z7iHFWZzszvRI1ieoOpHuNdkm3CyA0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org