Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wYfmOMs9BJ_AvGG-vuQ3vZ8-mz4.roa
File: wYfmOMs9BJ_AvGG-vuQ3vZ8-mz4.roa (raw, json)
Hash identifier: 5RmAFSfI3qAGHcVlGauQ0kH5Rb0ha6fws55VxOnWe8U=
Subject key identifier: C1:87:E6:38:CB:3D:04:9F:C0:BC:61:BE:BE:E4:37:BD:9F:3E:9B:3E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AF9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wYfmOMs9BJ_AvGG-vuQ3vZ8-mz4.roa
Signing time: Tue 29 Sep 2020 10:07:51 +0000
ROA not before: Tue 29 Sep 2020 10:07:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.60.214.64/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2809 (0xaf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C187E638CB3D049FC0BC61BEBEE437BD9F3E9B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:6a:07:63:5b:f3:32:bd:c5:3e:8e:ca:5e:
f6:c2:9c:a6:3a:d2:4c:61:ee:49:f0:75:41:31:80:
7d:bd:bc:72:57:3d:fc:51:9c:31:b2:3a:f2:f9:64:
97:6b:5c:02:63:fc:a8:80:0b:c9:00:bc:19:a9:32:
b5:2a:b3:b1:78:55:c0:2d:75:82:29:4d:b2:a0:76:
c2:e3:78:96:26:ed:d8:5c:74:29:77:29:26:a0:b1:
b1:d9:77:b9:b8:89:cd:65:b0:99:92:44:48:34:27:
8a:d3:d9:56:fc:ff:47:61:d5:8c:e4:5b:84:43:ea:
f2:ea:ae:b6:96:de:2a:4b:39:06:13:48:c4:87:30:
2c:bc:7c:d2:ee:97:a6:f0:b7:59:19:20:4a:ca:25:
e6:58:6c:1f:00:ce:16:4d:a8:6c:ce:f8:af:ea:57:
2b:7d:50:c9:62:e9:22:7d:7c:89:a8:f9:6f:dc:33:
36:2b:e1:46:b2:da:25:d1:ae:b6:f5:ec:29:25:0a:
c7:19:54:b7:0c:6d:1e:ae:3e:0f:c1:b4:3d:0a:51:
5b:60:0c:97:93:d0:f6:07:12:30:bd:36:b6:be:d6:
90:8c:a9:26:4f:2a:4a:72:61:13:e4:e5:d1:30:ef:
73:e4:2b:bf:98:69:12:bb:2e:6d:d4:35:86:3f:27:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:E6:38:CB:3D:04:9F:C0:BC:61:BE:BE:E4:37:BD:9F:3E:9B:3E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wYfmOMs9BJ_AvGG-vuQ3vZ8-mz4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.64/27
Signature Algorithm: sha256WithRSAEncryption
2a:19:bc:10:c0:88:be:35:ab:d8:1e:df:42:76:76:52:83:19:
cc:ba:13:4e:e8:34:d0:98:8c:7a:49:da:60:a1:d0:5d:e8:04:
21:68:5c:f1:b3:be:1e:74:cd:c7:87:41:cf:10:11:51:a1:1f:
fa:c9:ba:9d:20:54:ae:8f:9a:71:09:87:67:5c:62:5c:70:2d:
9d:8b:a8:8f:bc:ac:95:26:3d:cd:65:c4:50:a3:bc:df:30:1d:
5f:a4:05:ac:76:ef:25:bf:1a:28:44:b9:e8:b9:12:57:98:eb:
2e:4e:c2:f5:ea:47:b3:8a:58:5f:bc:67:83:33:7f:fc:be:fe:
e1:45:e2:46:f3:61:15:aa:50:a2:b8:05:43:ae:dc:19:12:97:
39:03:ed:ef:ad:f6:09:f7:f1:00:47:2d:90:83:21:10:c5:9d:
c1:32:47:a9:44:24:12:f0:ec:20:d0:d1:38:9d:7f:30:4f:a0:
2e:92:27:15:26:3c:73:01:e2:70:e3:18:79:60:c2:89:66:a8:
79:c2:ce:9b:bb:e2:6e:df:0c:11:bb:fd:82:bd:e9:ee:d4:7d:
97:83:d6:2c:fc:cb:53:df:83:3c:05:8b:83:fd:a9:49:4e:4c:
07:9b:01:44:56:7b:c9:0f:12:e1:88:97:5b:8a:c9:30:15:b6:
67:e2:19:03
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMxODdFNjM4Q0IzRDA0
OUZDMEJDNjFCRUJFRTQzN0JEOUYzRTlCM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeGmoHY1vzMr3FPo7KXvbCnKY60kxh7knwdUExgH29vHJXPfxR
nDGyOvL5ZJdrXAJj/KiAC8kAvBmpMrUqs7F4VcAtdYIpTbKgdsLjeJYm7dhcdCl3
KSagsbHZd7m4ic1lsJmSREg0J4rT2Vb8/0dh1YzkW4RD6vLqrraW3ipLOQYTSMSH
MCy8fNLul6bwt1kZIErKJeZYbB8AzhZNqGzO+K/qVyt9UMli6SJ9fImo+W/cMzYr
4Uay2iXRrrb17CklCscZVLcMbR6uPg/BtD0KUVtgDJeT0PYHEjC9Nra+1pCMqSZP
KkpyYRPk5dEw73PkK7+YaRK7Lm3UNYY/J8ZvAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUwYfmOMs9BJ/AvGG+vuQ3vZ8+mz4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3dZZm1PTXM5QkpfQXZHRy12
dVEzdlo4LW16NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQU9
PNZAMA0GCSqGSIb3DQEBCwUAA4IBAQAqGbwQwIi+NavYHt9CdnZSgxnMuhNO6DTQ
mIx6SdpgodBd6AQhaFzxs74edM3Hh0HPEBFRoR/6ybqdIFSuj5pxCYdnXGJccC2d
i6iPvKyVJj3NZcRQo7zfMB1fpAWsdu8lvxooRLnouRJXmOsuTsL16kezilhfvGeD
M3/8vv7hReJG82EVqlCiuAVDrtwZEpc5A+3vrfYJ9/EARy2QgyEQxZ3BMkepRCQS
8Owg0NE4nX8wT6AukicVJjxzAeJw4xh5YMKJZqh5ws6bu+Ju3wwRu/2Cvenu1H2X
g9Ys/MtT34M8BYuD/alJTkwHmwFEVnvJDxLhiJdbiskwFbZn4hkD
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org