Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wzwHNs3xKYGw8wF5kFGxgDlRaUM.roa
File: wzwHNs3xKYGw8wF5kFGxgDlRaUM.roa (raw, json)
Hash identifier: AZzP7o4lRbCfyDgcVzeog1F8TbemNe2C7IumEImyMCc=
Subject key identifier: C3:3C:07:36:CD:F1:29:81:B0:F3:01:79:90:51:B1:80:39:51:69:43
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E0F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wzwHNs3xKYGw8wF5kFGxgDlRaUM.roa
Signing time: Fri 01 Sep 2023 10:15:37 +0000
ROA not before: Fri 01 Sep 2023 10:15:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 122.254.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7695 (0x1e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C33C0736CDF12981B0F301799051B18039516943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:b5:ad:93:6d:80:a7:ce:d9:d0:e4:f0:9d:
8b:de:da:93:9d:5d:78:db:8b:3c:96:9c:9f:6c:b3:
9c:49:06:2c:d1:9b:c7:3b:69:a2:fd:5d:3d:71:df:
33:b0:e8:14:f3:08:36:0b:54:5b:25:d5:c2:d0:32:
c5:c3:93:51:8c:6d:f2:6a:9c:27:e1:b3:16:f1:70:
a2:be:09:0b:1a:5b:6e:06:f2:07:23:b5:1c:58:e6:
10:a5:8a:97:d9:13:90:c8:6a:f2:f0:0e:12:a3:3f:
b4:d3:83:de:0f:15:d6:53:03:64:50:f2:b8:8c:0b:
f2:94:23:21:2d:84:56:9d:f2:34:41:7e:c2:27:58:
dd:d5:e4:b9:c2:fe:6f:22:b7:bf:23:e5:a1:e1:20:
2d:db:7b:1d:46:04:f8:fc:9c:5b:53:f1:84:18:aa:
2b:29:7b:83:52:c2:49:e8:d6:c9:73:d7:f0:d2:61:
aa:a7:06:6d:31:4a:1e:ab:c7:62:1c:1d:6e:07:c4:
7c:ee:f1:6f:a6:e3:71:37:9f:ff:c4:ae:d3:c8:51:
d2:55:ef:20:5d:70:98:f0:37:09:6f:ce:f5:85:84:
34:ed:fe:e9:95:24:76:83:59:45:e2:bb:1e:85:5a:
52:e9:0b:b7:8b:cf:7b:b0:dc:04:ac:a9:e6:61:e9:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3C:07:36:CD:F1:29:81:B0:F3:01:79:90:51:B1:80:39:51:69:43
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wzwHNs3xKYGw8wF5kFGxgDlRaUM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
40:64:b3:64:98:03:95:15:0d:f5:ce:49:dc:85:bd:4c:1a:43:
6d:51:43:86:e8:1e:4c:86:a1:33:44:51:0c:5c:75:37:56:69:
32:cb:69:5e:21:cb:dc:39:14:06:b9:bd:76:ef:f4:20:09:88:
43:85:03:cd:3a:a9:ae:87:11:ab:87:80:3b:51:30:36:b3:8d:
76:09:a9:90:1e:36:8d:e5:04:f8:93:3c:d5:99:79:a1:e9:f4:
b2:53:0a:13:24:da:3c:df:58:30:62:b8:a8:c5:d8:05:be:69:
4f:b3:2a:ca:95:59:5c:9f:f5:da:18:be:a5:98:f7:e0:39:45:
36:df:d9:ff:03:b2:c0:3f:20:4a:af:3f:55:65:dd:e7:a8:2c:
47:40:f7:88:fe:7a:30:9b:72:e7:ae:96:df:6a:11:01:08:7b:
72:95:33:ba:ef:14:e1:c5:9c:8e:92:89:21:a1:77:39:80:00:
af:0b:3d:5c:c6:2a:a4:16:f1:12:b5:62:17:8b:51:eb:6e:a5:
b3:12:4f:5c:cb:fb:4d:0c:a8:79:c4:32:3f:79:e4:2e:69:2a:
06:a2:89:ad:f9:29:a3:d6:65:6c:53:0a:79:43:e7:6d:ca:e4:
0c:d1:10:26:91:9c:75:d2:2d:6f:27:39:dd:46:b5:c0:e5:ec:
0e:3d:f2:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMzM0MwNzM2Q0RGMTI5
ODFCMEYzMDE3OTkwNTFCMTgwMzk1MTY5NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwX7Wtk22Ap87Z0OTwnYve2pOdXXjbizyWnJ9ss5xJBizRm8c7
aaL9XT1x3zOw6BTzCDYLVFsl1cLQMsXDk1GMbfJqnCfhsxbxcKK+CQsaW24G8gcj
tRxY5hClipfZE5DIavLwDhKjP7TTg94PFdZTA2RQ8riMC/KUIyEthFad8jRBfsIn
WN3V5LnC/m8it78j5aHhIC3bex1GBPj8nFtT8YQYqispe4NSwkno1slz1/DSYaqn
Bm0xSh6rx2IcHW4HxHzu8W+m43E3n//ErtPIUdJV7yBdcJjwNwlvzvWFhDTt/umV
JHaDWUXiux6FWlLpC7eLz3uw3ASsqeZh6VjzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwzwHNs3xKYGw8wF5kFGxgDlRaUMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3d6d0hOczN4S1lHdzh3RjVr
Rkd4Z0RsUmFVTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
/jAwDQYJKoZIhvcNAQELBQADggEBAEBks2SYA5UVDfXOSdyFvUwaQ21RQ4boHkyG
oTNEUQxcdTdWaTLLaV4hy9w5FAa5vXbv9CAJiEOFA806qa6HEauHgDtRMDazjXYJ
qZAeNo3lBPiTPNWZeaHp9LJTChMk2jzfWDBiuKjF2AW+aU+zKsqVWVyf9doYvqWY
9+A5RTbf2f8DssA/IEqvP1Vl3eeoLEdA94j+ejCbcueult9qEQEIe3KVM7rvFOHF
nI6SiSGhdzmAAK8LPVzGKqQW8RK1YheLUetupbMST1zL+00MqHnEMj955C5pKgai
ia35KaPWZWxTCnlD523K5AzRECaRnHXSLW8nOd1GtcDl7A498uk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:05 2025 by rpki-client