Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xYAfrh6CzKxh9KecAddvl2gswv8.roa
File: xYAfrh6CzKxh9KecAddvl2gswv8.roa (raw, json)
Hash identifier: 1usPLKSavplycq406b7mMDaONmZ/uA9STkE7CtG0cZw=
Subject key identifier: C5:80:1F:AE:1E:82:CC:AC:61:F4:A7:9C:01:D7:6F:97:68:2C:C2:FF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AEC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xYAfrh6CzKxh9KecAddvl2gswv8.roa
Signing time: Tue 29 Sep 2020 10:07:47 +0000
ROA not before: Tue 29 Sep 2020 10:07:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C5801FAE1E82CCAC61F4A79C01D76F97682CC2FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:b6:51:f4:dc:f7:af:a2:e9:5f:d6:37:2e:
32:a1:00:59:fe:0f:ec:59:19:a5:40:73:5b:2e:20:
a8:fd:2c:95:b9:29:8a:88:e3:8a:be:de:43:db:af:
80:b2:27:55:04:ea:22:cd:69:e7:ad:07:92:cd:0e:
8e:0e:1f:5e:38:9a:3c:e5:00:8b:23:d0:21:71:8d:
e9:5d:fe:fe:fe:61:63:a9:71:3b:8a:69:08:ba:32:
6e:2b:c5:61:da:cd:82:8f:e2:17:62:76:f0:f1:c8:
3e:d1:0b:ec:d5:3e:92:64:34:b9:6a:8e:77:af:37:
c0:a1:8d:dd:c8:1c:3e:27:0a:07:2a:51:09:c5:ff:
43:95:9f:91:82:54:6d:6f:99:d3:49:da:7b:5d:cf:
16:d7:f8:5e:42:22:73:b2:67:43:b7:f4:b7:7f:4e:
01:ff:e7:d3:de:dd:ce:a2:6c:26:3d:4f:e6:9c:d0:
b5:2f:de:a0:78:a6:22:7d:67:fb:a6:5f:e3:aa:8d:
78:bb:c9:3f:fb:88:ed:7d:04:19:38:9a:9d:c7:8b:
da:b0:47:4a:b2:01:e6:d9:0c:42:ef:ad:c5:39:d8:
b8:b3:37:3b:b5:65:f4:e0:0f:e6:08:a5:44:4c:15:
7f:b0:ab:ef:b8:52:db:b7:03:08:55:bd:be:33:7d:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:1F:AE:1E:82:CC:AC:61:F4:A7:9C:01:D7:6F:97:68:2C:C2:FF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xYAfrh6CzKxh9KecAddvl2gswv8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
72:4b:61:d7:05:08:df:06:88:b2:92:bb:34:61:c4:dc:2b:52:
63:00:e7:74:c2:1c:52:e8:6f:dd:14:ed:d9:f6:93:62:fa:fd:
24:51:f8:50:bb:b4:46:41:45:fd:2f:ef:f1:f4:96:16:86:9b:
fc:b9:c8:c2:a8:81:b0:1f:79:31:61:ef:8e:01:3e:44:0a:68:
14:dd:d9:83:dd:0a:f1:7c:e5:b7:94:ee:b2:a8:61:99:ad:7f:
4f:2e:c4:45:b1:19:0f:bd:29:88:ba:1b:84:22:ce:ae:d1:3a:
f2:c1:d7:d4:15:ed:eb:d4:e3:73:45:ff:c0:66:08:bc:7f:7a:
5f:9a:35:7e:74:35:ee:0b:60:58:4f:3c:75:d4:1e:5f:7e:f6:
2d:97:9b:cc:fa:98:1b:06:4c:e6:2b:17:97:8f:6b:1d:b7:21:
c8:66:3e:68:b1:2f:e1:77:eb:6a:82:bb:aa:6d:b0:97:14:25:
21:bb:3a:68:42:34:f5:7b:f5:7f:35:0e:b5:2a:4b:1c:29:ea:
85:f3:f8:7c:8d:1f:43:70:7d:88:d4:15:1b:08:06:6d:6a:08:
79:b2:8c:fa:5c:08:34:c0:fa:c1:33:a2:23:f2:af:d2:83:e2:
55:ab:b4:7b:fb:05:c8:b4:fc:7b:f8:18:64:fa:5e:1a:2e:ef:
6a:45:aa:86
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM1ODAxRkFFMUU4MkND
QUM2MUY0QTc5QzAxRDc2Rjk3NjgyQ0MyRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLTrZR9Nz3r6LpX9Y3LjKhAFn+D+xZGaVAc1suIKj9LJW5KYqI
44q+3kPbr4CyJ1UE6iLNaeetB5LNDo4OH144mjzlAIsj0CFxjeld/v7+YWOpcTuK
aQi6Mm4rxWHazYKP4hdidvDxyD7RC+zVPpJkNLlqjnevN8Chjd3IHD4nCgcqUQnF
/0OVn5GCVG1vmdNJ2ntdzxbX+F5CInOyZ0O39Ld/TgH/59Pe3c6ibCY9T+ac0LUv
3qB4piJ9Z/umX+OqjXi7yT/7iO19BBk4mp3Hi9qwR0qyAebZDELvrcU52LizNzu1
ZfTgD+YIpURMFX+wq++4Utu3AwhVvb4zfQxTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxYAfrh6CzKxh9KecAddvl2gswv8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hZQWZyaDZDekt4aDlLZWNB
ZGR2bDJnc3d2OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n0AwDQYJKoZIhvcNAQELBQADggEBAHJLYdcFCN8GiLKSuzRhxNwrUmMA53TCHFLo
b90U7dn2k2L6/SRR+FC7tEZBRf0v7/H0lhaGm/y5yMKogbAfeTFh744BPkQKaBTd
2YPdCvF85beU7rKoYZmtf08uxEWxGQ+9KYi6G4Qizq7ROvLB19QV7evU43NF/8Bm
CLx/el+aNX50Ne4LYFhPPHXUHl9+9i2Xm8z6mBsGTOYrF5ePax23IchmPmixL+F3
62qCu6ptsJcUJSG7OmhCNPV79X81DrUqSxwp6oXz+HyNH0NwfYjUFRsIBm1qCHmy
jPpcCDTA+sEzoiPyr9KD4lWrtHv7Bci0/Hv4GGT6Xhou72pFqoY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:40 2025 by rpki-client