Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EkAp4QUtNu_YnxbltUuSsp1oLLQ.roa
File: EkAp4QUtNu_YnxbltUuSsp1oLLQ.roa (raw, json)
Hash identifier: JgOe2tIyQlqorNgKA7lDuVoEPLbCEuvKXrAy4y9gn48=
Subject key identifier: 12:40:29:E1:05:2D:36:EF:D8:9F:16:E5:B5:4B:92:B2:9D:68:2C:B4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 132A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EkAp4QUtNu_YnxbltUuSsp1oLLQ.roa
Signing time: Wed 29 Sep 2021 02:55:26 +0000
ROA not before: Wed 29 Sep 2021 02:55:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4906 (0x132a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=124029E1052D36EFD89F16E5B54B92B29D682CB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:67:96:e7:ac:7f:8f:80:2c:17:e2:62:de:
71:9a:75:d4:2f:56:57:b1:8c:16:14:1f:cb:01:0c:
70:3b:1c:81:98:5d:1e:7b:3a:01:46:e7:23:bf:94:
46:8d:4f:da:50:9a:6d:df:3c:11:34:4b:d2:47:84:
fd:91:5e:12:10:89:7b:f0:ee:7f:13:59:a2:d5:9b:
60:bb:1f:64:49:b3:87:3d:d3:7f:7a:74:da:04:a8:
a5:af:d1:f2:a6:94:96:a4:a8:21:9a:6a:2c:69:40:
53:7c:a4:93:79:63:3e:79:d5:7f:6f:c9:09:70:de:
d5:4f:0a:d4:ec:c2:d9:a7:16:95:6b:56:7f:19:ec:
fc:47:8a:9e:22:82:8a:43:8b:0e:ef:f5:c7:e9:f8:
19:55:27:03:5c:94:45:73:e8:93:c1:c8:66:d0:d3:
c0:1a:67:85:37:1c:52:a4:66:2c:e5:36:8b:a5:5b:
8e:91:46:2c:0a:de:4c:47:17:3d:8b:d9:0e:53:48:
68:61:5c:ab:47:9d:a7:6c:32:79:9f:5b:d4:fd:2e:
c6:77:eb:71:3a:7a:28:d4:d6:69:8b:df:e2:5f:cf:
ca:8e:b6:ba:5e:64:1f:de:a0:24:82:7f:1d:b6:f4:
ce:ff:06:c5:1e:b5:63:d8:ce:af:d5:fe:34:b1:1b:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:40:29:E1:05:2D:36:EF:D8:9F:16:E5:B5:4B:92:B2:9D:68:2C:B4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EkAp4QUtNu_YnxbltUuSsp1oLLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:42:b5:9e:bf:c7:ba:1d:49:1d:63:65:f9:81:5c:a8:d3:63:
c1:47:ab:f9:7d:63:81:69:25:8d:c1:6a:df:1d:94:e2:c2:fc:
af:b7:13:dd:74:c1:e7:d5:d8:fd:7b:f1:27:17:de:8d:7a:29:
72:b3:f5:79:77:8c:b0:16:60:c7:2f:36:8a:e9:f5:55:f5:ef:
8e:2b:be:45:b2:d8:45:5f:4d:76:b0:0b:8d:2a:f5:e4:43:87:
fd:8c:3f:45:a8:e4:ce:26:ca:f8:c6:f4:c2:46:07:76:d0:1e:
57:4c:c6:60:97:66:58:43:c7:78:3c:0b:92:26:29:b6:cb:2f:
81:4e:73:e3:28:72:64:20:5a:a8:ff:32:44:f7:51:c4:b3:1c:
6a:d5:05:0f:a6:4d:38:f3:71:c9:99:e2:ee:42:36:6a:ee:61:
9b:9d:29:31:6e:24:27:7b:a5:f0:00:2c:5d:c7:90:45:81:5a:
f2:f5:0a:db:cc:0b:60:03:29:81:2c:47:37:c8:ee:28:ff:6b:
87:4a:3e:4b:ea:c4:a0:ad:1d:c0:e0:f3:22:5f:c6:87:3f:24:
91:b2:21:d6:24:4c:5c:e0:c9:5f:87:3a:f8:bd:18:c2:bc:7f:
ac:18:3c:cf:ac:23:30:b1:d2:dc:e2:ec:1b:9d:b4:3a:6d:41:
16:28:8c:73
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MjZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDEyNDAyOUUxMDUyRDM2
RUZEODlGMTZFNUI1NEI5MkIyOUQ2ODJDQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNoWeW56x/j4AsF+Ji3nGaddQvVlexjBYUH8sBDHA7HIGYXR57
OgFG5yO/lEaNT9pQmm3fPBE0S9JHhP2RXhIQiXvw7n8TWaLVm2C7H2RJs4c90396
dNoEqKWv0fKmlJakqCGaaixpQFN8pJN5Yz551X9vyQlw3tVPCtTswtmnFpVrVn8Z
7PxHip4igopDiw7v9cfp+BlVJwNclEVz6JPByGbQ08AaZ4U3HFKkZizlNoulW46R
RiwK3kxHFz2L2Q5TSGhhXKtHnadsMnmfW9T9LsZ363E6eijU1mmL3+Jfz8qOtrpe
ZB/eoCSCfx229M7/BsUetWPYzq/V/jSxG+s3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEkAp4QUtNu/YnxbltUuSsp1oLLQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VrQXA0UVV0TnVfWW54Ymx0
VXVTc3Axb0xMUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa0
2oAwDQYJKoZIhvcNAQELBQADggEBAAxCtZ6/x7odSR1jZfmBXKjTY8FHq/l9Y4Fp
JY3Bat8dlOLC/K+3E910wefV2P178ScX3o16KXKz9Xl3jLAWYMcvNorp9VX1744r
vkWy2EVfTXawC40q9eRDh/2MP0Wo5M4myvjG9MJGB3bQHldMxmCXZlhDx3g8C5Im
KbbLL4FOc+MocmQgWqj/MkT3UcSzHGrVBQ+mTTjzccmZ4u5CNmruYZudKTFuJCd7
pfAALF3HkEWBWvL1CtvMC2ADKYEsRzfI7ij/a4dKPkvqxKCtHcDg8yJfxoc/JJGy
IdYkTFzgyV+HOvi9GMK8f6wYPM+sIzCx0tzi7BudtDptQRYojHM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org