Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OPI76kaaQOJI0WCZGerB0sblOoU.roa
File: OPI76kaaQOJI0WCZGerB0sblOoU.roa (raw, json)
Hash identifier: RdtMHKS5r51hETMLWrpix6k/7H3RwQQhrV1pUoIVH1w=
Subject key identifier: 38:F2:3B:EA:46:9A:40:E2:48:D1:60:99:19:EA:C1:D2:C6:E5:3A:85
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10A5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OPI76kaaQOJI0WCZGerB0sblOoU.roa
Signing time: Sun 07 Feb 2021 12:46:47 +0000
ROA not before: Sun 07 Feb 2021 12:46:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4261 (0x10a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=38F23BEA469A40E248D1609919EAC1D2C6E53A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:88:3c:62:86:ca:ba:a6:ef:f1:73:5c:3e:
c3:f2:28:ca:97:f0:bd:fd:c1:d7:1e:97:56:91:d6:
e1:e2:28:7d:10:98:91:8a:10:10:6f:7d:2b:3a:83:
eb:10:67:66:a1:ea:9c:06:83:22:be:f2:d4:54:d5:
ae:af:26:5d:7c:36:a3:d1:34:bd:a4:42:f1:eb:f0:
e7:62:89:4f:75:24:21:4c:12:90:b3:63:bc:09:f9:
56:c7:f8:2a:73:a6:40:d0:0e:db:75:5a:e5:e7:90:
18:36:a2:bc:f4:53:01:f1:01:cb:69:b2:a0:3d:07:
77:e3:81:7c:af:d6:91:d2:d9:bf:f2:5c:23:45:ae:
ad:bf:ce:64:10:41:6d:57:da:0a:ec:0f:a5:01:d1:
2d:51:03:3a:4f:a0:74:01:f7:33:b9:45:2a:fe:aa:
75:da:43:37:5a:ab:25:e0:35:f4:9e:7d:93:21:c6:
0a:48:00:b2:d6:9e:19:3f:d1:83:44:26:1c:18:bd:
5f:b2:37:aa:ab:bf:6b:c0:b7:3d:33:81:39:a9:cb:
a9:ec:85:60:27:bf:da:76:83:9c:39:d1:13:86:b8:
2f:01:99:9b:8e:77:c2:08:51:d5:ce:d8:e6:f4:66:
f0:9e:43:8e:82:52:b4:37:20:c1:5f:73:8e:6e:de:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F2:3B:EA:46:9A:40:E2:48:D1:60:99:19:EA:C1:D2:C6:E5:3A:85
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OPI76kaaQOJI0WCZGerB0sblOoU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
65:09:54:4e:84:e5:a7:86:78:ae:f1:6e:5e:45:2c:a0:fe:1d:
ef:27:8e:30:1e:40:dc:58:51:ff:00:84:af:9d:37:67:b7:7d:
0b:e1:cc:38:3f:ff:7c:72:3f:3b:fd:0e:50:49:de:d1:3b:b5:
ce:57:ff:8c:3d:94:1b:f3:ca:05:c3:05:50:d6:17:cc:b9:9f:
5d:39:1e:18:a7:a8:31:94:bf:90:70:51:a4:76:62:3b:ce:f9:
0a:f1:29:3f:ab:19:db:7b:45:cb:ba:55:1f:2f:e0:82:10:82:
b6:b6:9c:64:09:46:0d:9e:f7:e1:a0:3e:e9:cc:dc:79:a0:a0:
dc:0a:14:a4:73:f4:46:a7:a1:98:0a:e1:04:be:ef:68:57:be:
4b:b6:57:47:86:63:2e:e5:f1:77:18:e9:b3:72:c2:ed:36:9f:
7f:42:20:ef:19:4d:9d:a0:97:79:93:a2:aa:23:9a:ec:67:6c:
ba:b7:79:3f:f2:de:2c:e2:41:af:62:99:7f:61:93:87:0a:52:
eb:93:93:07:fe:49:ef:2b:9a:27:cc:43:c4:10:e5:ec:ec:82:
b2:5d:e3:75:ff:7a:79:bf:82:e4:91:85:83:aa:f4:48:61:4b:
da:01:20:96:cd:5e:b2:de:15:3f:ef:ac:45:0f:12:d2:29:fe:
7e:84:f3:88
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ2NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM4RjIzQkVBNDY5QTQw
RTI0OEQxNjA5OTE5RUFDMUQyQzZFNTNBODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIJIg8YobKuqbv8XNcPsPyKMqX8L39wdcel1aR1uHiKH0QmJGK
EBBvfSs6g+sQZ2ah6pwGgyK+8tRU1a6vJl18NqPRNL2kQvHr8OdiiU91JCFMEpCz
Y7wJ+VbH+CpzpkDQDtt1WuXnkBg2orz0UwHxActpsqA9B3fjgXyv1pHS2b/yXCNF
rq2/zmQQQW1X2grsD6UB0S1RAzpPoHQB9zO5RSr+qnXaQzdaqyXgNfSefZMhxgpI
ALLWnhk/0YNEJhwYvV+yN6qrv2vAtz0zgTmpy6nshWAnv9p2g5w50ROGuC8BmZuO
d8IIUdXO2Ob0ZvCeQ46CUrQ3IMFfc45u3m25AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOPI76kaaQOJI0WCZGerB0sblOoUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09QSTc2a2FhUU9KSTBXQ1pH
ZXJCMHNibE9vVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2uIwDQYJKoZIhvcNAQELBQADggEBAGUJVE6E5aeGeK7xbl5FLKD+He8njjAeQNxY
Uf8AhK+dN2e3fQvhzDg//3xyPzv9DlBJ3tE7tc5X/4w9lBvzygXDBVDWF8y5n105
HhinqDGUv5BwUaR2YjvO+QrxKT+rGdt7Rcu6VR8v4IIQgra2nGQJRg2e9+GgPunM
3HmgoNwKFKRz9EanoZgK4QS+72hXvku2V0eGYy7l8XcY6bNywu02n39CIO8ZTZ2g
l3mToqojmuxnbLq3eT/y3iziQa9imX9hk4cKUuuTkwf+Se8rmifMQ8QQ5ezsgrJd
43X/enm/guSRhYOq9EhhS9oBIJbNXrLeFT/vrEUPEtIp/n6E84g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org