Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T1PMaduW6cjZOh24Cpk9xSFcC1g.roa
File: T1PMaduW6cjZOh24Cpk9xSFcC1g.roa (raw, json)
Hash identifier: 9CC76MwmuIsuTTO46Znmtc/t+QvONRXUkKCrYkXbVT4=
Subject key identifier: 4F:53:CC:69:DB:96:E9:C8:D9:3A:1D:B8:0A:99:3D:C5:21:5C:0B:58
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12EB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T1PMaduW6cjZOh24Cpk9xSFcC1g.roa
Signing time: Wed 29 Sep 2021 02:55:08 +0000
ROA not before: Wed 29 Sep 2021 02:55:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4843 (0x12eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4F53CC69DB96E9C8D93A1DB80A993DC5215C0B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:14:76:01:ee:bd:b0:4f:d1:dc:3d:02:ca:
bd:d9:33:bf:95:d2:d0:95:6f:fd:75:35:87:ce:22:
49:6e:11:72:56:1a:90:6a:7f:37:b2:98:bb:7c:0e:
0d:02:22:6e:52:91:68:4c:3d:b4:41:73:1d:0a:99:
02:5c:0c:65:f3:d5:f6:ff:f4:31:b9:3f:e8:cc:c4:
e6:10:f5:06:65:7e:1d:f4:ef:03:ef:f2:b1:29:32:
21:1d:d6:54:36:e8:cb:a4:fc:d3:f4:fa:e6:bb:31:
32:10:16:ed:e2:45:d0:ba:01:f7:f0:02:d3:a3:d2:
4d:3f:97:90:f7:c7:06:f8:88:fd:7a:8b:65:0f:ba:
5a:ca:5f:1b:c8:0c:59:36:06:db:46:86:9d:28:cf:
f2:61:06:18:71:43:81:17:15:88:68:25:78:b4:a8:
d1:ea:43:c8:6f:65:d0:b0:f5:58:c2:d6:23:9a:4a:
ad:ae:80:c8:7c:0b:ea:44:9c:33:cd:87:d0:f5:70:
55:fe:5b:2a:da:ab:d2:be:88:e1:b9:8f:b4:a7:31:
ea:38:b8:4a:02:80:a5:8b:da:e1:ce:be:df:e4:16:
02:8a:4d:b9:51:35:7a:b5:76:fe:0f:c5:d9:1f:4a:
65:8f:e5:d1:09:bc:51:cd:d0:72:8c:ec:39:2f:49:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:CC:69:DB:96:E9:C8:D9:3A:1D:B8:0A:99:3D:C5:21:5C:0B:58
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T1PMaduW6cjZOh24Cpk9xSFcC1g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:3d:90:cb:b3:69:47:86:62:be:7e:97:e8:04:55:88:6d:72:
df:5b:00:fd:4d:2a:cc:dc:b5:a7:04:ce:a1:70:66:0c:25:bb:
cd:f2:8a:46:12:2d:5e:ea:05:4e:e6:12:6b:89:0c:56:f9:9e:
64:7b:89:fc:50:16:4e:d6:fb:75:bf:08:0b:6f:dc:bb:cb:5f:
f6:d8:6d:da:26:bb:2a:2d:0d:66:5c:9d:d9:e2:dd:ed:b6:56:
74:d7:f8:bf:e6:ad:d3:2f:f2:cd:72:a1:ad:a2:7f:46:83:2e:
b7:f9:55:6f:bc:c8:3e:3b:5e:58:97:f6:16:68:6a:c6:a8:9e:
f7:5a:7c:51:62:38:87:cd:e8:40:ff:a5:1d:53:ba:a4:71:bd:
35:ef:b2:f3:69:d2:3a:34:7d:4b:09:28:a3:f9:9f:97:82:c9:
17:7d:be:d9:d3:78:90:af:e0:7a:57:05:b4:fa:e1:48:38:b4:
54:8d:60:00:c7:47:e1:1f:8e:43:c5:e8:ae:4b:a9:41:e3:d8:
9d:13:ae:4e:ab:69:e8:a4:c3:c6:2b:d6:22:1c:38:bb:d1:40:
8d:30:e4:9b:fc:54:bf:cd:af:55:87:22:fb:70:b0:27:7f:54:
ff:2a:ae:27:20:29:6f:61:ae:d5:ee:16:6d:90:6d:72:f7:57:
d4:e8:31:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEuswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDRGNTNDQzY5REI5NkU5
QzhEOTNBMURCODBBOTkzREM1MjE1QzBCNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi2xR2Ae69sE/R3D0Cyr3ZM7+V0tCVb/11NYfOIkluEXJWGpBq
fzeymLt8Dg0CIm5SkWhMPbRBcx0KmQJcDGXz1fb/9DG5P+jMxOYQ9QZlfh307wPv
8rEpMiEd1lQ26Muk/NP0+ua7MTIQFu3iRdC6AffwAtOj0k0/l5D3xwb4iP16i2UP
ulrKXxvIDFk2BttGhp0oz/JhBhhxQ4EXFYhoJXi0qNHqQ8hvZdCw9VjC1iOaSq2u
gMh8C+pEnDPNh9D1cFX+Wyraq9K+iOG5j7SnMeo4uEoCgKWL2uHOvt/kFgKKTblR
NXq1dv4PxdkfSmWP5dEJvFHN0HKM7DkvSSiTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUT1PMaduW6cjZOh24Cpk9xSFcC1gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1QxUE1hZHVXNmNqWk9oMjRD
cGs5eFNGY0MxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
2o4wDQYJKoZIhvcNAQELBQADggEBAF09kMuzaUeGYr5+l+gEVYhtct9bAP1NKszc
tacEzqFwZgwlu83yikYSLV7qBU7mEmuJDFb5nmR7ifxQFk7W+3W/CAtv3LvLX/bY
bdomuyotDWZcndni3e22VnTX+L/mrdMv8s1yoa2if0aDLrf5VW+8yD47XliX9hZo
asaonvdafFFiOIfN6ED/pR1TuqRxvTXvsvNp0jo0fUsJKKP5n5eCyRd9vtnTeJCv
4HpXBbT64Ug4tFSNYADHR+EfjkPF6K5LqUHj2J0Trk6raeikw8Yr1iIcOLvRQI0w
5Jv8VL/Nr1WHIvtwsCd/VP8qricgKW9hrtXuFm2QbXL3V9ToMek=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org