Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TSYYOw0FgImQ7mU8Pb3eul2if04.roa
File: TSYYOw0FgImQ7mU8Pb3eul2if04.roa (raw, json)
Hash identifier: loLcPL3IV+JdDKdZmDQA59ZmEkw4Xjl0PjrTez5zNVc=
Subject key identifier: 4D:26:18:3B:0D:05:80:89:90:EE:65:3C:3D:BD:DE:BA:5D:A2:7F:4E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1047
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TSYYOw0FgImQ7mU8Pb3eul2if04.roa
Signing time: Sun 07 Feb 2021 12:43:57 +0000
ROA not before: Sun 07 Feb 2021 12:43:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4167 (0x1047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:43:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4D26183B0D05808990EE653C3DBDDEBA5DA27F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:f1:22:2e:42:07:bf:a1:b6:86:2d:da:68:
1f:73:36:72:a2:c0:11:9b:2c:1d:0d:9f:52:f1:a9:
9d:5a:09:b6:2c:de:bc:33:84:f3:df:7f:01:a5:68:
cb:f4:b9:84:eb:50:83:7d:4f:14:3f:39:ff:7a:a1:
15:4a:c5:51:61:fd:f6:d8:e4:ab:53:fa:85:0c:d4:
13:ad:cc:a5:da:02:a5:a1:a1:1a:23:e3:a5:3c:ec:
69:a5:06:bb:27:3e:5f:40:d1:71:63:d5:36:04:50:
52:de:04:7a:5b:d2:ea:c6:92:eb:88:fe:15:88:8b:
7f:aa:17:24:9f:05:04:2f:46:44:e9:52:bf:e2:dd:
98:e1:77:97:20:cd:37:9e:de:ea:82:b3:ac:94:19:
d8:0e:cb:66:e0:db:5d:12:d0:4c:e7:27:14:20:db:
b6:98:65:d0:85:1d:0e:5e:ae:ad:7a:17:23:4f:f4:
a4:34:0f:bd:d1:94:9a:56:ae:88:9d:5e:06:65:1d:
34:aa:4d:eb:c4:93:a7:17:c6:76:07:27:e2:61:42:
93:ca:9c:8c:7b:b9:55:96:77:09:69:a7:16:60:43:
03:7e:df:29:82:6c:93:cb:4f:24:1c:88:59:15:75:
73:11:d8:54:ee:77:ec:61:1f:f7:a7:70:12:54:64:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:26:18:3B:0D:05:80:89:90:EE:65:3C:3D:BD:DE:BA:5D:A2:7F:4E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TSYYOw0FgImQ7mU8Pb3eul2if04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.137.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ba:16:06:05:e3:93:f8:1e:ab:4d:47:7b:d1:6d:cb:01:3a:
c8:09:70:7a:e0:ce:b7:ce:c2:a0:45:43:a0:26:ed:f2:75:11:
7f:f9:6b:8d:67:54:10:f9:d6:62:35:62:81:45:1e:5d:c4:53:
d4:bb:bc:3d:bf:35:3a:c3:0c:38:a8:b1:0a:aa:fc:d5:b4:24:
61:28:4b:cd:3c:a8:be:44:f7:cd:48:96:b7:a2:25:e7:17:19:
a2:ac:b0:1d:02:b9:c3:77:a8:c5:55:0a:08:30:0c:ce:74:2c:
86:be:49:fd:40:d4:02:3c:a5:f7:e6:53:b8:2f:73:79:ed:2c:
9a:a5:90:d2:ad:0a:92:44:16:2a:60:b1:e0:11:f2:a9:ce:33:
be:17:40:17:cd:a2:be:9f:c4:05:46:60:c5:d2:a9:72:71:04:
b1:14:04:03:ff:8b:58:78:08:b5:dc:53:ce:46:4a:4d:e0:91:
60:85:cd:c8:f8:62:e9:bd:3a:10:cb:1b:eb:94:52:92:b8:d0:
cf:fe:c5:e1:7d:8f:47:89:1f:f8:2c:fe:01:cf:2d:98:45:43:
9a:23:41:20:ed:20:79:b1:6d:1d:9f:ae:63:fd:83:87:24:78:
25:5c:11:2c:67:ea:46:ec:a3:b7:1e:41:26:59:90:9d:14:6f:
3a:b1:f1:93
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQzNTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDREMjYxODNCMEQwNTgw
ODk5MEVFNjUzQzNEQkRERUJBNURBMjdGNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClEvEiLkIHv6G2hi3aaB9zNnKiwBGbLB0Nn1LxqZ1aCbYs3rwz
hPPffwGlaMv0uYTrUIN9TxQ/Of96oRVKxVFh/fbY5KtT+oUM1BOtzKXaAqWhoRoj
46U87GmlBrsnPl9A0XFj1TYEUFLeBHpb0urGkuuI/hWIi3+qFySfBQQvRkTpUr/i
3Zjhd5cgzTee3uqCs6yUGdgOy2bg210S0EznJxQg27aYZdCFHQ5erq16FyNP9KQ0
D73RlJpWroidXgZlHTSqTevEk6cXxnYHJ+JhQpPKnIx7uVWWdwlppxZgQwN+3ymC
bJPLTyQciFkVdXMR2FTud+xhH/encBJUZPfNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTSYYOw0FgImQ7mU8Pb3eul2if04wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1RTWVlPdzBGZ0ltUTdtVThQ
YjNldWwyaWYwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2okwDQYJKoZIhvcNAQELBQADggEBAHm6FgYF45P4HqtNR3vRbcsBOsgJcHrgzrfO
wqBFQ6Am7fJ1EX/5a41nVBD51mI1YoFFHl3EU9S7vD2/NTrDDDiosQqq/NW0JGEo
S808qL5E981IlreiJecXGaKssB0CucN3qMVVCggwDM50LIa+Sf1A1AI8pffmU7gv
c3ntLJqlkNKtCpJEFipgseAR8qnOM74XQBfNor6fxAVGYMXSqXJxBLEUBAP/i1h4
CLXcU85GSk3gkWCFzcj4Yum9OhDLG+uUUpK40M/+xeF9j0eJH/gs/gHPLZhFQ5oj
QSDtIHmxbR2frmP9g4ckeCVcESxn6kbso7ceQSZZkJ0Ubzqx8ZM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org