Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TjblVS0N8iFAM3Iew7qDUI_N3jM.roa
File: TjblVS0N8iFAM3Iew7qDUI_N3jM.roa (raw, json)
Hash identifier: cAUplk8pCRTzOxZ3+Dvw37mzcn8UTcGWmo9pakw+wfU=
Subject key identifier: 4E:36:E5:55:2D:0D:F2:21:40:33:72:1E:C3:BA:83:50:8F:CD:DE:33
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12F1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TjblVS0N8iFAM3Iew7qDUI_N3jM.roa
Signing time: Wed 29 Sep 2021 02:55:10 +0000
ROA not before: Wed 29 Sep 2021 02:55:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4849 (0x12f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4E36E5552D0DF2214033721EC3BA83508FCDDE33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:5c:ac:bc:99:c7:e3:53:78:74:a5:7d:44:
75:d4:d2:eb:86:d8:2c:7a:55:f4:d3:e5:49:bd:a6:
13:7f:15:67:50:8d:5e:e9:1a:f1:13:7e:cd:08:a8:
3f:e3:fa:67:4d:36:33:34:41:e0:c3:09:bc:40:bf:
7a:97:3a:f8:8a:b8:b4:ca:d2:bf:94:92:2f:c4:50:
eb:5a:18:65:e2:a2:44:61:a9:f6:44:b3:8f:f2:32:
c7:d2:03:c9:3b:df:45:7e:9b:17:bc:e1:87:0d:93:
50:0c:63:a4:5c:66:69:e9:3f:0b:38:66:91:49:c3:
75:e0:00:5c:67:2a:d9:ae:c6:ed:8d:c5:68:b8:b1:
9c:14:20:e8:85:bb:1a:21:69:2f:61:c4:7a:ad:b9:
26:7f:2a:90:ea:89:a0:ac:85:14:81:81:63:de:80:
57:58:1b:89:1b:03:70:b4:a3:f3:7f:e0:c0:8d:49:
92:b1:0d:68:82:f5:50:c6:2d:4e:04:52:d0:0e:27:
33:21:99:ae:cd:23:d7:13:d5:4e:63:3a:6c:74:c8:
96:47:e1:61:e4:66:7b:96:c9:83:7f:c2:db:ca:ba:
8a:ee:e2:37:d1:ce:05:5f:8c:e8:ad:18:e6:9b:f5:
79:08:02:f0:ae:3f:75:03:08:6e:21:2a:39:74:2d:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:E5:55:2D:0D:F2:21:40:33:72:1E:C3:BA:83:50:8F:CD:DE:33
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TjblVS0N8iFAM3Iew7qDUI_N3jM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.164.0/22
Signature Algorithm: sha256WithRSAEncryption
91:7e:5b:1b:b9:73:7a:f8:00:61:b0:d6:27:ec:b9:d5:c1:62:
f5:77:d2:20:a9:33:83:b6:16:9e:f3:4b:05:b5:a6:01:c3:c6:
62:3b:c6:f4:fc:f5:bb:49:97:ee:e3:d4:0a:ca:3c:c0:6f:a2:
14:32:47:10:3c:5a:7a:3c:f6:33:1c:ee:2a:e8:4f:3b:1c:1f:
2e:93:f8:29:d9:7c:2a:87:6a:fc:e8:e3:29:32:dd:5a:e4:f3:
dc:8b:32:3a:e5:12:5d:86:52:12:26:af:39:4b:ad:d6:27:96:
48:07:af:8d:2b:89:a7:db:bb:87:9e:50:7a:fb:06:6b:21:4c:
63:48:91:73:2c:97:21:5a:0f:17:7f:53:8c:da:ec:eb:3f:4a:
f0:12:06:32:0c:19:30:d5:5e:19:68:22:81:ae:42:be:bf:f7:
07:a2:49:ad:01:35:70:60:98:f1:4d:d0:e5:41:e5:87:39:ad:
a7:b2:19:a3:d5:03:d3:90:82:76:67:6b:36:92:67:67:63:bb:
9e:8d:a6:38:54:6f:4b:8a:4b:4e:90:cd:e4:00:c8:41:75:3b:
66:34:19:7e:43:02:97:7b:58:54:33:b5:eb:b4:f3:a3:cf:8d:
c3:7d:ba:d1:ae:8a:f4:33:ef:3f:b1:52:22:fc:94:49:9c:2f:
8e:f1:86:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDRFMzZFNTU1MkQwREYy
MjE0MDMzNzIxRUMzQkE4MzUwOEZDRERFMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8NFysvJnH41N4dKV9RHXU0uuG2Cx6VfTT5Um9phN/FWdQjV7p
GvETfs0IqD/j+mdNNjM0QeDDCbxAv3qXOviKuLTK0r+Uki/EUOtaGGXiokRhqfZE
s4/yMsfSA8k730V+mxe84YcNk1AMY6RcZmnpPws4ZpFJw3XgAFxnKtmuxu2NxWi4
sZwUIOiFuxohaS9hxHqtuSZ/KpDqiaCshRSBgWPegFdYG4kbA3C0o/N/4MCNSZKx
DWiC9VDGLU4EUtAOJzMhma7NI9cT1U5jOmx0yJZH4WHkZnuWyYN/wtvKuoru4jfR
zgVfjOitGOab9XkIAvCuP3UDCG4hKjl0LcpbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTjblVS0N8iFAM3Iew7qDUI/N3jMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1RqYmxWUzBOOGlGQU0zSWV3
N3FEVUlfTjNqTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2qQwDQYJKoZIhvcNAQELBQADggEBAJF+Wxu5c3r4AGGw1ifsudXBYvV30iCpM4O2
Fp7zSwW1pgHDxmI7xvT89btJl+7j1ArKPMBvohQyRxA8Wno89jMc7iroTzscHy6T
+CnZfCqHavzo4yky3Vrk89yLMjrlEl2GUhImrzlLrdYnlkgHr40riafbu4eeUHr7
BmshTGNIkXMslyFaDxd/U4za7Os/SvASBjIMGTDVXhloIoGuQr6/9weiSa0BNXBg
mPFN0OVB5Yc5raeyGaPVA9OQgnZnazaSZ2dju56NpjhUb0uKS06QzeQAyEF1O2Y0
GX5DApd7WFQzteu086PPjcN9utGuivQz7z+xUiL8lEmcL47xhuM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org