Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X-6v3a28ZaF9ZKF6w2gEAdj_2jU.roa
File: X-6v3a28ZaF9ZKF6w2gEAdj_2jU.roa (raw, json)
Hash identifier: g58KM/D9ZccODhECkMCdfEvzV3cZv0iHKe4MDAgEgqw=
Subject key identifier: 5F:EE:AF:DD:AD:BC:65:A1:7D:64:A1:7A:C3:68:04:01:D8:FF:DA:35
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B6A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X-6v3a28ZaF9ZKF6w2gEAdj_2jU.roa
Signing time: Tue 29 Sep 2020 10:08:23 +0000
ROA not before: Tue 29 Sep 2020 10:08:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5FEEAFDDADBC65A17D64A17AC3680401D8FFDA35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:06:cb:05:a6:f3:49:a1:96:3b:7a:57:d7:
f5:e1:45:5e:7c:9a:55:62:26:ed:24:3c:66:96:67:
ec:c5:b4:b6:48:b0:68:4e:83:5f:b4:82:d8:9c:ad:
a4:a8:e8:36:cf:d0:ae:7c:f9:39:9f:07:74:3d:d7:
28:27:f6:81:30:ef:23:f2:06:48:51:08:a5:a8:7a:
b0:f2:8d:15:3e:eb:99:42:3d:a7:5e:cc:d9:10:a1:
c6:df:9b:bc:03:75:53:99:8a:4b:8e:04:81:fa:26:
b6:62:07:6f:8b:a1:68:47:bd:4a:56:38:d0:22:e7:
aa:9e:ce:03:30:34:d7:c4:0c:ac:e7:c4:25:ed:4f:
d1:3a:4b:54:87:34:c8:db:fe:db:c6:e7:e8:3a:4d:
e4:27:ed:b9:ae:76:52:88:3f:8c:97:1e:0b:1b:96:
25:6f:17:3a:4d:55:cd:82:76:f3:4f:a5:3e:fa:05:
a8:f6:ef:db:08:b2:55:f8:2e:c1:06:5e:cb:0d:d9:
dd:76:a0:46:c0:4f:af:cb:3b:c7:4a:93:d2:1b:af:
b1:66:d5:36:20:38:96:ce:7d:79:da:56:f7:59:6c:
20:3e:24:44:67:97:96:7f:9e:ae:05:f8:cc:11:65:
18:3d:87:36:5b:98:46:ef:5c:f3:a9:94:a8:e3:21:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:AF:DD:AD:BC:65:A1:7D:64:A1:7A:C3:68:04:01:D8:FF:DA:35
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X-6v3a28ZaF9ZKF6w2gEAdj_2jU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:18:55:fb:21:bf:d9:22:d0:67:df:ee:97:94:3c:36:12:e6:
98:de:59:52:42:89:ef:08:95:d9:5e:01:15:46:72:d1:d0:a3:
23:31:51:57:dd:75:b8:94:dd:79:56:6e:48:42:0e:74:3c:b8:
35:bf:e8:64:cb:c5:73:c1:b2:4d:21:01:06:37:ea:d1:36:53:
db:79:fe:b0:77:0d:cd:65:69:60:24:db:e8:09:e9:66:aa:5d:
8f:a8:88:37:96:8e:26:57:ae:88:4c:a0:2c:d1:4e:6f:9b:34:
6a:0d:46:88:b3:01:d1:52:be:bc:ea:b9:76:9b:8f:8e:be:ed:
02:44:5e:9f:4e:2e:c6:ea:ce:d7:04:4d:1e:0c:b5:30:ea:93:
f0:66:6a:73:94:4a:a2:4d:c0:a2:61:cc:81:46:54:f3:9c:b2:
8d:3a:40:d0:d9:b9:77:d5:82:61:eb:8a:95:e1:6b:3f:86:97:
89:2c:fb:43:80:16:56:44:1a:91:54:d6:d7:f2:7c:6a:97:2e:
80:1e:82:e3:77:e1:1b:4c:1c:95:39:f5:6b:d2:5b:7a:5e:a9:
7a:29:cd:df:77:a2:f8:f6:51:50:b2:c0:7a:f0:da:b8:71:03:
d2:09:04:1f:79:41:a5:e4:71:c8:c4:f9:1f:df:21:54:83:75:
90:75:b5:fd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVGRUVBRkREQURCQzY1
QTE3RDY0QTE3QUMzNjgwNDAxRDhGRkRBMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/aAbLBabzSaGWO3pX1/XhRV58mlViJu0kPGaWZ+zFtLZIsGhO
g1+0gticraSo6DbP0K58+TmfB3Q91ygn9oEw7yPyBkhRCKWoerDyjRU+65lCPade
zNkQocbfm7wDdVOZikuOBIH6JrZiB2+LoWhHvUpWONAi56qezgMwNNfEDKznxCXt
T9E6S1SHNMjb/tvG5+g6TeQn7bmudlKIP4yXHgsbliVvFzpNVc2CdvNPpT76Baj2
79sIslX4LsEGXssN2d12oEbAT6/LO8dKk9Ibr7Fm1TYgOJbOfXnaVvdZbCA+JERn
l5Z/nq4F+MwRZRg9hzZbmEbvXPOplKjjIdmRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUX+6v3a28ZaF9ZKF6w2gEAdj/2jUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1gtNnYzYTI4WmFGOVpLRjZ3
MmdFQWRqXzJqVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
2vAwDQYJKoZIhvcNAQELBQADggEBAHwYVfshv9ki0Gff7peUPDYS5pjeWVJCie8I
ldleARVGctHQoyMxUVfddbiU3XlWbkhCDnQ8uDW/6GTLxXPBsk0hAQY36tE2U9t5
/rB3Dc1laWAk2+gJ6WaqXY+oiDeWjiZXrohMoCzRTm+bNGoNRoizAdFSvrzquXab
j46+7QJEXp9OLsbqztcETR4MtTDqk/BmanOUSqJNwKJhzIFGVPOcso06QNDZuXfV
gmHripXhaz+Gl4ks+0OAFlZEGpFU1tfyfGqXLoAeguN34RtMHJU59WvSW3peqXop
zd93ovj2UVCywHrw2rhxA9IJBB95QaXkccjE+R/fIVSDdZB1tf0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org