Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fN8oRN99kh_Iin1zwJB1otlaNe4.roa
File: fN8oRN99kh_Iin1zwJB1otlaNe4.roa (raw, json)
Hash identifier: n/lwpDTRVT5/rurgvxSN5aHPvusaUAqSJY4j5zohtEo=
Subject key identifier: 7C:DF:28:44:DF:7D:92:1F:C8:8A:7D:73:C0:90:75:A2:D9:5A:35:EE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1067
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fN8oRN99kh_Iin1zwJB1otlaNe4.roa
Signing time: Sun 07 Feb 2021 12:44:36 +0000
ROA not before: Sun 07 Feb 2021 12:44:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4199 (0x1067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7CDF2844DF7D921FC88A7D73C09075A2D95A35EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:ee:16:5c:26:9f:88:67:2a:24:93:04:09:
38:5b:ba:be:6f:6c:10:9a:ab:0e:55:6e:4e:6f:11:
e4:3c:03:18:6b:5d:49:5c:c4:a2:f3:fc:16:9c:72:
bf:13:3e:68:5c:53:b0:f1:87:c8:1b:06:15:83:42:
0d:c0:d3:c7:b3:b5:d0:9f:d5:ea:4e:04:a1:74:92:
58:4e:81:71:41:b5:66:4f:83:7b:41:6d:4f:b0:a1:
2c:0d:c4:54:67:82:48:4c:67:d2:cb:6e:70:b6:9a:
ed:7c:8c:e6:c4:43:14:77:b4:15:74:d6:97:c4:bd:
c5:9b:20:85:41:54:98:78:ee:74:65:ba:eb:50:ee:
ce:1f:42:f5:5f:5a:3c:17:c3:60:72:73:dc:07:7e:
bb:8f:e8:43:69:1e:6c:7a:5a:c5:77:1e:a4:e8:cb:
3f:e5:15:d7:c6:0c:d5:95:8e:75:88:93:50:be:2e:
a5:d8:a9:aa:eb:7f:22:64:04:38:86:f3:2e:41:88:
90:24:e5:15:9d:09:59:5b:53:54:92:8f:5e:e7:b2:
93:0b:f1:22:76:be:23:25:19:e8:bf:e8:69:54:9e:
c1:10:81:6f:ab:3d:80:82:fc:e4:d4:c8:15:40:4c:
a8:36:8b:39:86:61:c7:f8:18:7f:c2:3e:4f:35:8a:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:28:44:DF:7D:92:1F:C8:8A:7D:73:C0:90:75:A2:D9:5A:35:EE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fN8oRN99kh_Iin1zwJB1otlaNe4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/21
Signature Algorithm: sha256WithRSAEncryption
17:00:fa:32:df:a1:9a:3b:18:0b:69:3e:80:00:88:cd:31:39:
00:70:16:33:09:97:d5:cf:a3:3c:d4:e7:8d:42:c6:2c:bd:52:
d8:7d:fb:c8:b4:78:41:30:ae:79:40:2b:1b:91:37:c6:3a:00:
6e:cc:aa:b1:79:cc:51:3c:6b:20:b0:ac:da:c0:b4:91:9d:57:
62:43:54:da:11:34:46:63:76:2b:1d:b7:8a:df:5f:28:b8:44:
95:3a:c6:63:d6:dc:0e:85:42:a9:c5:2e:69:e6:1d:0b:5e:c0:
cd:e7:13:7a:91:a4:75:55:37:69:67:88:dd:d9:d9:e9:d2:0f:
f8:a7:82:e1:8c:78:9e:fe:40:2f:8a:9a:0b:b2:e4:7a:e7:88:
28:36:92:36:e8:0a:3e:98:e4:5e:54:dd:04:57:48:1d:f4:e4:
26:87:0d:81:7b:43:bb:1e:27:a5:1f:be:61:80:68:0c:d0:db:
db:b0:14:29:1b:96:55:57:ff:a5:7b:05:8e:0c:be:10:ad:26:
2b:84:e7:0e:25:85:16:de:80:33:23:7a:c9:48:35:96:3e:01:
d3:c6:94:08:72:3b:4c:d0:75:ee:ad:75:06:6f:41:92:73:16:
94:a8:11:bc:86:21:fe:c0:48:7c:04:31:49:5f:52:69:96:a8:
7f:eb:03:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ0MzZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdDREYyODQ0REY3RDky
MUZDODhBN0Q3M0MwOTA3NUEyRDk1QTM1RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWfu4WXCafiGcqJJMECThbur5vbBCaqw5Vbk5vEeQ8AxhrXUlc
xKLz/Baccr8TPmhcU7Dxh8gbBhWDQg3A08eztdCf1epOBKF0klhOgXFBtWZPg3tB
bU+woSwNxFRngkhMZ9LLbnC2mu18jObEQxR3tBV01pfEvcWbIIVBVJh47nRluutQ
7s4fQvVfWjwXw2Byc9wHfruP6ENpHmx6WsV3HqToyz/lFdfGDNWVjnWIk1C+LqXY
qarrfyJkBDiG8y5BiJAk5RWdCVlbU1SSj17nspML8SJ2viMlGei/6GlUnsEQgW+r
PYCC/OTUyBVATKg2izmGYcf4GH/CPk81is/bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfN8oRN99kh/Iin1zwJB1otlaNe4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZOOG9STjk5a2hfSWluMXp3
SkIxb3RsYU5lNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2sAwDQYJKoZIhvcNAQELBQADggEBABcA+jLfoZo7GAtpPoAAiM0xOQBwFjMJl9XP
ozzU541Cxiy9Uth9+8i0eEEwrnlAKxuRN8Y6AG7MqrF5zFE8ayCwrNrAtJGdV2JD
VNoRNEZjdisdt4rfXyi4RJU6xmPW3A6FQqnFLmnmHQtewM3nE3qRpHVVN2lniN3Z
2enSD/inguGMeJ7+QC+Kmguy5HrniCg2kjboCj6Y5F5U3QRXSB305CaHDYF7Q7se
J6UfvmGAaAzQ29uwFCkbllVX/6V7BY4MvhCtJiuE5w4lhRbegDMjeslINZY+AdPG
lAhyO0zQde6tdQZvQZJzFpSoEbyGIf7ASHwEMUlfUmmWqH/rA7E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org