Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gdAEG6saqGKlJMTfoslF5C0KBn8.roa
File: gdAEG6saqGKlJMTfoslF5C0KBn8.roa (raw, json)
Hash identifier: MdAVB5QOApyIIYxtkAKGcgwMjidsn3NyKJYKLXGKNYI=
Subject key identifier: 81:D0:04:1B:AB:1A:A8:62:A5:24:C4:DF:A2:C9:45:E4:2D:0A:06:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 106B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gdAEG6saqGKlJMTfoslF5C0KBn8.roa
Signing time: Sun 07 Feb 2021 12:44:41 +0000
ROA not before: Sun 07 Feb 2021 12:44:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4203 (0x106b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=81D0041BAB1AA862A524C4DFA2C945E42D0A067F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:46:53:44:d0:21:79:1f:33:3a:47:9e:92:
8c:d5:54:70:ef:fa:b0:82:a6:43:ce:c2:c5:5f:2d:
10:18:b1:e5:8a:6d:e6:57:db:b8:74:88:85:5d:f1:
85:74:d2:18:7f:b6:3d:72:fb:63:41:77:1f:02:b3:
6d:a3:fe:5f:80:61:33:0b:f8:f8:d1:1b:c4:29:11:
0e:e1:d3:d0:07:d7:1a:4c:ef:56:41:92:5d:5f:f1:
bf:e6:cc:cb:c6:62:c2:be:38:bc:97:03:07:98:4d:
fc:9b:93:c9:9d:69:7a:fc:54:4b:2b:51:7f:13:4d:
a4:db:d7:95:36:55:d5:fa:ae:0a:bb:98:ed:7e:e5:
53:9a:dd:52:c5:4f:32:cb:ed:28:09:e2:94:20:2e:
ac:32:f8:89:8c:d0:35:5e:bf:65:fc:be:e4:fc:e4:
1d:55:59:e5:93:3c:58:43:d5:4e:8b:47:5d:f5:48:
0f:53:c6:39:db:52:46:4c:d7:94:d3:ab:66:51:25:
8b:09:36:43:e2:01:13:9c:97:75:34:da:af:c1:39:
04:40:88:bd:e6:36:af:68:1e:f9:f3:5b:c4:37:a4:
eb:89:be:b7:5a:f5:d4:f0:fb:93:c4:98:e3:3f:af:
0d:d2:ef:d6:0a:7d:56:10:89:d7:88:51:4b:d5:0a:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:04:1B:AB:1A:A8:62:A5:24:C4:DF:A2:C9:45:E4:2D:0A:06:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gdAEG6saqGKlJMTfoslF5C0KBn8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.208.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:b8:eb:67:db:95:bf:cd:a4:f6:c7:00:60:fd:d5:ac:c1:8a:
14:c2:91:16:99:78:e1:3b:d2:33:a7:a5:5d:aa:29:20:43:81:
d1:ac:3b:96:cd:e3:47:82:a1:e9:eb:5e:71:86:6e:f7:7f:03:
05:49:25:21:8e:a8:4c:6a:ea:a2:fa:b2:e4:0b:41:97:32:49:
39:26:47:05:56:38:a3:97:22:1d:b3:ae:a3:4b:71:8e:1f:a6:
2d:01:c4:53:41:87:a1:62:03:2e:e7:98:8b:6d:47:c0:03:75:
cb:7a:43:08:1f:79:68:0b:39:a7:5a:21:bd:5b:7e:eb:a8:89:
fe:df:83:0b:14:82:d7:28:41:80:0d:96:ee:87:d0:63:d1:bd:
99:96:ed:33:ea:f3:5a:89:65:c2:38:2f:a1:c7:c9:38:e9:fd:
5c:b5:06:99:5f:ac:81:92:23:b9:3a:05:ae:9e:86:8b:99:e9:
a7:5e:4f:09:5f:eb:08:6c:14:cf:95:3f:a5:c4:ab:23:24:50:
29:15:fa:91:47:c5:9e:ff:b9:18:5d:43:2d:91:c6:dd:2e:70:
88:3a:76:d7:c3:23:eb:fe:d0:24:df:d6:84:ed:1c:eb:7a:c5:
0b:0f:12:cc:8b:51:e5:4c:94:e7:65:b2:8d:29:79:69:ff:ef:
ed:83:97:dd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEGswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ0NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgxRDAwNDFCQUIxQUE4
NjJBNTI0QzRERkEyQzk0NUU0MkQwQTA2N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdCkZTRNAheR8zOkeekozVVHDv+rCCpkPOwsVfLRAYseWKbeZX
27h0iIVd8YV00hh/tj1y+2NBdx8Cs22j/l+AYTML+PjRG8QpEQ7h09AH1xpM71ZB
kl1f8b/mzMvGYsK+OLyXAweYTfybk8mdaXr8VEsrUX8TTaTb15U2VdX6rgq7mO1+
5VOa3VLFTzLL7SgJ4pQgLqwy+ImM0DVev2X8vuT85B1VWeWTPFhD1U6LR131SA9T
xjnbUkZM15TTq2ZRJYsJNkPiAROcl3U02q/BOQRAiL3mNq9oHvnzW8Q3pOuJvrda
9dTw+5PEmOM/rw3S79YKfVYQideIUUvVCqqfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgdAEG6saqGKlJMTfoslF5C0KBn8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2dkQUVHNnNhcUdLbEpNVGZv
c2xGNUMwS0JuOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2tAwDQYJKoZIhvcNAQELBQADggEBAG6462fblb/NpPbHAGD91azBihTCkRaZeOE7
0jOnpV2qKSBDgdGsO5bN40eCoenrXnGGbvd/AwVJJSGOqExq6qL6suQLQZcySTkm
RwVWOKOXIh2zrqNLcY4fpi0BxFNBh6FiAy7nmIttR8ADdct6QwgfeWgLOadaIb1b
fuuoif7fgwsUgtcoQYANlu6H0GPRvZmW7TPq81qJZcI4L6HHyTjp/Vy1BplfrIGS
I7k6Ba6ehouZ6adeTwlf6whsFM+VP6XEqyMkUCkV+pFHxZ7/uRhdQy2Rxt0ucIg6
dtfDI+v+0CTf1oTtHOt6xQsPEsyLUeVMlOdlso0peWn/7+2Dl90=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org