Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i6k1widZtAumNM5KjqIR8tWSK2o.roa
File: i6k1widZtAumNM5KjqIR8tWSK2o.roa (raw, json)
Hash identifier: 2BZ00Q4bfF0dPP1kvlNUFwBXl5RDhF3x2pjrxr3LoSQ=
Subject key identifier: 8B:A9:35:C2:27:59:B4:0B:A6:34:CE:4A:8E:A2:11:F2:D5:92:2B:6A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B1A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i6k1widZtAumNM5KjqIR8tWSK2o.roa
Signing time: Tue 29 Sep 2020 10:08:01 +0000
ROA not before: Tue 29 Sep 2020 10:08:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2842 (0xb1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8BA935C22759B40BA634CE4A8EA211F2D5922B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:86:b5:a2:c2:e0:d3:88:65:14:38:33:6a:
f6:f5:03:88:86:36:a3:d1:6a:a8:d5:f4:e8:0a:a6:
66:75:de:aa:b5:64:fc:2a:29:8b:e0:7b:04:94:6e:
f8:90:79:c4:33:6e:9d:d3:3d:15:12:13:52:8f:42:
d2:10:bc:ed:a7:f0:dc:c2:99:36:f9:76:8a:cb:e9:
67:43:2c:1c:fa:eb:58:28:ad:d1:69:80:69:b9:17:
0e:0d:44:74:fb:ce:34:45:86:30:d5:db:00:e9:59:
c1:c8:ea:c1:23:ae:b7:20:26:20:3a:9d:6d:3e:f4:
9f:56:98:59:a1:c3:10:8a:a9:86:b4:e3:01:b1:3f:
dc:60:c1:16:7f:f7:c1:39:f3:89:c9:ac:59:94:e8:
54:84:08:9c:92:dc:06:7e:89:ba:33:b5:99:64:21:
62:2a:cf:76:6c:2f:52:78:a3:5b:95:b6:39:5c:46:
51:9c:3e:06:f2:ec:5a:a1:8e:78:16:81:16:1f:85:
5f:09:bc:4a:73:97:35:6a:39:0f:71:64:d8:d4:0e:
82:35:6d:07:1c:a8:76:eb:53:61:ef:88:3e:00:6b:
e4:c8:66:32:97:7e:6b:d9:bf:cc:76:5b:a8:91:27:
76:2e:d4:7b:61:bb:ce:1d:9f:b0:4d:e1:c7:c4:22:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A9:35:C2:27:59:B4:0B:A6:34:CE:4A:8E:A2:11:F2:D5:92:2B:6A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i6k1widZtAumNM5KjqIR8tWSK2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.200.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:10:f6:ff:b9:e7:8b:47:cb:c1:3b:d2:6f:f1:33:0f:c4:28:
31:a0:2c:bf:a0:dd:e2:82:ab:9b:e7:2d:87:bf:57:90:cf:2c:
f3:cf:bc:c4:ba:7f:e3:f6:41:71:91:85:40:33:13:4e:e5:e0:
da:ce:4e:88:b3:fa:5d:e8:d0:42:55:eb:be:d7:c5:12:ed:bb:
89:0f:84:dd:1e:d7:bf:2b:8b:c9:b3:59:11:48:95:14:fc:82:
00:5f:99:29:a2:f4:3a:16:ed:5b:20:38:f8:dc:50:9a:4c:80:
3e:70:50:57:f6:b1:02:06:a0:5b:c4:ac:c9:e9:0f:4d:05:97:
3c:15:20:29:21:47:96:00:14:d4:43:f1:c6:a4:41:53:17:f0:
96:f0:d5:0c:e4:09:6e:e0:8f:ed:d9:5d:70:9d:9c:de:4a:0a:
36:17:64:ac:a8:71:ee:e9:8b:7e:35:ac:3a:8d:6d:75:81:0b:
f5:b3:47:fe:b8:1d:80:68:12:ee:c0:ce:d5:47:5b:50:52:8d:
70:0a:dd:d8:ef:74:86:84:86:5e:9c:a7:b7:73:d4:17:97:cd:
95:d3:75:31:e6:a6:7a:13:87:d2:b4:14:52:c9:0b:7a:54:91:
2c:7b:29:b0:de:2a:39:81:1c:e9:51:33:cf:2a:f6:81:0a:db:
13:2e:52:9d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhCQTkzNUMyMjc1OUI0
MEJBNjM0Q0U0QThFQTIxMUYyRDU5MjJCNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNXIa1osLg04hlFDgzavb1A4iGNqPRaqjV9OgKpmZ13qq1ZPwq
KYvgewSUbviQecQzbp3TPRUSE1KPQtIQvO2n8NzCmTb5dorL6WdDLBz661gordFp
gGm5Fw4NRHT7zjRFhjDV2wDpWcHI6sEjrrcgJiA6nW0+9J9WmFmhwxCKqYa04wGx
P9xgwRZ/98E584nJrFmU6FSECJyS3AZ+iboztZlkIWIqz3ZsL1J4o1uVtjlcRlGc
Pgby7FqhjngWgRYfhV8JvEpzlzVqOQ9xZNjUDoI1bQccqHbrU2HviD4Aa+TIZjKX
fmvZv8x2W6iRJ3Yu1Hthu84dn7BN4cfEIro1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUi6k1widZtAumNM5KjqIR8tWSK2owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2k2azF3aWRadEF1bU5NNUtq
cUlSOHRXU0syby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2sgwDQYJKoZIhvcNAQELBQADggEBAFoQ9v+554tHy8E70m/xMw/EKDGgLL+g3eKC
q5vnLYe/V5DPLPPPvMS6f+P2QXGRhUAzE07l4NrOToiz+l3o0EJV677XxRLtu4kP
hN0e178ri8mzWRFIlRT8ggBfmSmi9DoW7VsgOPjcUJpMgD5wUFf2sQIGoFvErMnp
D00FlzwVICkhR5YAFNRD8cakQVMX8Jbw1QzkCW7gj+3ZXXCdnN5KCjYXZKyoce7p
i341rDqNbXWBC/WzR/64HYBoEu7AztVHW1BSjXAK3djvdIaEhl6cp7dz1BeXzZXT
dTHmpnoTh9K0FFLJC3pUkSx7KbDeKjmBHOlRM88q9oEK2xMuUp0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org