Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQMX9cW9TW7Dc1VnPtkpWosXUQw.roa
File: oQMX9cW9TW7Dc1VnPtkpWosXUQw.roa (raw, json)
Hash identifier: qM3rVL7tcyPiVwXw2aYUliNHAC87GoC2vnmK1Gg8Su8=
Subject key identifier: A1:03:17:F5:C5:BD:4D:6E:C3:73:55:67:3E:D9:29:5A:8B:17:51:0C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B59
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQMX9cW9TW7Dc1VnPtkpWosXUQw.roa
Signing time: Tue 29 Sep 2020 10:08:19 +0000
ROA not before: Tue 29 Sep 2020 10:08:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2905 (0xb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A10317F5C5BD4D6EC37355673ED9295A8B17510C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:5c:72:9d:a7:f7:b9:aa:5e:8e:08:f2:14:
71:4b:7a:c8:0f:2e:52:e5:af:2c:39:f3:cd:be:6b:
4b:13:fe:74:11:b9:3c:77:d2:c9:43:03:fb:24:f5:
ee:a3:40:85:21:3f:24:b6:35:24:0f:c0:8e:95:f9:
a8:81:9a:fb:72:c9:e3:4f:db:39:46:3b:a0:77:af:
2c:0e:d5:69:45:8f:78:6d:03:bc:f4:eb:7a:3a:16:
d5:f6:ec:4b:0a:65:61:00:c4:50:ad:25:8f:df:93:
91:5b:ba:1e:86:b9:c0:29:b5:39:b0:b9:d7:b1:ee:
f8:1f:4d:79:ac:f3:88:d2:2a:1e:35:cf:04:47:1e:
7a:01:a9:48:dd:e0:ce:29:8c:d2:26:e0:51:95:4a:
8c:88:a1:94:60:0c:f3:6c:48:3e:af:eb:b1:d3:11:
82:e6:ea:c7:4c:5e:a9:87:ac:01:2d:86:53:d3:b5:
07:ab:67:29:4b:28:31:80:56:83:64:ba:24:d8:6b:
0d:d5:de:b8:45:59:ef:be:77:55:d4:a5:d1:d0:d4:
f8:90:06:f9:13:d6:79:85:3b:fb:ec:14:74:16:43:
55:5e:2b:ee:36:30:ce:fd:3c:23:c6:d1:82:66:52:
77:73:cd:ce:1d:d0:b8:b3:59:0f:8d:e7:aa:3d:47:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:17:F5:C5:BD:4D:6E:C3:73:55:67:3E:D9:29:5A:8B:17:51:0C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQMX9cW9TW7Dc1VnPtkpWosXUQw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.222.0/23
Signature Algorithm: sha256WithRSAEncryption
59:75:1d:1a:4b:95:e7:af:6c:79:9e:09:3c:2e:ff:cd:25:bc:
74:d5:ff:0b:d5:9d:76:ad:23:df:9e:23:6a:5b:bf:26:3c:74:
6c:d7:11:17:c5:4c:7a:58:75:87:68:8a:f1:cc:57:79:15:e5:
a0:59:b2:b7:b2:a0:2f:a7:b6:f3:2d:6e:47:77:ff:89:05:09:
4c:47:a9:e2:7b:8a:08:83:95:27:b5:ba:3c:9e:2e:3f:38:48:
ca:04:e1:16:9b:88:05:3f:53:6b:35:13:83:50:32:c4:71:c6:
6f:a2:b9:12:fa:00:ee:96:75:58:a6:a1:47:6b:cd:eb:00:7b:
c6:9b:3d:f4:f8:7d:01:be:9d:e1:a6:0f:2f:65:56:f1:55:97:
b3:ee:3e:1b:17:8b:8a:af:18:63:87:d4:68:97:1b:53:f3:b9:
dd:94:a8:bc:a3:07:f3:ed:46:7e:1e:74:44:f6:3f:af:64:f7:
3d:fb:50:2b:df:0a:81:a7:da:92:60:48:58:9a:0b:e5:0c:43:
3f:7f:65:75:24:bb:20:9b:ec:40:6e:de:4b:9a:dd:bf:5f:ca:
41:3a:d1:c3:eb:11:8c:da:f2:14:ba:96:c4:8c:52:38:10:67:
7a:72:87:09:6e:1f:92:7c:10:bf:3c:ad:87:66:d1:67:53:d2:
7f:c7:9d:45
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEExMDMxN0Y1QzVCRDRE
NkVDMzczNTU2NzNFRDkyOTVBOEIxNzUxMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0sFxynaf3uapejgjyFHFLesgPLlLlryw5882+a0sT/nQRuTx3
0slDA/sk9e6jQIUhPyS2NSQPwI6V+aiBmvtyyeNP2zlGO6B3rywO1WlFj3htA7z0
63o6FtX27EsKZWEAxFCtJY/fk5Fbuh6GucAptTmwudex7vgfTXms84jSKh41zwRH
HnoBqUjd4M4pjNIm4FGVSoyIoZRgDPNsSD6v67HTEYLm6sdMXqmHrAEthlPTtQer
ZylLKDGAVoNkuiTYaw3V3rhFWe++d1XUpdHQ1PiQBvkT1nmFO/vsFHQWQ1VeK+42
MM79PCPG0YJmUndzzc4d0LizWQ+N56o9R15jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoQMX9cW9TW7Dc1VnPtkpWosXUQwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL29RTVg5Y1c5VFc3RGMxVm5Q
dGtwV29zWFVRdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
2t4wDQYJKoZIhvcNAQELBQADggEBAFl1HRpLleevbHmeCTwu/80lvHTV/wvVnXat
I9+eI2pbvyY8dGzXERfFTHpYdYdoivHMV3kV5aBZsreyoC+ntvMtbkd3/4kFCUxH
qeJ7igiDlSe1ujyeLj84SMoE4RabiAU/U2s1E4NQMsRxxm+iuRL6AO6WdVimoUdr
zesAe8abPfT4fQG+neGmDy9lVvFVl7PuPhsXi4qvGGOH1GiXG1Pzud2UqLyjB/Pt
Rn4edET2P69k9z37UCvfCoGn2pJgSFiaC+UMQz9/ZXUkuyCb7EBu3kua3b9fykE6
0cPrEYza8hS6lsSMUjgQZ3pyhwluH5J8EL88rYdm0WdT0n/HnUU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org