Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qBpTH33Qt_-2GnAr1bMWRMt6MRQ.roa
File: qBpTH33Qt_-2GnAr1bMWRMt6MRQ.roa (raw, json)
Hash identifier: WUvKGaTy7s4o5gTQUiSyJUeaFNzQSH0LmPN+O97Oigo=
Subject key identifier: A8:1A:53:1F:7D:D0:B7:FF:B6:1A:70:2B:D5:B3:16:44:CB:7A:31:14
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1357
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qBpTH33Qt_-2GnAr1bMWRMt6MRQ.roa
Signing time: Wed 29 Sep 2021 02:55:39 +0000
ROA not before: Wed 29 Sep 2021 02:55:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 180.218.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4951 (0x1357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A81A531F7DD0B7FFB61A702BD5B31644CB7A3114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:55:69:ce:a4:e6:2d:c5:bd:7a:83:a1:0f:
62:29:61:9e:44:7d:c1:fd:67:08:40:09:73:ff:8e:
14:5a:28:05:70:7f:16:94:b1:fb:85:53:25:29:82:
3d:0c:9c:f1:33:a0:1d:0a:1d:e0:85:08:98:d2:80:
05:8b:13:6d:e5:98:bb:a1:39:d9:2e:3e:b7:34:da:
e1:f9:8d:7d:52:c9:4b:5d:e3:56:39:53:80:b4:70:
d3:e0:ff:0f:c2:39:d5:cf:e6:01:55:81:17:6b:66:
06:c1:32:a8:d6:77:53:d0:7e:c7:cc:a1:fe:1f:d9:
ba:d0:e7:44:80:d9:6f:22:0b:8e:be:db:98:bc:45:
54:11:cc:e7:1c:ef:81:92:34:5e:a6:fe:05:73:3a:
26:1a:5e:11:ae:5d:3e:c1:1c:e3:47:ad:4d:ea:14:
b5:3c:f2:0e:f9:24:2b:6c:a9:e7:05:5f:ba:d5:9e:
38:d2:ba:39:fc:0e:57:93:a9:60:6a:8c:97:49:6d:
54:db:1d:b0:09:40:c2:cc:01:db:c9:a8:cd:0a:f0:
d0:a0:da:9f:32:12:d7:ef:d5:7f:f6:57:ec:6c:d1:
a2:4d:98:3e:39:4f:17:45:c1:4f:fa:50:57:1b:ab:
6c:0b:42:f5:4f:f5:fb:b3:5e:11:5a:eb:a4:07:2b:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1A:53:1F:7D:D0:B7:FF:B6:1A:70:2B:D5:B3:16:44:CB:7A:31:14
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qBpTH33Qt_-2GnAr1bMWRMt6MRQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:96:7a:f5:f1:28:ce:64:9f:26:85:a5:4b:2f:b7:e9:3f:00:
ff:41:39:5e:19:7a:d7:e5:1e:ca:74:50:b7:5b:25:9e:f2:18:
61:f8:99:e1:3b:6e:39:cb:f7:99:74:a5:22:bf:f1:6e:e6:8e:
e9:a1:93:35:52:78:ab:00:0a:8f:0b:3d:d1:44:e1:21:e3:3e:
75:cc:e2:33:f9:c3:47:73:63:54:94:62:2b:ee:ae:af:88:a5:
6c:ca:66:44:15:f1:c7:ef:42:3f:c1:84:e4:4a:eb:a2:85:1c:
d3:3c:43:45:91:9d:10:68:1c:c8:ac:cc:a8:2b:a5:c2:11:5b:
84:57:a8:91:3a:b2:2c:83:64:f8:93:e0:d7:dc:a9:c1:13:a5:
df:b7:60:dd:52:6d:bf:e5:c7:47:ce:35:b8:de:de:98:e5:9c:
76:12:49:81:35:76:53:fe:54:73:9d:e5:f6:c0:33:89:7a:3a:
fb:33:b0:83:ca:64:14:f5:05:1c:00:80:7b:39:7f:c8:c1:1e:
5d:5c:11:bc:97:30:a2:22:d5:06:59:99:1e:22:32:4b:48:cf:
db:34:76:ec:57:29:4c:14:00:39:ca:0f:22:aa:5a:8c:f6:b0:
f3:ec:fb:b6:8b:7c:25:88:8b:6d:e7:7a:f6:4d:07:0d:ed:66:
f0:b7:bc:98
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MzlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEE4MUE1MzFGN0REMEI3
RkZCNjFBNzAyQkQ1QjMxNjQ0Q0I3QTMxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0cVVpzqTmLcW9eoOhD2IpYZ5EfcH9ZwhACXP/jhRaKAVwfxaU
sfuFUyUpgj0MnPEzoB0KHeCFCJjSgAWLE23lmLuhOdkuPrc02uH5jX1SyUtd41Y5
U4C0cNPg/w/COdXP5gFVgRdrZgbBMqjWd1PQfsfMof4f2brQ50SA2W8iC46+25i8
RVQRzOcc74GSNF6m/gVzOiYaXhGuXT7BHONHrU3qFLU88g75JCtsqecFX7rVnjjS
ujn8DleTqWBqjJdJbVTbHbAJQMLMAdvJqM0K8NCg2p8yEtfv1X/2V+xs0aJNmD45
TxdFwU/6UFcbq2wLQvVP9fuzXhFa66QHKzJlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqBpTH33Qt/+2GnAr1bMWRMt6MRQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3FCcFRIMzNRdF8tMkduQXIx
Yk1XUk10Nk1SUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2nAwDQYJKoZIhvcNAQELBQADggEBAJ+WevXxKM5knyaFpUsvt+k/AP9BOV4Zetfl
Hsp0ULdbJZ7yGGH4meE7bjnL95l0pSK/8W7mjumhkzVSeKsACo8LPdFE4SHjPnXM
4jP5w0dzY1SUYivurq+IpWzKZkQV8cfvQj/BhORK66KFHNM8Q0WRnRBoHMiszKgr
pcIRW4RXqJE6siyDZPiT4NfcqcETpd+3YN1Sbb/lx0fONbje3pjlnHYSSYE1dlP+
VHOd5fbAM4l6OvszsIPKZBT1BRwAgHs5f8jBHl1cEbyXMKIi1QZZmR4iMktIz9s0
duxXKUwUADnKDyKqWoz2sPPs+7aLfCWIi23nevZNBw3tZvC3vJg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org