Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zlkGyX2j1panFYhD_wgg2WuKv98.roa
File: zlkGyX2j1panFYhD_wgg2WuKv98.roa (raw, json)
Hash identifier: o2tKaaBKJnnPfDCE8/vtYD2a+0tR8SLtG1jSpC3SidM=
Subject key identifier: CE:59:06:C9:7D:A3:D6:96:A7:15:88:43:FF:08:20:D9:6B:8A:BF:DF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1137
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zlkGyX2j1panFYhD_wgg2WuKv98.roa
Signing time: Sun 07 Feb 2021 13:14:24 +0000
ROA not before: Sun 07 Feb 2021 13:14:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4407 (0x1137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CE5906C97DA3D696A7158843FF0820D96B8ABFDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:9c:ca:0c:49:3c:cf:70:01:01:10:08:2e:
71:9e:45:c5:78:52:33:11:a3:3a:34:a0:72:f7:d2:
d9:1f:42:38:e9:df:df:de:01:46:4f:91:46:61:60:
f8:7d:17:fa:12:af:72:e6:8c:f0:31:f4:55:fc:5c:
64:b3:24:77:e9:2b:83:0f:54:74:c5:11:3a:e7:ff:
b0:6e:89:71:cb:d9:e7:b0:16:1e:12:ba:89:a4:62:
79:37:ff:42:9a:94:2e:80:ab:75:8a:91:6c:a2:1d:
c9:19:46:f0:99:e9:32:c3:48:fe:ca:94:94:32:c6:
3d:cb:b9:1c:b4:69:e7:4a:a8:bd:86:a7:a5:ab:b7:
f0:85:30:51:7e:5d:dc:9a:1a:37:23:73:3d:d0:2f:
a3:dc:62:1a:8c:c5:7b:4c:41:57:fc:90:16:a3:4a:
b0:79:86:27:1f:fc:33:bc:28:0f:37:6f:cc:67:5e:
20:d6:a3:ac:7e:7e:4b:22:93:f6:29:26:d9:98:b8:
02:30:34:e1:9d:9f:4d:90:8a:e4:33:4a:8c:91:96:
94:11:c9:b4:c8:af:1b:fc:fd:fe:24:62:ef:c1:50:
bf:7c:8c:a2:3e:33:ed:7d:80:c4:46:2d:34:44:2f:
34:e9:fd:3e:65:46:01:a1:1f:9d:9d:93:a2:ea:bf:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:06:C9:7D:A3:D6:96:A7:15:88:43:FF:08:20:D9:6B:8A:BF:DF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zlkGyX2j1panFYhD_wgg2WuKv98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.246.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fa:20:e4:d5:47:6b:76:1a:b4:18:2b:77:f7:b8:6c:9c:b7:
68:3c:a4:a6:da:98:f1:1e:df:0f:de:0c:41:f4:65:be:cc:56:
f3:76:89:eb:12:a3:fa:5a:11:ae:e1:01:3b:00:f7:49:e3:c1:
f0:91:98:ac:59:68:03:da:79:6c:9e:bc:b4:1f:82:2b:a6:cd:
d0:aa:f8:b7:1f:34:13:91:23:f1:0c:71:c8:4b:75:32:d7:e5:
4c:4e:6a:10:42:44:bf:6f:ee:1c:40:cd:6c:f6:2e:ba:5e:58:
61:0a:c3:17:11:71:c4:22:96:c4:58:1f:77:11:e4:7c:45:c1:
37:d1:85:c8:e6:f0:de:46:80:7a:69:f7:00:2e:3a:ef:5c:64:
f3:76:68:66:25:10:a8:a7:a5:e6:84:13:78:63:1e:43:b3:27:
9c:83:47:80:b2:06:34:2f:48:33:6e:c8:13:a9:2c:90:2e:df:
2c:c0:72:04:a7:ba:af:37:da:4d:66:8a:a4:8c:c4:a1:29:eb:
36:84:58:1b:55:bd:d1:83:f4:d4:27:c0:cd:50:8c:52:31:48:
c6:b9:c1:cc:54:ed:92:c7:fb:70:97:fd:da:50:1e:7c:ca:12:
2a:50:c0:15:1d:35:5d:a8:15:f9:08:ae:21:5e:0e:7c:4e:f6:
bc:b0:88:7f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICETcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MzE0MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENFNTkwNkM5N0RBM0Q2
OTZBNzE1ODg0M0ZGMDgyMEQ5NkI4QUJGREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0kpzKDEk8z3ABARAILnGeRcV4UjMRozo0oHL30tkfQjjp39/e
AUZPkUZhYPh9F/oSr3LmjPAx9FX8XGSzJHfpK4MPVHTFETrn/7BuiXHL2eewFh4S
uomkYnk3/0KalC6Aq3WKkWyiHckZRvCZ6TLDSP7KlJQyxj3LuRy0aedKqL2Gp6Wr
t/CFMFF+XdyaGjcjcz3QL6PcYhqMxXtMQVf8kBajSrB5hicf/DO8KA83b8xnXiDW
o6x+fksik/YpJtmYuAIwNOGdn02QiuQzSoyRlpQRybTIrxv8/f4kYu/BUL98jKI+
M+19gMRGLTRELzTp/T5lRgGhH52dk6LqvxZpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzlkGyX2j1panFYhD/wgg2WuKv98wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3psa0d5WDJqMXBhbkZZaERf
d2dnMld1S3Y5OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2vYwDQYJKoZIhvcNAQELBQADggEBAGn6IOTVR2t2GrQYK3f3uGyct2g8pKbamPEe
3w/eDEH0Zb7MVvN2iesSo/paEa7hATsA90njwfCRmKxZaAPaeWyevLQfgiumzdCq
+LcfNBORI/EMcchLdTLX5UxOahBCRL9v7hxAzWz2LrpeWGEKwxcRccQilsRYH3cR
5HxFwTfRhcjm8N5GgHpp9wAuOu9cZPN2aGYlEKinpeaEE3hjHkOzJ5yDR4CyBjQv
SDNuyBOpLJAu3yzAcgSnuq832k1miqSMxKEp6zaEWBtVvdGD9NQnwM1QjFIxSMa5
wcxU7ZLH+3CX/dpQHnzKEipQwBUdNV2oFfkIriFeDnxO9rywiH8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org