Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1G4BfMdwo53NyjqdvrzYCRLm2LA.roa
File: 1G4BfMdwo53NyjqdvrzYCRLm2LA.roa (raw, json)
Hash identifier: C7944evYRbQxerpydygYF+w6/kf8FdxQ89i3Uj+FyIk=
Subject key identifier: D4:6E:01:7C:C7:70:A3:9D:CD:CA:3A:9D:BE:BC:D8:09:12:E6:D8:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10D7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1G4BfMdwo53NyjqdvrzYCRLm2LA.roa
Signing time: Sun 07 Feb 2021 12:49:14 +0000
ROA not before: Sun 07 Feb 2021 12:49:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4311 (0x10d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D46E017CC770A39DCDCA3A9DBEBCD80912E6D8B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:26:2f:4e:49:5a:f6:b7:65:a1:22:d4:0d:b7:
3c:37:95:41:c9:02:7e:a5:8c:86:c4:2e:e3:31:d1:
34:d8:6f:73:83:ae:43:e6:96:0f:37:e9:cd:c0:15:
bf:c9:70:47:e5:80:c7:03:a4:e7:93:34:52:0a:9f:
6b:24:fd:c4:44:7a:18:10:8b:9f:46:7c:41:ca:7f:
fb:61:43:4d:18:55:cd:72:c1:42:1e:fc:cd:d0:61:
26:6c:9a:0e:d5:62:70:ab:2a:60:ab:d8:19:f3:2c:
12:5a:19:ac:57:ac:82:ee:cb:1a:d0:ff:35:59:aa:
a5:89:1f:9a:84:e3:30:45:95:1f:5d:8e:5b:9b:72:
c9:03:7a:18:c7:bf:30:94:9d:c3:df:77:df:e8:aa:
c1:52:4b:03:d5:dc:67:ad:65:0c:e3:83:ba:9b:a5:
8b:ef:33:db:8a:e6:43:57:d2:a5:da:76:b8:d7:0d:
6e:78:6d:d2:40:ba:1a:68:f1:e0:a0:73:34:1e:77:
96:8c:8e:b9:c3:c9:47:95:56:da:02:d7:ce:c6:12:
d4:eb:78:fb:02:2e:a8:eb:f3:41:f8:43:62:89:b9:
57:0c:be:52:0c:a1:2b:3a:28:f9:7b:97:13:03:51:
e6:44:cc:e8:d2:c5:10:ec:35:61:60:47:b8:be:93:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:01:7C:C7:70:A3:9D:CD:CA:3A:9D:BE:BC:D8:09:12:E6:D8:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1G4BfMdwo53NyjqdvrzYCRLm2LA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:01:93:74:7e:e4:43:c6:64:0a:5a:fa:69:b8:d5:d6:e7:d4:
88:a0:ba:47:22:bd:df:20:c3:82:98:be:7d:f3:76:56:91:00:
75:56:9b:96:8f:74:87:d4:8d:66:11:1c:1a:18:29:45:bb:61:
f1:75:0d:93:d8:eb:c8:bb:bf:44:c2:6f:10:6c:70:1e:e6:d4:
5b:58:3a:d6:ce:38:58:0f:b4:63:0f:46:55:9c:26:6a:b1:c9:
fd:e2:47:94:10:26:97:7a:06:ed:ca:69:ff:4e:0e:8b:23:0c:
94:ba:38:45:43:69:ad:ee:bc:80:2f:e7:b6:e4:e2:2b:96:76:
60:c7:f2:84:bc:65:57:69:8e:19:90:7b:a7:dc:ac:50:37:cc:
86:4e:b7:a3:4e:ab:bd:91:dc:5f:14:eb:1a:47:28:47:37:17:
61:a9:f2:af:bc:c2:b0:10:e4:7e:c9:5e:0b:8d:aa:b4:b6:a4:
c2:83:31:2a:ef:ad:b9:80:13:72:8f:4d:39:9a:c9:3d:b7:6e:
aa:36:58:76:e5:ea:a8:b6:3c:05:48:4f:c9:9d:12:0b:47:ad:
b4:6b:48:c2:37:a0:89:4a:d1:aa:4a:34:b1:17:ab:3b:d4:4b:
11:8b:f6:9d:ee:a3:6f:aa:15:cf:0c:6f:2f:e1:5a:91:4c:dd:
e6:4b:72:ba
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICENcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ5MTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ0NkUwMTdDQzc3MEEz
OURDRENBM0E5REJFQkNEODA5MTJFNkQ4QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnJi9OSVr2t2WhItQNtzw3lUHJAn6ljIbELuMx0TTYb3ODrkPm
lg836c3AFb/JcEflgMcDpOeTNFIKn2sk/cREehgQi59GfEHKf/thQ00YVc1ywUIe
/M3QYSZsmg7VYnCrKmCr2BnzLBJaGaxXrILuyxrQ/zVZqqWJH5qE4zBFlR9djlub
cskDehjHvzCUncPfd9/oqsFSSwPV3GetZQzjg7qbpYvvM9uK5kNX0qXadrjXDW54
bdJAuhpo8eCgczQed5aMjrnDyUeVVtoC187GEtTrePsCLqjr80H4Q2KJuVcMvlIM
oSs6KPl7lxMDUeZEzOjSxRDsNWFgR7i+kzPTAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQU1G4BfMdwo53NyjqdvrzYCRLm2LAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFHNEJmTWR3bzUzTnlqcWR2
cnpZQ1JMbTJMQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC0
2jANBgkqhkiG9w0BAQsFAAOCAQEAeQGTdH7kQ8ZkClr6abjV1ufUiKC6RyK93yDD
gpi+ffN2VpEAdVablo90h9SNZhEcGhgpRbth8XUNk9jryLu/RMJvEGxwHubUW1g6
1s44WA+0Yw9GVZwmarHJ/eJHlBAml3oG7cpp/04OiyMMlLo4RUNpre68gC/ntuTi
K5Z2YMfyhLxlV2mOGZB7p9ysUDfMhk63o06rvZHcXxTrGkcoRzcXYanyr7zCsBDk
fsleC42qtLakwoMxKu+tuYATco9NOZrJPbduqjZYduXqqLY8BUhPyZ0SC0ettGtI
wjegiUrRqko0sRerO9RLEYv2ne6jb6oVzwxvL+FakUzd5ktyug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org