Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/26nFMMEXPpqRwMGWj7NgQGZyrqk.roa
File: 26nFMMEXPpqRwMGWj7NgQGZyrqk.roa (raw, json)
Hash identifier: YXF1J/jJW12XoH3ng2JgPbH7ixUhV82jmDdeSAlGVrg=
Subject key identifier: DB:A9:C5:30:C1:17:3E:9A:91:C0:C1:96:8F:B3:60:40:66:72:AE:A9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1306
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/26nFMMEXPpqRwMGWj7NgQGZyrqk.roa
Signing time: Wed 29 Sep 2021 02:55:16 +0000
ROA not before: Wed 29 Sep 2021 02:55:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4870 (0x1306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DBA9C530C1173E9A91C0C1968FB360406672AEA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:44:a3:1e:b7:b2:8f:e0:d8:92:99:ff:89:
6b:51:76:ba:cd:af:6d:c3:9a:57:4d:a6:09:66:e5:
ba:8a:67:d7:bb:0e:28:d2:28:80:f2:53:6a:4e:65:
52:7e:57:11:c1:e1:a8:de:11:92:45:3c:8a:08:42:
2a:54:dc:77:ad:d1:4c:21:7d:2b:01:c5:85:b6:bb:
5d:e5:fc:59:c8:9a:44:02:75:28:92:e4:80:38:2c:
23:1d:ca:c9:86:99:1a:33:38:b7:a1:ce:77:10:61:
82:29:14:da:d7:72:6c:98:7f:98:22:75:e9:75:8c:
90:6e:ef:63:b7:5c:65:70:11:d1:df:a7:d3:78:fa:
08:45:a9:59:c6:57:c4:ed:01:63:0c:ff:9d:b6:4a:
18:13:33:18:c5:f1:20:d3:09:fe:29:7a:c3:9f:7d:
81:5e:03:d2:79:0c:25:67:9c:06:7a:69:6f:23:dc:
b7:41:93:dd:fb:c0:7f:f2:92:8f:f6:c0:77:e2:e9:
82:c4:c4:d2:b0:39:8d:ff:fc:46:d7:56:51:d8:c9:
00:75:5d:5a:30:27:f1:1e:16:f3:2f:b0:b5:e4:60:
01:fe:83:d3:a0:17:e8:8c:cb:31:33:15:95:9e:8e:
8c:60:fc:4d:29:c8:60:c8:f9:f3:9c:65:0f:38:61:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A9:C5:30:C1:17:3E:9A:91:C0:C1:96:8F:B3:60:40:66:72:AE:A9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/26nFMMEXPpqRwMGWj7NgQGZyrqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.188.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1c:cc:9a:b2:b4:d8:d7:10:53:ef:6b:11:48:f1:fe:13:df:
6b:89:5c:25:47:3e:ae:d8:bb:12:4f:35:e7:bd:26:ef:4f:05:
fe:90:1b:f9:3b:7e:db:51:88:ec:4d:8c:72:44:2a:86:0f:b2:
e7:86:82:5f:6c:72:82:1e:a6:49:8f:5f:36:cc:0b:eb:33:f5:
16:05:72:6c:8d:ee:a1:dd:29:31:0d:1f:5e:64:77:c3:80:3d:
bd:fc:96:3c:47:55:1b:e4:80:2a:13:c9:6a:6a:0f:3c:09:07:
57:88:28:8e:c4:b2:90:f7:b8:2f:58:a9:6c:7d:ee:fe:10:9b:
81:89:a0:d4:52:1a:d0:b7:2a:ce:92:86:89:23:22:d8:09:6e:
46:66:79:07:49:2b:94:d5:25:96:35:03:97:23:fc:45:a7:87:
7e:77:16:14:ba:61:78:de:03:42:20:80:66:96:31:fb:7d:85:
de:34:91:ea:8b:f0:a0:35:db:dd:10:59:fc:cf:c0:11:1f:97:
b4:f0:69:45:84:3e:90:91:a4:6a:d7:e0:4e:3e:73:ed:e6:07:
6a:3e:29:b3:e5:b5:e2:7e:e6:bc:3d:31:66:a8:55:71:15:e8:
0d:1e:92:0a:49:42:f0:80:ed:2e:97:d0:ad:37:d2:cd:e8:58:
1d:80:b0:07
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKERCQTlDNTMwQzExNzNF
OUE5MUMwQzE5NjhGQjM2MDQwNjY3MkFFQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/5USjHreyj+DYkpn/iWtRdrrNr23DmldNpglm5bqKZ9e7DijS
KIDyU2pOZVJ+VxHB4ajeEZJFPIoIQipU3Het0UwhfSsBxYW2u13l/FnImkQCdSiS
5IA4LCMdysmGmRozOLehzncQYYIpFNrXcmyYf5gidel1jJBu72O3XGVwEdHfp9N4
+ghFqVnGV8TtAWMM/522ShgTMxjF8SDTCf4pesOffYFeA9J5DCVnnAZ6aW8j3LdB
k937wH/yko/2wHfi6YLExNKwOY3//EbXVlHYyQB1XVowJ/EeFvMvsLXkYAH+g9Og
F+iMyzEzFZWejoxg/E0pyGDI+fOcZQ84YSBHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU26nFMMEXPpqRwMGWj7NgQGZyrqkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzI2bkZNTUVYUHBxUndNR1dq
N05nUUdaeXJxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2rwwDQYJKoZIhvcNAQELBQADggEBADQczJqytNjXEFPvaxFI8f4T32uJXCVHPq7Y
uxJPNee9Ju9PBf6QG/k7fttRiOxNjHJEKoYPsueGgl9scoIepkmPXzbMC+sz9RYF
cmyN7qHdKTENH15kd8OAPb38ljxHVRvkgCoTyWpqDzwJB1eIKI7EspD3uC9YqWx9
7v4Qm4GJoNRSGtC3Ks6ShokjItgJbkZmeQdJK5TVJZY1A5cj/EWnh353FhS6YXje
A0IggGaWMft9hd40keqL8KA1290QWfzPwBEfl7TwaUWEPpCRpGrX4E4+c+3mB2o+
KbPlteJ+5rw9MWaoVXEV6A0ekgpJQvCA7S6X0K030s3oWB2AsAc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org