Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7ojXuHfcboynAyMdSvuZO_XBRgE.roa
File: 7ojXuHfcboynAyMdSvuZO_XBRgE.roa (raw, json)
Hash identifier: HHVYEFGMygeXPKTXpjpzKM8q2B9sYrUDV3Y6SA+GTjg=
Subject key identifier: EE:88:D7:B8:77:DC:6E:8C:A7:03:23:1D:4A:FB:99:3B:F5:C1:46:01
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1053
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7ojXuHfcboynAyMdSvuZO_XBRgE.roa
Signing time: Sun 07 Feb 2021 12:44:12 +0000
ROA not before: Sun 07 Feb 2021 12:44:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4179 (0x1053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:12 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EE88D7B877DC6E8CA703231D4AFB993BF5C14601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:dd:6d:73:aa:ae:fc:1b:4a:8f:90:d9:a7:
09:2a:ec:67:93:4d:20:d8:08:dd:8c:f5:5f:63:9a:
37:38:26:15:e4:df:29:9a:e8:15:51:51:f9:42:bc:
58:d7:f2:5c:0c:fa:3c:c7:c2:4a:5e:48:55:ae:c9:
93:f5:73:6e:47:9a:94:71:22:ff:f4:b2:d8:6a:33:
fa:70:7b:51:4e:14:9f:d1:80:01:c0:ae:b9:c5:2a:
86:6d:3e:60:c9:c7:16:0f:61:a2:00:78:e1:4d:d1:
c7:19:03:d0:69:c3:02:18:60:14:84:04:e7:82:80:
7c:e3:1a:bf:e2:66:3c:7a:81:4a:77:51:b5:c4:83:
eb:53:eb:b4:dd:5e:29:2d:2b:25:5b:af:be:8f:c6:
3e:b3:d2:4a:62:f5:b3:31:cd:4a:3e:13:31:b2:cf:
53:f7:ad:13:30:02:2e:89:f5:e4:0a:a8:ee:49:88:
74:87:1e:8b:f6:1a:68:af:cf:d8:ce:34:f8:47:77:
57:fb:a4:52:34:9a:d6:03:88:ba:f1:6d:81:6f:6d:
8b:ad:c5:c6:09:e4:38:e5:87:17:65:f7:6a:b0:19:
67:17:f2:cd:03:ca:5b:5a:bf:c5:f9:a3:7c:ed:e5:
ef:57:c3:72:57:28:bf:d2:06:2b:5a:ac:ae:54:e0:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:D7:B8:77:DC:6E:8C:A7:03:23:1D:4A:FB:99:3B:F5:C1:46:01
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7ojXuHfcboynAyMdSvuZO_XBRgE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/22
Signature Algorithm: sha256WithRSAEncryption
18:8a:77:9c:5a:ef:00:b9:12:a2:da:06:12:d6:eb:b8:7a:4c:
81:83:02:e9:d7:09:b4:e0:38:c3:be:f2:6e:46:11:1e:e8:ca:
f1:fa:60:bd:16:9e:63:28:67:38:b8:2c:8c:4f:91:87:0b:e4:
0e:12:46:a1:a9:dc:03:dd:90:71:d5:09:a5:36:55:2a:57:49:
a7:12:fa:40:f1:fa:04:9f:a2:f4:18:8d:df:e5:4e:a5:f9:8c:
fa:13:51:a4:3c:e7:ba:e7:53:ad:1a:a9:4b:b9:17:8d:ed:05:
3c:fb:81:73:5e:56:19:bf:7b:82:e8:0a:22:a0:2e:51:c9:ef:
f2:22:69:57:7d:a9:11:5b:82:be:2f:f1:41:0e:94:25:98:10:
d6:71:24:c5:2e:2a:f1:61:57:eb:ab:e0:16:4b:8a:7e:a9:d1:
5f:69:1a:32:e6:5b:c3:78:0f:2d:d5:2c:97:a9:40:38:0b:4d:
32:8c:94:88:e6:10:19:72:f1:98:d2:28:dc:74:bc:5f:92:5f:
47:18:0c:39:4d:16:f1:8b:71:39:5e:49:fa:da:f6:35:6e:0e:
8d:be:0b:3e:00:9a:cc:91:d0:cb:58:39:a3:21:af:f6:6c:1c:
3d:79:73:a5:0c:03:b2:c5:02:fb:9d:e8:f9:6b:04:db:11:3f:
33:cd:25:b3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ0MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVFODhEN0I4NzdEQzZF
OENBNzAzMjMxRDRBRkI5OTNCRjVDMTQ2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5Dt1tc6qu/BtKj5DZpwkq7GeTTSDYCN2M9V9jmjc4JhXk3yma
6BVRUflCvFjX8lwM+jzHwkpeSFWuyZP1c25HmpRxIv/0sthqM/pwe1FOFJ/RgAHA
rrnFKoZtPmDJxxYPYaIAeOFN0ccZA9BpwwIYYBSEBOeCgHzjGr/iZjx6gUp3UbXE
g+tT67TdXiktKyVbr76Pxj6z0kpi9bMxzUo+EzGyz1P3rRMwAi6J9eQKqO5JiHSH
Hov2Gmivz9jONPhHd1f7pFI0mtYDiLrxbYFvbYutxcYJ5Djlhxdl92qwGWcX8s0D
yltav8X5o3zt5e9Xw3JXKL/SBitarK5U4OGFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7ojXuHfcboynAyMdSvuZO/XBRgEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdvalh1SGZjYm95bkF5TWRT
dnVaT19YQlJnRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2pAwDQYJKoZIhvcNAQELBQADggEBABiKd5xa7wC5EqLaBhLW67h6TIGDAunXCbTg
OMO+8m5GER7oyvH6YL0WnmMoZzi4LIxPkYcL5A4SRqGp3APdkHHVCaU2VSpXSacS
+kDx+gSfovQYjd/lTqX5jPoTUaQ857rnU60aqUu5F43tBTz7gXNeVhm/e4LoCiKg
LlHJ7/IiaVd9qRFbgr4v8UEOlCWYENZxJMUuKvFhV+ur4BZLin6p0V9pGjLmW8N4
Dy3VLJepQDgLTTKMlIjmEBly8ZjSKNx0vF+SX0cYDDlNFvGLcTleSfra9jVuDo2+
Cz4AmsyR0MtYOaMhr/ZsHD15c6UMA7LFAvud6PlrBNsRPzPNJbM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org