Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9Y3AGaXFE8xqfdsac38jrxdwLAU.roa
File: 9Y3AGaXFE8xqfdsac38jrxdwLAU.roa (raw, json)
Hash identifier: iTcrCna+xR22rFqqUnPyxioCfUskEqwJW4tn5q8njTg=
Subject key identifier: F5:8D:C0:19:A5:C5:13:CC:6A:7D:DB:1A:73:7F:23:AF:17:70:2C:05
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12F3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9Y3AGaXFE8xqfdsac38jrxdwLAU.roa
Signing time: Wed 29 Sep 2021 02:55:10 +0000
ROA not before: Wed 29 Sep 2021 02:55:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4851 (0x12f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F58DC019A5C513CC6A7DDB1A737F23AF17702C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:53:07:d5:7b:e7:2a:3f:cb:1f:3a:56:3e:35:
af:ef:2d:ec:a5:1d:f8:da:59:74:7a:7d:bd:53:e5:
ad:e6:06:9d:d7:58:80:60:79:59:f6:8e:6c:fc:d2:
6b:65:72:cd:d1:5e:7f:08:35:c1:3f:77:6c:77:96:
1b:7a:9f:6a:c7:c3:02:57:f6:57:a7:f8:cb:93:29:
61:f8:23:1d:72:08:94:41:fa:5b:78:8b:72:63:fa:
a4:e3:91:e0:d8:4f:c3:bc:df:93:87:fa:1b:5f:19:
1d:01:b9:36:40:24:a7:28:0a:e0:96:ee:35:f0:ec:
e8:07:5b:e8:e2:b1:3d:1d:7b:de:c5:b7:02:e4:db:
8a:82:64:2d:9b:95:1b:8b:95:ae:10:a2:f8:04:78:
a9:d0:ff:e4:c0:69:d2:53:f9:19:40:d1:10:42:e6:
48:5e:38:bf:e2:0b:9b:ba:64:6a:e9:a5:f4:8b:36:
28:5b:b4:90:f3:4c:10:71:98:7b:03:95:c4:c1:97:
3a:02:9d:d2:fb:5a:47:f0:9c:59:6f:e9:25:9b:e7:
8e:3c:0b:fd:13:5a:6a:dc:f0:62:43:71:72:1d:0c:
33:e9:2a:22:54:74:94:22:38:66:42:1e:47:4f:ec:
3f:41:3e:21:a4:6e:94:27:40:c4:e0:c0:f5:c3:00:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8D:C0:19:A5:C5:13:CC:6A:7D:DB:1A:73:7F:23:AF:17:70:2C:05
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9Y3AGaXFE8xqfdsac38jrxdwLAU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.172.0/22
Signature Algorithm: sha256WithRSAEncryption
92:e6:7c:4b:14:4b:27:dc:2d:13:1f:af:e0:93:dd:d2:f1:92:
03:c5:3d:8f:26:49:92:37:c7:99:3f:58:c1:42:f7:6f:8d:20:
07:bc:5d:08:48:60:84:38:56:b7:c6:29:5b:05:09:c1:ee:06:
6a:7c:6d:a4:bd:45:aa:10:71:bd:9e:ea:d1:19:8e:ee:56:68:
a2:18:18:3f:e4:68:bf:e3:76:61:7d:d8:67:6f:c0:1d:4c:26:
d5:bd:23:e5:93:2e:61:89:e5:22:79:0e:fb:dc:e0:bd:37:34:
59:b3:4d:98:70:b1:fd:57:7a:76:00:60:64:69:62:4f:b4:14:
35:88:59:f8:4b:a3:32:c7:00:f5:d1:7a:40:6e:80:ec:88:1e:
1a:e5:9d:c6:c3:29:cf:37:e9:06:41:80:de:ce:be:dd:9f:f1:
50:34:2a:da:13:6c:e0:01:03:1c:db:60:af:04:fa:54:f9:26:
59:69:cd:55:f7:a5:46:6a:a9:35:fd:d5:42:58:6c:6e:de:f5:
8b:00:b0:c7:f4:31:af:c3:7d:b1:a1:2d:72:7c:e0:1f:07:73:
51:de:cb:ab:26:50:87:a8:1d:8f:d2:a1:ea:fb:14:d3:94:7b:
f9:56:56:fa:71:a0:2a:63:a3:ee:25:c8:2d:ce:46:ed:fb:69:
63:f3:8b:32
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEY1OERDMDE5QTVDNTEz
Q0M2QTdEREIxQTczN0YyM0FGMTc3MDJDMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlUwfVe+cqP8sfOlY+Na/vLeylHfjaWXR6fb1T5a3mBp3XWIBg
eVn2jmz80mtlcs3RXn8INcE/d2x3lht6n2rHwwJX9len+MuTKWH4Ix1yCJRB+lt4
i3Jj+qTjkeDYT8O835OH+htfGR0BuTZAJKcoCuCW7jXw7OgHW+jisT0de97FtwLk
24qCZC2blRuLla4QovgEeKnQ/+TAadJT+RlA0RBC5kheOL/iC5u6ZGrppfSLNihb
tJDzTBBxmHsDlcTBlzoCndL7WkfwnFlv6SWb5448C/0TWmrc8GJDcXIdDDPpKiJU
dJQiOGZCHkdP7D9BPiGkbpQnQMTgwPXDAI9PAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9Y3AGaXFE8xqfdsac38jrxdwLAUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzlZM0FHYVhGRTh4cWZkc2Fj
Mzhqcnhkd0xBVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2qwwDQYJKoZIhvcNAQELBQADggEBAJLmfEsUSyfcLRMfr+CT3dLxkgPFPY8mSZI3
x5k/WMFC92+NIAe8XQhIYIQ4VrfGKVsFCcHuBmp8baS9RaoQcb2e6tEZju5WaKIY
GD/kaL/jdmF92GdvwB1MJtW9I+WTLmGJ5SJ5Dvvc4L03NFmzTZhwsf1XenYAYGRp
Yk+0FDWIWfhLozLHAPXRekBugOyIHhrlncbDKc836QZBgN7Ovt2f8VA0KtoTbOAB
AxzbYK8E+lT5JllpzVX3pUZqqTX91UJYbG7e9YsAsMf0Ma/DfbGhLXJ84B8Hc1He
y6smUIeoHY/Soer7FNOUe/lWVvpxoCpjo+4lyC3ORu37aWPzizI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org