Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BplzNEQceNV5XTPO3iFHsu-neYM.roa
File: BplzNEQceNV5XTPO3iFHsu-neYM.roa (raw, json)
Hash identifier: aQxQ+Yr90sFHnAt9GuB0HxsZ+Bk9zjfCZpAUSz7uUZs=
Subject key identifier: 06:99:73:34:44:1C:78:D5:79:5D:33:CE:DE:21:47:B2:EF:A7:79:83
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12FF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BplzNEQceNV5XTPO3iFHsu-neYM.roa
Signing time: Wed 29 Sep 2021 02:55:13 +0000
ROA not before: Wed 29 Sep 2021 02:55:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4863 (0x12ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=06997334441C78D5795D33CEDE2147B2EFA77983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:2a:24:05:66:44:d3:e6:21:e3:3e:e4:97:
99:70:01:d0:16:23:89:b9:08:0e:0b:8c:f4:b1:c8:
04:1f:d6:2e:8f:b1:b1:43:9b:47:d3:5e:61:20:78:
24:c6:d6:f2:fb:2c:4a:a3:b9:7e:23:5a:0a:72:c4:
b8:33:f5:19:c6:40:97:19:cb:3d:2b:93:20:34:f8:
4b:9d:b6:6b:23:1f:07:ca:82:29:f5:95:cf:9f:03:
20:86:d9:13:3b:e6:c3:f6:b3:0d:dd:01:fc:35:94:
06:12:b9:4d:84:a4:c6:ac:9c:35:80:1b:6d:fc:5c:
b6:fb:f4:5d:fe:b9:6c:e5:8d:ec:27:c0:a9:b3:73:
8d:73:2a:62:11:11:39:09:89:4f:c9:47:6b:a9:60:
51:c7:f4:eb:06:0e:f0:2e:2e:ed:49:6d:31:e7:84:
79:4c:ed:05:11:48:b9:f3:d0:18:39:c6:d6:60:c5:
1d:c4:10:69:18:7d:53:f8:92:91:91:59:0e:af:da:
88:8e:46:a4:79:7c:27:06:98:ad:e4:aa:60:9c:2d:
cf:97:42:d8:5d:81:49:f6:d1:87:68:3e:81:60:20:
90:59:82:48:18:f3:46:32:9b:d6:76:54:62:9a:a9:
eb:bd:f4:ec:6b:10:6f:8a:ac:4b:f2:8c:76:c8:55:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:99:73:34:44:1C:78:D5:79:5D:33:CE:DE:21:47:B2:EF:A7:79:83
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BplzNEQceNV5XTPO3iFHsu-neYM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.56.0/24
Signature Algorithm: sha256WithRSAEncryption
99:21:04:6d:c3:0b:36:20:2c:48:78:9b:8e:1e:e0:ee:62:ac:
ed:5b:8b:ee:ec:7f:cf:32:ac:e1:8f:c6:1c:d2:20:65:c5:04:
ec:08:35:fa:9a:db:89:26:6c:82:f5:04:46:c9:b3:a2:5c:5d:
95:f5:5f:37:63:06:2d:45:5e:01:cc:89:f3:b2:9f:de:fe:99:
a6:11:0c:fa:4e:b1:cf:91:82:aa:a8:7c:81:ed:43:83:f5:a9:
07:a1:54:05:cd:be:eb:2b:b6:66:09:a0:26:51:a2:1a:61:0a:
a8:84:e9:d6:f9:fc:4b:8a:d7:d7:90:34:3f:60:d9:29:ea:e0:
71:d2:b8:99:c7:e0:be:c3:01:e6:7c:71:26:b1:f5:56:52:bf:
d6:4e:62:f3:e4:27:cd:b6:e8:93:7b:37:21:0c:dc:09:f6:16:
4f:42:b2:cd:ed:77:1b:2c:1f:3c:3c:51:f9:df:17:0f:ec:ac:
2a:b6:d8:4c:37:d7:9c:0b:b1:d9:73:85:f4:8c:86:37:50:9f:
6c:12:89:0d:11:11:cc:f5:66:0b:9e:f2:54:9b:b7:96:fc:01:
a7:d3:9e:35:82:38:57:e3:87:af:b1:56:e1:80:cd:43:8c:e7:
be:e4:45:63:99:cd:f8:aa:24:44:47:59:27:0c:4a:e9:d4:c7:
e8:1a:76:c4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDA2OTk3MzM0NDQxQzc4
RDU3OTVEMzNDRURFMjE0N0IyRUZBNzc5ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOSCokBWZE0+Yh4z7kl5lwAdAWI4m5CA4LjPSxyAQf1i6PsbFD
m0fTXmEgeCTG1vL7LEqjuX4jWgpyxLgz9RnGQJcZyz0rkyA0+EudtmsjHwfKgin1
lc+fAyCG2RM75sP2sw3dAfw1lAYSuU2EpMasnDWAG238XLb79F3+uWzljewnwKmz
c41zKmIRETkJiU/JR2upYFHH9OsGDvAuLu1JbTHnhHlM7QURSLnz0Bg5xtZgxR3E
EGkYfVP4kpGRWQ6v2oiORqR5fCcGmK3kqmCcLc+XQthdgUn20YdoPoFgIJBZgkgY
80Yym9Z2VGKaqeu99OxrEG+KrEvyjHbIVVQdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUBplzNEQceNV5XTPO3iFHsu+neYMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0JwbHpORVFjZU5WNVhUUE8z
aUZIc3UtbmVZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2jgwDQYJKoZIhvcNAQELBQADggEBAJkhBG3DCzYgLEh4m44e4O5irO1bi+7sf88y
rOGPxhzSIGXFBOwINfqa24kmbIL1BEbJs6JcXZX1XzdjBi1FXgHMifOyn97+maYR
DPpOsc+RgqqofIHtQ4P1qQehVAXNvusrtmYJoCZRohphCqiE6db5/EuK19eQND9g
2Snq4HHSuJnH4L7DAeZ8cSax9VZSv9ZOYvPkJ8226JN7NyEM3An2Fk9Css3tdxss
Hzw8UfnfFw/srCq22Ew315wLsdlzhfSMhjdQn2wSiQ0REcz1Zgue8lSbt5b8AafT
njWCOFfjh6+xVuGAzUOM577kRWOZzfiqJERHWScMSunUx+gadsQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:34 2023 by rpki-client on console-ams.rpki-client.org