Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GkqNVWCCrWU-yZO7uu8Wg4emIIE.roa
File: GkqNVWCCrWU-yZO7uu8Wg4emIIE.roa (raw, json)
Hash identifier: BqOllSS00wlQiDa9sAfQ0TcQxBicCp4JxP+58w/hX/I=
Subject key identifier: 1A:4A:8D:55:60:82:AD:65:3E:C9:93:BB:BA:EF:16:83:87:A6:20:81
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B48
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GkqNVWCCrWU-yZO7uu8Wg4emIIE.roa
Signing time: Tue 29 Sep 2020 10:08:14 +0000
ROA not before: Tue 29 Sep 2020 10:08:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2888 (0xb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1A4A8D556082AD653EC993BBBAEF168387A62081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:0e:f2:30:31:72:ed:ea:80:57:f4:14:7b:
33:c0:f8:11:f6:2e:c8:2e:e4:34:aa:69:2b:0f:d9:
6c:68:82:0e:5f:88:9f:ff:2d:7f:3d:b3:99:44:76:
89:8c:27:b4:ec:fb:37:da:31:15:7e:81:ac:6d:73:
49:10:cc:e3:45:a8:ed:d1:f9:05:18:03:24:7b:10:
79:38:70:63:3f:db:8a:00:74:73:83:27:b1:e0:89:
b7:86:3f:2d:7a:c1:89:41:9d:10:e4:e8:c7:4d:45:
4a:ea:07:69:e4:4e:b4:50:a4:de:5c:96:20:1c:81:
8e:df:ef:ea:c8:2f:e8:12:35:e2:71:57:e9:69:33:
03:c0:dd:21:3b:c7:c8:db:fb:c5:75:67:bc:42:f8:
8b:e5:b1:04:ee:3f:ad:84:84:3e:31:da:4b:06:28:
e0:07:53:21:c7:d1:0c:e7:20:e3:5a:6d:03:ae:a5:
b1:f1:5e:18:ee:63:ff:69:00:a8:f5:23:8a:17:7e:
48:4b:27:12:db:ec:64:39:4a:78:dd:44:a8:69:e7:
80:70:c3:5d:03:78:2a:6c:e6:94:39:5b:e7:8c:e7:
d8:2f:3e:05:25:1e:15:43:1e:f2:7f:41:b6:7e:82:
07:6d:9c:c5:38:0e:5e:8b:e8:4e:19:ea:19:cd:5a:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:8D:55:60:82:AD:65:3E:C9:93:BB:BA:EF:16:83:87:A6:20:81
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GkqNVWCCrWU-yZO7uu8Wg4emIIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.135.0/24
Signature Algorithm: sha256WithRSAEncryption
70:63:6f:54:88:00:28:fb:8d:c5:06:aa:da:03:e1:09:ee:b4:
3c:1c:8b:fd:01:db:b6:fb:1f:51:4f:44:04:81:42:8c:95:18:
5b:25:84:4f:76:a6:50:35:24:cc:e9:e4:9f:ef:4d:ba:8b:7c:
1c:85:a8:7b:62:86:9f:a3:98:0f:c2:5f:5b:15:9d:2d:ce:3c:
2a:6d:61:a6:51:d6:84:aa:16:27:87:4b:47:0f:91:97:78:4f:
e7:17:fd:c0:99:1d:5f:b5:a3:de:5a:3b:2b:7f:22:bd:c1:63:
e0:8e:47:82:0a:a0:98:e1:76:b3:51:4f:db:1e:3c:a6:5c:2f:
ec:94:e0:4a:12:9b:fa:4e:d1:b3:9b:7d:40:07:92:34:79:6c:
4d:7e:fb:45:9a:44:54:41:7d:b4:b2:dd:68:2a:c6:01:27:ea:
78:01:67:bb:e1:63:48:df:47:dd:04:4e:f0:44:a5:bd:f4:19:
5e:35:34:00:43:c7:1d:a1:bc:06:93:a0:22:7e:9c:90:16:64:
7d:37:1e:05:44:1d:53:48:9e:9e:a0:c5:03:97:6d:27:84:b9:
2f:21:8c:ce:2b:f3:c9:cb:30:76:aa:e7:ad:c1:cd:8e:62:e5:
00:46:97:b5:26:b7:83:b7:47:35:c9:c5:20:e0:57:d7:e1:80:
0f:3a:5c:57
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDFBNEE4RDU1NjA4MkFE
NjUzRUM5OTNCQkJBRUYxNjgzODdBNjIwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQKw7yMDFy7eqAV/QUezPA+BH2Lsgu5DSqaSsP2Wxogg5fiJ//
LX89s5lEdomMJ7Ts+zfaMRV+gaxtc0kQzONFqO3R+QUYAyR7EHk4cGM/24oAdHOD
J7HgibeGPy16wYlBnRDk6MdNRUrqB2nkTrRQpN5cliAcgY7f7+rIL+gSNeJxV+lp
MwPA3SE7x8jb+8V1Z7xC+IvlsQTuP62EhD4x2ksGKOAHUyHH0QznIONabQOupbHx
XhjuY/9pAKj1I4oXfkhLJxLb7GQ5SnjdRKhp54Bww10DeCps5pQ5W+eM59gvPgUl
HhVDHvJ/QbZ+ggdtnMU4Dl6L6E4Z6hnNWo5hAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGkqNVWCCrWU+yZO7uu8Wg4emIIEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0drcU5WV0NDcldVLXlaTzd1
dThXZzRlbUlJRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2ocwDQYJKoZIhvcNAQELBQADggEBAHBjb1SIACj7jcUGqtoD4QnutDwci/0B27b7
H1FPRASBQoyVGFslhE92plA1JMzp5J/vTbqLfByFqHtihp+jmA/CX1sVnS3OPCpt
YaZR1oSqFieHS0cPkZd4T+cX/cCZHV+1o95aOyt/Ir3BY+COR4IKoJjhdrNRT9se
PKZcL+yU4EoSm/pO0bObfUAHkjR5bE1++0WaRFRBfbSy3WgqxgEn6ngBZ7vhY0jf
R90ETvBEpb30GV41NABDxx2hvAaToCJ+nJAWZH03HgVEHVNInp6gxQOXbSeEuS8h
jM4r88nLMHaq563BzY5i5QBGl7Umt4O3RzXJxSDgV9fhgA86XFc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org