Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jdgt3v4V7QVWg5_rULrnWyGTM8E.roa
File: Jdgt3v4V7QVWg5_rULrnWyGTM8E.roa (raw, json)
Hash identifier: /jahjyme/FP8F5k6R6kJ0HpI7BIacuM8B7V5+aX2R9E=
Subject key identifier: 25:D8:2D:DE:FE:15:ED:05:56:83:9F:EB:50:BA:E7:5B:21:93:33:C1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1087
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jdgt3v4V7QVWg5_rULrnWyGTM8E.roa
Signing time: Sun 07 Feb 2021 12:46:01 +0000
ROA not before: Sun 07 Feb 2021 12:46:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4231 (0x1087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=25D82DDEFE15ED0556839FEB50BAE75B219333C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:45:a4:bf:13:f6:27:96:3a:6d:d8:80:c4:
5c:e5:19:0b:69:2e:ad:15:9d:d5:02:35:34:1b:0a:
6b:aa:46:30:7c:8f:dd:a4:9e:58:49:0d:0a:a3:ee:
b1:b6:9c:59:bb:75:8f:a1:f4:46:1c:43:53:97:41:
a0:19:e5:fa:ab:63:83:fb:4b:8f:50:5b:3d:c6:fb:
d2:14:bb:76:d8:15:e6:2a:6c:23:56:82:b2:1c:a1:
ef:9f:e2:47:7f:0c:fe:72:a8:a2:8b:41:69:af:1e:
b0:1f:fb:f5:a8:62:ba:88:88:99:71:50:a8:b5:c0:
62:b8:15:8b:1a:1c:73:30:7f:8d:9a:ce:7e:28:b7:
00:97:97:6e:ce:c2:de:c3:31:b7:4a:65:53:58:53:
aa:d1:5b:a1:cf:d6:67:99:b8:2f:9f:3b:d9:4d:9d:
d8:12:cc:6b:4b:9b:bf:1e:e6:f8:6d:08:a3:de:f6:
47:c8:95:b0:a1:35:6b:d6:4d:79:b8:2b:c7:e0:42:
3c:30:a7:79:75:1d:00:54:a5:86:a0:a1:15:c2:af:
c2:e0:04:6a:ee:2e:d7:db:fb:bb:f4:7f:3c:94:a2:
94:80:ec:17:25:87:a4:9b:b3:cb:1c:81:ca:e6:77:
8f:fc:3c:ec:88:46:87:f3:90:67:7c:7c:49:70:78:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:2D:DE:FE:15:ED:05:56:83:9F:EB:50:BA:E7:5B:21:93:33:C1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jdgt3v4V7QVWg5_rULrnWyGTM8E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8a:32:85:86:6d:c8:32:9f:a1:c5:8a:d0:c6:97:21:71:6d:
6d:ff:28:b2:3c:50:ca:c1:1b:41:23:0a:a0:92:de:78:3d:d5:
a4:40:8d:d8:b2:64:2d:cb:c7:fc:bf:98:32:9f:f4:d6:ba:70:
7e:6f:0f:87:88:a2:43:cb:2b:1b:f9:58:01:30:1b:db:95:e8:
00:e6:b1:7e:b5:15:cc:f4:9c:e4:7c:20:d6:2c:be:55:06:f1:
d5:fe:94:ee:24:1f:a0:d0:d8:2d:aa:e2:a9:46:9a:f6:bc:fc:
f2:24:cd:ce:34:27:46:6a:6a:cc:c8:ff:ab:3e:ec:94:e3:c5:
60:7b:47:b1:ee:34:05:92:74:9c:4f:3e:3e:7a:61:39:ac:6b:
8b:d9:de:14:33:7f:14:eb:24:76:93:26:05:b5:f2:02:06:df:
cc:81:a7:7c:77:17:90:f6:e6:c3:d5:2a:43:bb:3d:ba:ad:73:
fc:41:e6:5f:ca:19:5d:37:f3:3e:d0:df:e9:e3:23:12:6f:30:
9f:aa:7e:8a:68:f8:9d:dc:0d:c6:27:c9:b7:01:18:82:32:3d:
ec:3c:46:ef:45:ad:76:a9:ff:0d:b7:3e:b8:dc:ff:b7:07:c2:
d7:f8:b2:05:5b:26:89:c2:d1:6c:7d:b8:d9:42:5b:17:e1:d8:
09:c3:29:95
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ2MDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI1RDgyRERFRkUxNUVE
MDU1NjgzOUZFQjUwQkFFNzVCMjE5MzMzQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIPkWkvxP2J5Y6bdiAxFzlGQtpLq0VndUCNTQbCmuqRjB8j92k
nlhJDQqj7rG2nFm7dY+h9EYcQ1OXQaAZ5fqrY4P7S49QWz3G+9IUu3bYFeYqbCNW
grIcoe+f4kd/DP5yqKKLQWmvHrAf+/WoYrqIiJlxUKi1wGK4FYsaHHMwf42azn4o
twCXl27Owt7DMbdKZVNYU6rRW6HP1meZuC+fO9lNndgSzGtLm78e5vhtCKPe9kfI
lbChNWvWTXm4K8fgQjwwp3l1HQBUpYagoRXCr8LgBGruLtfb+7v0fzyUopSA7Bcl
h6Sbs8scgcrmd4/8POyIRofzkGd8fElweFGbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJdgt3v4V7QVWg5/rULrnWyGTM8EwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0pkZ3QzdjRWN1FWV2c1X3JV
THJuV3lHVE04RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2rwwDQYJKoZIhvcNAQELBQADggEBACyKMoWGbcgyn6HFitDGlyFxbW3/KLI8UMrB
G0EjCqCS3ng91aRAjdiyZC3Lx/y/mDKf9Na6cH5vD4eIokPLKxv5WAEwG9uV6ADm
sX61Fcz0nOR8INYsvlUG8dX+lO4kH6DQ2C2q4qlGmva8/PIkzc40J0ZqaszI/6s+
7JTjxWB7R7HuNAWSdJxPPj56YTmsa4vZ3hQzfxTrJHaTJgW18gIG38yBp3x3F5D2
5sPVKkO7Pbqtc/xB5l/KGV038z7Q3+njIxJvMJ+qfopo+J3cDcYnybcBGIIyPew8
Ru9FrXap/w23Prjc/7cHwtf4sgVbJonC0Wx9uNlCWxfh2AnDKZU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org