Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ndg_N3kvF8yYLOyEDiEufahhR6o.roa
File: Ndg_N3kvF8yYLOyEDiEufahhR6o.roa (raw, json)
Hash identifier: fHHNPsHR6lQveCOqwMOhojCz0Zf4iQ5JMaUjwEKzI+g=
Subject key identifier: 35:D8:3F:37:79:2F:17:CC:98:2C:EC:84:0E:21:2E:7D:A8:61:47:AA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1304
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ndg_N3kvF8yYLOyEDiEufahhR6o.roa
Signing time: Wed 29 Sep 2021 02:55:16 +0000
ROA not before: Wed 29 Sep 2021 02:55:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4868 (0x1304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=35D83F37792F17CC982CEC840E212E7DA86147AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:8a:ce:1e:2c:c1:82:df:05:ac:6c:40:be:
f1:86:82:6d:ce:eb:1c:92:29:5a:a7:5d:af:78:9e:
cc:44:91:cb:6a:8b:76:e9:6b:d7:80:aa:ff:ba:25:
0f:17:a6:7e:1f:37:e9:c8:49:10:6a:76:ef:69:a7:
7e:1b:9c:75:61:c9:a8:10:8f:9a:71:4f:0b:69:5a:
16:ca:6c:9f:e5:42:c8:a8:b6:89:6b:c3:f6:5f:3d:
69:cf:9d:67:fd:87:1f:75:75:64:a9:ee:bf:9b:9c:
98:8e:08:cc:97:b4:42:ca:83:54:53:1c:78:4e:92:
75:98:1c:89:2e:f6:88:12:28:59:bf:c1:a7:ff:bb:
04:83:57:bd:0a:a0:cd:3d:eb:6d:0e:1f:d4:99:61:
33:f7:b0:87:24:89:51:9c:7a:7a:a1:f3:8c:d8:77:
16:01:f3:d3:ec:f1:40:7a:b4:d2:5b:19:93:29:37:
00:82:9a:63:33:73:95:37:5e:ea:99:a2:11:07:45:
27:b2:51:7f:7d:55:4d:2b:3b:27:09:da:17:c6:a0:
6d:0f:9e:9a:81:ea:68:83:4c:55:18:1d:ab:41:5c:
57:f0:de:3a:6e:de:23:f3:3b:45:9e:33:ca:b4:90:
01:bd:7e:3d:ee:8b:29:e5:3f:ca:bf:db:a3:2b:26:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:3F:37:79:2F:17:CC:98:2C:EC:84:0E:21:2E:7D:A8:61:47:AA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ndg_N3kvF8yYLOyEDiEufahhR6o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.176.0/22
Signature Algorithm: sha256WithRSAEncryption
11:14:a1:1e:8a:f0:37:59:27:80:64:84:cc:20:dd:a9:e8:3c:
66:38:fe:bd:35:2b:85:86:3d:b5:0c:8e:f6:d9:6b:72:be:ba:
f9:b4:e6:a9:00:01:e6:0c:ac:9a:04:85:62:3d:4c:c6:3a:ee:
99:15:fd:e8:b0:87:aa:27:9c:98:03:6e:96:25:fc:98:55:b6:
23:0e:10:a5:ec:3c:35:c1:4b:0a:41:af:2b:21:18:41:ae:87:
40:f4:d2:9a:b4:01:a3:84:77:e8:ca:17:92:0f:88:ce:90:fe:
5c:2c:2e:64:cf:c7:db:58:76:6a:98:d5:0d:dc:23:dc:5b:7e:
e9:c6:4c:1d:bc:d2:7e:81:e6:a5:f6:84:19:67:b4:28:f2:6a:
ad:d5:6d:28:24:2e:34:4a:db:e6:3c:c4:76:6f:8f:54:05:c0:
df:74:7a:62:49:cf:d0:3f:94:a8:cc:c9:4a:9b:b2:e7:59:01:
26:0c:09:a7:08:42:42:84:e7:97:2d:86:5c:c3:72:cb:37:44:
34:02:96:71:1a:de:cc:4c:d2:e4:d2:ec:b2:71:8a:96:82:11:
3c:37:91:c6:1c:6f:16:d6:e7:74:a1:e6:a9:a1:74:9e:6c:02:
0a:dc:80:dc:1a:c0:cf:a1:be:c9:87:df:8c:bb:bd:d0:06:65:
76:03:da:a4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEwQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDM1RDgzRjM3NzkyRjE3
Q0M5ODJDRUM4NDBFMjEyRTdEQTg2MTQ3QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw74rOHizBgt8FrGxAvvGGgm3O6xySKVqnXa94nsxEkctqi3bp
a9eAqv+6JQ8Xpn4fN+nISRBqdu9pp34bnHVhyagQj5pxTwtpWhbKbJ/lQsiotolr
w/ZfPWnPnWf9hx91dWSp7r+bnJiOCMyXtELKg1RTHHhOknWYHIku9ogSKFm/waf/
uwSDV70KoM09620OH9SZYTP3sIckiVGcenqh84zYdxYB89Ps8UB6tNJbGZMpNwCC
mmMzc5U3XuqZohEHRSeyUX99VU0rOycJ2hfGoG0PnpqB6miDTFUYHatBXFfw3jpu
3iPzO0WeM8q0kAG9fj3uiynlP8q/26MrJrM3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNdg/N3kvF8yYLOyEDiEufahhR6owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL05kZ19OM2t2Rjh5WUxPeUVE
aUV1ZmFoaFI2by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2rAwDQYJKoZIhvcNAQELBQADggEBABEUoR6K8DdZJ4BkhMwg3anoPGY4/r01K4WG
PbUMjvbZa3K+uvm05qkAAeYMrJoEhWI9TMY67pkV/eiwh6onnJgDbpYl/JhVtiMO
EKXsPDXBSwpBryshGEGuh0D00pq0AaOEd+jKF5IPiM6Q/lwsLmTPx9tYdmqY1Q3c
I9xbfunGTB280n6B5qX2hBlntCjyaq3VbSgkLjRK2+Y8xHZvj1QFwN90emJJz9A/
lKjMyUqbsudZASYMCacIQkKE55cthlzDcss3RDQClnEa3sxM0uTS7LJxipaCETw3
kcYcbxbW53Sh5qmhdJ5sAgrcgNwawM+hvsmH34y7vdAGZXYD2qQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org