Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R6e61w4Qc5ZONpFgfu9qXfafZCM.roa
File: R6e61w4Qc5ZONpFgfu9qXfafZCM.roa (raw, json)
Hash identifier: 78ihh0dl3xfQsD1gVFSheVA3F04usOvC8eCHHQVma5c=
Subject key identifier: 47:A7:BA:D7:0E:10:73:96:4E:36:91:60:7E:EF:6A:5D:F6:9F:64:23
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1317
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R6e61w4Qc5ZONpFgfu9qXfafZCM.roa
Signing time: Wed 29 Sep 2021 02:55:22 +0000
ROA not before: Wed 29 Sep 2021 02:55:22 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 180.218.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4887 (0x1317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:22 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=47A7BAD70E1073964E3691607EEF6A5DF69F6423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:94:d5:ea:07:db:00:34:03:3b:f7:9c:63:
76:03:00:df:a0:a9:90:bb:3a:21:49:34:b0:47:c2:
25:8f:b5:81:8e:72:85:da:88:f0:72:f4:a4:95:f5:
c1:b3:85:39:49:8f:e4:d5:c5:a8:bc:6f:03:32:ed:
26:cc:a8:dc:92:65:11:90:c1:2d:39:2c:63:b3:5a:
da:fc:60:b8:d7:7d:13:5b:98:0f:46:36:dc:7b:54:
f9:f8:1c:33:99:9b:bb:b1:3a:03:ae:87:f6:1e:06:
19:be:2a:71:84:87:b7:14:c5:59:40:7e:5d:4a:6b:
e0:1f:8a:84:44:5e:3e:94:cb:1d:8d:af:99:3b:4d:
46:05:1d:3a:fa:99:2c:3d:6d:0e:f1:5d:1e:dc:88:
22:6e:b6:7a:1e:d6:d2:ff:75:cc:92:bc:98:27:b8:
46:e9:fc:ee:ba:51:80:d2:27:86:bb:de:39:50:81:
25:31:8b:69:23:d2:09:c0:01:48:53:0e:1a:e9:b8:
f7:1e:07:77:5a:ce:d2:21:08:dd:bf:42:23:37:dd:
7e:7b:e7:56:aa:62:55:f1:fa:16:2c:b2:16:d9:56:
0d:47:ce:cc:1d:f9:18:d4:5e:f8:a1:0e:09:a9:ab:
75:42:72:b3:55:91:29:6d:18:c9:ed:4c:eb:bb:38:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:BA:D7:0E:10:73:96:4E:36:91:60:7E:EF:6A:5D:F6:9F:64:23
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R6e61w4Qc5ZONpFgfu9qXfafZCM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7d:5a:c9:70:e5:98:01:eb:4e:aa:91:fc:58:11:34:7b:34:
83:a0:41:de:7d:87:06:44:04:d9:16:13:21:04:1d:3a:d7:6d:
f5:5c:dc:da:93:56:0b:e8:1e:66:e1:2b:51:dc:39:0c:59:87:
79:46:b0:ac:3f:bb:cb:d2:9e:be:92:ae:60:32:04:b5:28:98:
f7:0d:87:ef:5b:29:7c:05:2d:25:18:53:29:67:67:f4:5e:66:
3c:b3:4b:c3:ff:8e:5d:ae:00:59:95:da:fb:9b:f8:52:98:dc:
9e:80:41:87:0d:0e:af:3a:72:7b:22:d6:ae:b5:80:0d:56:96:
47:c3:ac:aa:37:a5:fd:70:95:bf:63:c1:9e:fc:c6:7c:71:2d:
cd:d2:79:dd:46:b7:40:d4:67:7d:60:9c:c4:9c:b4:71:e3:2d:
7d:1c:75:22:46:c9:ca:f7:94:1c:2c:9e:e2:43:c5:04:d9:8a:
39:32:1a:31:b2:64:23:e1:3a:2d:4a:38:c3:93:e1:af:14:a8:
08:d4:15:62:4a:41:79:82:3b:7e:76:3c:29:26:c3:8d:90:20:
b1:a3:f3:18:bb:e3:36:af:c0:e9:ce:d3:b0:03:e8:0f:b2:3b:
02:50:eb:fd:86:dc:4d:6a:d3:13:70:8f:9c:4d:f4:9d:50:c9:
ea:3d:f5:46
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICExcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MjJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDQ3QTdCQUQ3MEUxMDcz
OTY0RTM2OTE2MDdFRUY2QTVERjY5RjY0MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK2pTV6gfbADQDO/ecY3YDAN+gqZC7OiFJNLBHwiWPtYGOcoXa
iPBy9KSV9cGzhTlJj+TVxai8bwMy7SbMqNySZRGQwS05LGOzWtr8YLjXfRNbmA9G
Ntx7VPn4HDOZm7uxOgOuh/YeBhm+KnGEh7cUxVlAfl1Ka+AfioREXj6Uyx2Nr5k7
TUYFHTr6mSw9bQ7xXR7ciCJutnoe1tL/dcySvJgnuEbp/O66UYDSJ4a73jlQgSUx
i2kj0gnAAUhTDhrpuPceB3daztIhCN2/QiM33X5751aqYlXx+hYsshbZVg1Hzswd
+RjUXvihDgmpq3VCcrNVkSltGMntTOu7OA3rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUR6e61w4Qc5ZONpFgfu9qXfafZCMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1I2ZTYxdzRRYzVaT05wRmdm
dTlxWGZhZlpDTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2uIwDQYJKoZIhvcNAQELBQADggEBAFx9Wslw5ZgB606qkfxYETR7NIOgQd59hwZE
BNkWEyEEHTrXbfVc3NqTVgvoHmbhK1HcOQxZh3lGsKw/u8vSnr6SrmAyBLUomPcN
h+9bKXwFLSUYUylnZ/ReZjyzS8P/jl2uAFmV2vub+FKY3J6AQYcNDq86cnsi1q61
gA1WlkfDrKo3pf1wlb9jwZ78xnxxLc3Sed1Gt0DUZ31gnMSctHHjLX0cdSJGycr3
lBwsnuJDxQTZijkyGjGyZCPhOi1KOMOT4a8UqAjUFWJKQXmCO352PCkmw42QILGj
8xi74zavwOnO07AD6A+yOwJQ6/2G3E1q0xNwj5xN9J1Qyeo99UY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org