Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cp5HEARZFdU-fG7l_-TddsuOvv8.roa
File: cp5HEARZFdU-fG7l_-TddsuOvv8.roa (raw, json)
Hash identifier: QS7vjySG/YdEr31cl5tAnUkMdObDS/KBljOgoT8DuiM=
Subject key identifier: 72:9E:47:10:04:59:15:D5:3E:7C:6E:E5:FF:E4:DD:76:CB:8E:BE:FF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1115
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cp5HEARZFdU-fG7l_-TddsuOvv8.roa
Signing time: Sun 07 Feb 2021 13:03:31 +0000
ROA not before: Sun 07 Feb 2021 13:03:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4373 (0x1115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:03:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=729E4710045915D53E7C6EE5FFE4DD76CB8EBEFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:02:67:42:f3:f3:fd:01:f5:6a:ca:20:84:
74:18:9b:85:75:85:39:9e:26:16:7c:79:38:a7:f8:
a3:4d:d1:4e:15:7d:20:32:ed:1c:6d:a4:e6:05:4d:
78:0c:c8:db:2f:a3:fb:6e:43:22:22:17:df:42:6b:
05:0c:12:4b:fe:72:15:a4:88:17:bd:7c:14:fa:cb:
5e:85:5d:c7:86:a0:8e:63:16:8a:c2:e0:9f:55:a2:
9a:a3:68:c0:9f:7c:f4:5b:0a:c9:32:f5:28:74:3a:
26:93:db:6b:80:91:26:e3:7f:16:df:46:8d:1d:de:
7d:f8:6f:88:f9:27:7d:ec:00:e7:5b:50:06:78:6d:
07:b9:08:0a:05:ff:8b:09:c0:59:2e:f7:84:4a:70:
c1:90:74:8f:f4:70:9d:9f:54:d9:e8:a5:e1:77:7b:
05:ed:8a:c0:c6:00:2d:3f:0c:5c:78:06:60:81:82:
e3:1c:7b:a8:42:58:3f:eb:8f:cc:a0:3f:d4:ce:23:
69:2c:be:cc:fc:b1:d1:68:dc:ea:a6:ab:f2:c8:58:
81:86:20:07:50:d7:ec:d9:ac:0a:90:b6:14:94:e0:
41:d9:c0:ea:28:8b:7a:1b:04:52:63:92:32:7b:47:
f0:34:c0:2a:b6:50:b2:01:ef:fb:bd:d8:2a:cb:c7:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:47:10:04:59:15:D5:3E:7C:6E:E5:FF:E4:DD:76:CB:8E:BE:FF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cp5HEARZFdU-fG7l_-TddsuOvv8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.84.0/22
Signature Algorithm: sha256WithRSAEncryption
72:fb:b7:30:21:6d:57:67:31:47:7e:11:77:3c:39:ea:86:23:
fa:06:2b:56:d3:93:fd:8d:c1:9c:b8:03:dc:f2:60:50:9e:08:
a2:6a:a7:9c:d9:a5:8a:98:aa:de:05:33:d4:99:8d:cb:67:06:
5f:63:9c:8c:2b:32:53:cd:28:41:8f:7f:1f:44:49:10:ee:ca:
a4:fe:ad:c8:b8:2f:09:6b:cd:0d:a3:3a:e3:65:af:5c:3f:a7:
df:41:f9:28:d7:eb:22:48:f1:54:b7:ff:e9:fc:72:4d:97:9d:
a8:36:fe:04:84:4e:f5:a1:24:92:f0:5f:0d:6b:b5:0d:41:ad:
33:bb:92:7c:4d:77:de:cb:e7:d2:54:7e:da:3b:95:8d:a8:2d:
fe:cd:26:29:aa:4f:4a:d1:fe:44:24:6e:1c:e3:83:ae:4f:15:
a9:ff:02:2f:06:5a:21:e5:e1:10:3a:aa:2a:6c:91:b2:09:47:
72:d2:bc:80:32:d5:40:a2:78:09:c8:a1:6b:e5:6b:b5:a8:a9:
e8:cd:d0:cd:b0:5d:ce:6e:bf:c4:07:4a:ff:b9:93:b9:b2:f3:
eb:58:0b:6c:da:a6:32:c7:a8:aa:6b:07:60:25:96:37:93:32:
1e:63:54:bb:a0:6f:2f:1f:a2:c0:ea:57:b4:dd:48:b9:97:ce:
25:bb:13:63
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICERUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MzAzMzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDcyOUU0NzEwMDQ1OTE1
RDUzRTdDNkVFNUZGRTRERDc2Q0I4RUJFRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG4AJnQvPz/QH1asoghHQYm4V1hTmeJhZ8eTin+KNN0U4VfSAy
7RxtpOYFTXgMyNsvo/tuQyIiF99CawUMEkv+chWkiBe9fBT6y16FXceGoI5jForC
4J9VopqjaMCffPRbCsky9Sh0OiaT22uAkSbjfxbfRo0d3n34b4j5J33sAOdbUAZ4
bQe5CAoF/4sJwFku94RKcMGQdI/0cJ2fVNnopeF3ewXtisDGAC0/DFx4BmCBguMc
e6hCWD/rj8ygP9TOI2ksvsz8sdFo3Oqmq/LIWIGGIAdQ1+zZrAqQthSU4EHZwOoo
i3obBFJjkjJ7R/A0wCq2ULIB7/u92CrLxyTZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcp5HEARZFdU+fG7l/+TddsuOvv8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2NwNUhFQVJaRmRVLWZHN2xf
LVRkZHN1T3Z2OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2lQwDQYJKoZIhvcNAQELBQADggEBAHL7tzAhbVdnMUd+EXc8OeqGI/oGK1bTk/2N
wZy4A9zyYFCeCKJqp5zZpYqYqt4FM9SZjctnBl9jnIwrMlPNKEGPfx9ESRDuyqT+
rci4LwlrzQ2jOuNlr1w/p99B+SjX6yJI8VS3/+n8ck2Xnag2/gSETvWhJJLwXw1r
tQ1BrTO7knxNd97L59JUfto7lY2oLf7NJimqT0rR/kQkbhzjg65PFan/Ai8GWiHl
4RA6qipskbIJR3LSvIAy1UCieAnIoWvla7WoqejN0M2wXc5uv8QHSv+5k7my8+tY
C2zapjLHqKprB2AlljeTMh5jVLugby8fosDqV7TdSLmXziW7E2M=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org