Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzKwzoEMWaoodOI9sdBvbidS4zQ.roa
File: qzKwzoEMWaoodOI9sdBvbidS4zQ.roa (raw, json)
Hash identifier: VZQ7iIG/Ozp3CmN1xesoL4lY93I5s6Z8hRmcoTJasC4=
Subject key identifier: AB:32:B0:CE:81:0C:59:AA:28:74:E2:3D:B1:D0:6F:6E:27:52:E3:34
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10A1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzKwzoEMWaoodOI9sdBvbidS4zQ.roa
Signing time: Sun 07 Feb 2021 12:46:42 +0000
ROA not before: Sun 07 Feb 2021 12:46:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4257 (0x10a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AB32B0CE810C59AA2874E23DB1D06F6E2752E334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:4a:ae:3a:0f:e9:30:1b:31:43:c6:5a:44:
35:e6:09:ba:05:40:bb:48:a2:82:f4:ba:ad:b8:87:
82:d4:38:3a:9a:5d:7e:1b:cf:ca:99:82:31:0e:70:
e5:56:d7:43:cc:43:70:7f:9e:29:35:e6:0f:e3:55:
f5:75:66:aa:45:db:c9:e4:1f:fa:b9:62:b9:fc:ae:
29:64:19:1f:3a:5b:80:81:ad:81:12:e8:be:33:ce:
de:d4:a3:3d:f6:98:cb:27:92:72:86:db:9e:b4:ea:
12:7e:4f:30:b6:46:be:70:df:4f:e8:58:31:59:cf:
8a:47:7b:5e:d6:35:46:ed:0f:db:6f:f3:6c:00:f3:
90:31:5d:0c:0d:9c:59:59:1c:c2:83:63:84:41:a1:
20:38:76:f4:c6:02:0c:30:b7:e4:06:62:9a:dc:f1:
0d:2e:52:ba:b9:53:12:1b:a0:67:69:13:5b:46:df:
46:5f:e9:c7:2a:b7:f8:b8:71:ae:f9:1c:db:2a:8a:
6e:49:5c:94:6c:e9:5e:bb:f4:ea:31:52:af:8d:89:
d9:ff:d9:e8:1d:30:36:64:5c:6c:b3:35:b7:cb:45:
4c:f4:46:e2:b7:57:09:da:e2:e6:1f:06:5c:97:43:
26:81:93:10:5a:9c:a9:6c:5f:b2:79:32:e4:d4:90:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:B0:CE:81:0C:59:AA:28:74:E2:3D:B1:D0:6F:6E:27:52:E3:34
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qzKwzoEMWaoodOI9sdBvbidS4zQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.133.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f7:2a:d2:6c:25:4b:7c:0f:74:7a:be:cd:45:d2:8d:95:59:
7c:32:7e:d6:f5:44:16:d5:0b:0b:7a:14:44:26:a4:a8:6d:85:
18:9d:47:78:1d:5c:19:86:f6:6e:cd:29:1f:dc:03:e2:64:f6:
cc:13:a8:d6:49:ce:2d:b0:ba:51:6b:a1:2e:0f:6f:ef:55:fb:
58:ca:6b:0b:4e:9d:90:db:1f:7c:35:fd:01:d6:74:03:84:fd:
6d:7c:d4:61:f8:71:a1:12:e6:e1:8b:81:10:25:f2:85:13:42:
03:5d:c3:96:b8:5c:85:4d:2a:35:f2:11:70:04:b3:31:f2:78:
48:b4:49:0f:43:5e:08:37:71:b1:eb:25:78:a1:97:47:b2:00:
3a:b4:cc:54:c7:53:a2:11:0a:e4:ff:69:87:63:11:19:cb:5e:
a8:70:e9:d9:34:63:06:c1:19:d2:b0:46:b0:1b:86:09:9f:84:
5c:84:66:ae:30:3d:2a:cf:4a:32:b6:06:cb:1a:77:8f:f5:fc:
0b:7e:57:20:06:eb:ae:9c:4a:42:14:51:e1:05:af:ff:dc:1d:
5d:98:8e:13:ea:95:9b:b9:7d:56:62:65:f0:e3:fe:3e:d8:69:
1c:d2:1d:d6:dc:2f:a0:7f:71:f8:92:b6:0e:b9:6d:1a:a8:6f:
c2:94:c7:57
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ2NDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFCMzJCMENFODEwQzU5
QUEyODc0RTIzREIxRDA2RjZFMjc1MkUzMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC750quOg/pMBsxQ8ZaRDXmCboFQLtIooL0uq24h4LUODqaXX4b
z8qZgjEOcOVW10PMQ3B/nik15g/jVfV1ZqpF28nkH/q5Yrn8rilkGR86W4CBrYES
6L4zzt7Uoz32mMsnknKG25606hJ+TzC2Rr5w30/oWDFZz4pHe17WNUbtD9tv82wA
85AxXQwNnFlZHMKDY4RBoSA4dvTGAgwwt+QGYprc8Q0uUrq5UxIboGdpE1tG30Zf
6ccqt/i4ca75HNsqim5JXJRs6V679OoxUq+Nidn/2egdMDZkXGyzNbfLRUz0RuK3
Vwna4uYfBlyXQyaBkxBanKlsX7J5MuTUkDGVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqzKwzoEMWaoodOI9sdBvbidS4zQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3F6S3d6b0VNV2Fvb2RPSTlz
ZEJ2YmlkUzR6US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2oUwDQYJKoZIhvcNAQELBQADggEBAEj3KtJsJUt8D3R6vs1F0o2VWXwyftb1RBbV
Cwt6FEQmpKhthRidR3gdXBmG9m7NKR/cA+Jk9swTqNZJzi2wulFroS4Pb+9V+1jK
awtOnZDbH3w1/QHWdAOE/W181GH4caES5uGLgRAl8oUTQgNdw5a4XIVNKjXyEXAE
szHyeEi0SQ9DXgg3cbHrJXihl0eyADq0zFTHU6IRCuT/aYdjERnLXqhw6dk0YwbB
GdKwRrAbhgmfhFyEZq4wPSrPSjK2Bssad4/1/At+VyAG666cSkIUUeEFr//cHV2Y
jhPqlZu5fVZiZfDj/j7YaRzSHdbcL6B/cfiStg65bRqob8KUx1c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org