Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uZ6OVzIuUErJWEydqhWrRxcnvco.roa
File: uZ6OVzIuUErJWEydqhWrRxcnvco.roa (raw, json)
Hash identifier: ojIOUIVFv9CQNI4Way4BqgmwpYCL/5lpfAU18vf9ZSM=
Subject key identifier: B9:9E:8E:57:32:2E:50:4A:C9:58:4C:9D:AA:15:AB:47:17:27:BD:CA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10AF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uZ6OVzIuUErJWEydqhWrRxcnvco.roa
Signing time: Sun 07 Feb 2021 12:47:01 +0000
ROA not before: Sun 07 Feb 2021 12:47:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 180.218.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4271 (0x10af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:47:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B99E8E57322E504AC9584C9DAA15AB471727BDCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:3e:54:e8:ec:d5:25:f8:a4:47:d9:a0:8e:
b1:03:65:fd:84:d2:8b:4a:fe:b0:d3:dd:32:3e:ee:
8e:35:7a:b3:66:af:83:71:f5:4f:1d:cc:08:71:a6:
c9:ab:75:4f:02:43:79:c5:68:2a:1b:31:a0:85:f7:
74:86:b8:72:18:29:46:ba:7d:b0:87:cb:2f:11:40:
5b:ce:68:da:1d:20:e3:72:ff:84:20:c0:a6:1f:f7:
fb:ed:9c:7a:e8:53:ce:d3:1a:9e:66:c0:9f:3f:42:
b6:9a:df:44:97:cb:df:5c:c3:07:e8:a5:66:59:21:
1f:1b:f0:05:73:5f:a1:43:e0:60:a7:5d:0c:6f:ac:
9a:57:5b:b2:b2:75:21:83:25:7c:a8:09:1c:fe:53:
f4:7d:35:ce:e4:77:41:8f:f0:9b:f7:b3:3e:4e:34:
3f:0a:16:93:67:bf:85:09:b0:56:f8:47:4c:55:2e:
8b:a7:9a:8c:20:19:fa:d9:54:e0:b3:69:bb:d5:33:
10:52:fb:0f:a0:ec:74:41:61:25:41:69:9d:1b:f6:
01:6d:f2:7d:61:6c:d0:06:d0:6c:20:05:0b:08:80:
f8:75:a8:9a:70:e9:8c:56:2d:1c:0c:ee:5f:6d:c6:
96:58:0b:dd:bf:83:1d:4e:78:be:e5:8b:2d:f4:62:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9E:8E:57:32:2E:50:4A:C9:58:4C:9D:AA:15:AB:47:17:27:BD:CA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uZ6OVzIuUErJWEydqhWrRxcnvco.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.104.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:16:f5:3b:b0:a4:4c:d0:89:cb:53:68:25:41:30:1a:af:86:
e5:5b:fe:d3:d5:88:3b:d1:b2:4f:bc:ba:fe:e0:fd:bb:1e:40:
76:34:2b:f7:62:78:26:79:27:da:1a:00:b5:74:c2:ed:a2:7d:
9c:5d:e2:d4:71:e9:77:40:8b:92:6d:61:1d:b7:b1:0c:98:51:
a3:2f:c6:52:72:77:a5:fc:f0:11:c1:3b:0a:4d:70:6a:43:78:
a0:50:55:e0:41:bb:fc:c4:dd:53:f9:7e:2b:37:ef:b5:d8:fb:
0c:52:72:f2:76:85:ee:f0:a9:ce:10:a1:db:7d:f9:ca:99:1c:
18:39:f1:ea:fb:c1:42:60:12:86:cf:74:72:9f:8e:f8:0e:7b:
6f:57:2a:32:5f:f1:49:e6:3e:65:65:57:65:f9:dc:1d:81:c7:
20:81:46:cd:28:13:ae:0c:15:6f:35:6f:35:7d:dd:64:fa:c0:
36:23:51:45:c4:da:6b:68:fa:c6:60:af:56:20:d2:e5:85:e6:
c2:e0:32:4d:d6:da:ae:ea:ca:bb:9e:5a:22:fd:b5:17:7e:11:
41:19:e3:98:00:50:85:51:c2:69:0b:0c:b9:e1:3a:f9:14:34:
4a:d6:b3:24:01:ac:79:dd:c7:01:21:c5:23:4d:76:82:7a:f3:
f0:8a:32:bb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ3MDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI5OUU4RTU3MzIyRTUw
NEFDOTU4NEM5REFBMTVBQjQ3MTcyN0JEQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqxD5U6OzVJfikR9mgjrEDZf2E0otK/rDT3TI+7o41erNmr4Nx
9U8dzAhxpsmrdU8CQ3nFaCobMaCF93SGuHIYKUa6fbCHyy8RQFvOaNodIONy/4Qg
wKYf9/vtnHroU87TGp5mwJ8/Qraa30SXy99cwwfopWZZIR8b8AVzX6FD4GCnXQxv
rJpXW7KydSGDJXyoCRz+U/R9Nc7kd0GP8Jv3sz5OND8KFpNnv4UJsFb4R0xVLoun
mowgGfrZVOCzabvVMxBS+w+g7HRBYSVBaZ0b9gFt8n1hbNAG0GwgBQsIgPh1qJpw
6YxWLRwM7l9txpZYC92/gx1OeL7liy30YnqjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuZ6OVzIuUErJWEydqhWrRxcnvcowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VaNk9Wekl1VUVySldFeWRx
aFdyUnhjbnZjby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2mgwDQYJKoZIhvcNAQELBQADggEBABwW9TuwpEzQictTaCVBMBqvhuVb/tPViDvR
sk+8uv7g/bseQHY0K/dieCZ5J9oaALV0wu2ifZxd4tRx6XdAi5JtYR23sQyYUaMv
xlJyd6X88BHBOwpNcGpDeKBQVeBBu/zE3VP5fis377XY+wxScvJ2he7wqc4Qodt9
+cqZHBg58er7wUJgEobPdHKfjvgOe29XKjJf8UnmPmVlV2X53B2BxyCBRs0oE64M
FW81bzV93WT6wDYjUUXE2mto+sZgr1Yg0uWF5sLgMk3W2q7qyrueWiL9tRd+EUEZ
45gAUIVRwmkLDLnhOvkUNErWsyQBrHndxwEhxSNNdoJ68/CKMrs=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org