Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2uWIJkud8CX3jhg7VPt4Ps-oKGU.roa
File: 2uWIJkud8CX3jhg7VPt4Ps-oKGU.roa (raw, json)
Hash identifier: LQWO5snygOFSUTt4trKCHRp7ZfbI/o9I6eYCYfre4K0=
Subject key identifier: DA:E5:88:26:4B:9D:F0:25:F7:8E:18:3B:54:FB:78:3E:CF:A8:28:65
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2uWIJkud8CX3jhg7VPt4Ps-oKGU.roa
Signing time: Thu 15 Sep 2022 02:35:57 +0000
ROA not before: Thu 15 Sep 2022 02:35:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.245.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DAE588264B9DF025F78E183B54FB783ECFA82865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:e0:b7:26:21:a8:5b:06:12:3d:0a:c7:47:
72:df:85:73:8e:63:7b:c1:e7:14:ca:36:87:e6:55:
5e:9e:2d:f7:2d:96:5d:52:e8:95:02:28:58:a8:06:
10:d1:76:78:86:e0:28:0f:e7:36:72:3f:79:2d:cb:
3a:62:7e:ec:88:60:70:ea:7d:f9:6d:be:84:7a:96:
66:53:cf:91:40:33:7d:a9:6e:c6:3b:02:e9:25:e1:
67:67:7d:83:d6:04:61:d2:40:d6:09:db:16:f0:88:
e6:c4:ae:81:0f:2d:93:1b:ed:8c:f3:f6:95:50:09:
c6:ee:f6:22:b0:f4:d2:fa:0e:ab:7c:51:11:c0:c9:
ff:e9:8c:79:ad:95:f6:7e:f5:3b:bb:4c:30:49:40:
a4:0c:3d:b7:28:c9:45:4a:50:44:73:62:64:f2:9e:
ef:fe:64:f7:e1:35:e3:b1:59:e8:f0:7e:e8:49:7a:
08:f7:82:3a:da:21:eb:f2:e9:06:80:b3:ba:4e:81:
52:10:99:12:1d:49:ab:52:39:3b:40:f6:45:0f:3f:
0e:7c:c5:57:a2:b2:16:33:c3:05:6b:22:7a:63:dd:
66:0f:c6:e3:6b:4a:6c:b2:f7:05:fc:a4:1f:cf:d1:
7e:66:1d:a6:02:a0:fb:e3:07:a8:45:40:ee:53:78:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E5:88:26:4B:9D:F0:25:F7:8E:18:3B:54:FB:78:3E:CF:A8:28:65
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2uWIJkud8CX3jhg7VPt4Ps-oKGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.245.0/26
Signature Algorithm: sha256WithRSAEncryption
66:76:5c:af:32:84:a6:58:80:2d:21:5e:97:8d:a4:d2:44:91:
dd:21:67:76:28:77:c2:db:c7:be:e1:60:f8:cb:22:0d:6e:8b:
a7:86:93:ce:47:2a:84:f2:dd:0b:e9:ed:aa:19:b3:d6:8a:88:
1e:d0:20:7a:1d:a3:0e:67:47:ab:f7:6e:25:ed:b4:18:2d:6e:
af:db:48:3e:93:58:12:88:7b:d2:45:e3:03:23:39:53:c4:b8:
eb:0d:2d:6f:dd:26:a8:ee:bb:39:65:5c:7b:91:7c:d7:25:8b:
be:6e:a6:e0:04:ae:f4:02:5a:e1:2f:0a:63:98:33:64:78:c8:
f2:16:c1:66:f7:bf:49:25:77:a0:f2:33:e6:61:fa:c9:73:33:
2c:72:ce:43:34:ae:21:77:43:60:a1:6d:92:65:fa:d1:d2:66:
8c:39:c5:73:8a:d1:23:05:da:19:cd:13:d5:28:97:2e:08:05:
b4:c2:9c:7b:bd:91:c4:da:42:8a:78:41:36:4c:fe:f0:e3:b7:
16:4c:8d:48:62:2d:65:22:fd:94:f2:11:71:90:3f:c5:8d:87:
c4:92:1f:d1:25:51:8b:46:ac:03:e4:c3:6f:e1:bf:c9:60:cc:
a0:24:03:58:35:4e:ed:e5:4a:f3:e3:e6:c4:ca:f1:1d:1a:61:
44:4a:04:18
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERBRTU4ODI2NEI5REYw
MjVGNzhFMTgzQjU0RkI3ODNFQ0ZBODI4NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc5OC3JiGoWwYSPQrHR3LfhXOOY3vB5xTKNofmVV6eLfctll1S
6JUCKFioBhDRdniG4CgP5zZyP3ktyzpifuyIYHDqffltvoR6lmZTz5FAM32pbsY7
Aukl4WdnfYPWBGHSQNYJ2xbwiObEroEPLZMb7Yzz9pVQCcbu9iKw9NL6Dqt8URHA
yf/pjHmtlfZ+9Tu7TDBJQKQMPbcoyUVKUERzYmTynu/+ZPfhNeOxWejwfuhJegj3
gjraIevy6QaAs7pOgVIQmRIdSatSOTtA9kUPPw58xVeishYzwwVrInpj3WYPxuNr
Smyy9wX8pB/P0X5mHaYCoPvjB6hFQO5TeK2DAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU2uWIJkud8CX3jhg7VPt4Ps+oKGUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJ1V0lKa3VkOENYM2poZzdW
UHQ0UHMtb0tHVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQa0
2vUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmdlyvMoSmWIAtIV6XjaTSRJHdIWd2KHfC
28e+4WD4yyINbounhpPORyqE8t0L6e2qGbPWioge0CB6HaMOZ0er924l7bQYLW6v
20g+k1gSiHvSReMDIzlTxLjrDS1v3Sao7rs5ZVx7kXzXJYu+bqbgBK70AlrhLwpj
mDNkeMjyFsFm979JJXeg8jPmYfrJczMscs5DNK4hd0NgoW2SZfrR0maMOcVzitEj
BdoZzRPVKJcuCAW0wpx7vZHE2kKKeEE2TP7w47cWTI1IYi1lIv2U8hFxkD/FjYfE
kh/RJVGLRqwD5MNv4b/JYMygJANYNU7t5Urz4+bEyvEdGmFESgQY
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org