Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FiurSPeVRRbk4VWndEqkDmgT7ds.roa
File: FiurSPeVRRbk4VWndEqkDmgT7ds.roa (raw, json)
Hash identifier: tqkg+UCTfm/A99NmReRy6wOgIcKIoVJ+wMVmJlaqKbk=
Subject key identifier: 16:2B:AB:48:F7:95:45:16:E4:E1:55:A7:74:4A:A4:0E:68:13:ED:DB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1983
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FiurSPeVRRbk4VWndEqkDmgT7ds.roa
Signing time: Sat 22 Oct 2022 06:06:37 +0000
ROA not before: Sat 22 Oct 2022 06:06:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6531 (0x1983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=162BAB48F7954516E4E155A7744AA40E6813EDDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:3d:22:0e:b1:c0:61:6c:b6:84:63:18:cd:
50:0b:60:a7:24:68:a8:41:9a:95:21:a6:59:86:ed:
ed:a0:1b:f5:92:a0:88:09:c2:64:0c:f7:77:1a:a0:
10:39:6e:bb:2c:88:2d:d5:97:f8:71:26:0e:95:05:
01:15:eb:2d:7c:f3:62:f6:b3:2a:bf:28:20:7c:a7:
01:f1:36:43:af:54:b0:1b:cc:5f:e0:4b:c5:b6:2f:
2f:68:da:e0:43:80:b4:74:7b:98:f5:9a:c3:fb:34:
fc:71:64:70:f1:64:a6:9d:36:26:ab:96:0b:cc:66:
32:56:d7:56:11:41:da:72:ea:58:c7:6c:f6:17:ae:
5e:a4:33:e8:d3:fb:ee:34:2d:be:74:8d:66:d5:47:
59:ac:bb:f4:23:3a:b6:23:6b:09:fc:b0:d5:33:e0:
2d:08:21:46:f2:24:3b:02:95:cd:91:2f:12:82:41:
e2:da:40:f7:98:45:2c:7b:d9:02:0a:5d:87:ca:28:
26:75:2f:dc:65:c0:21:b9:60:bd:f1:39:4c:57:f5:
d1:d7:df:13:df:3a:6f:b0:2a:fa:e0:df:27:9d:b0:
6d:4b:53:1e:c7:2a:14:76:e8:38:06:3e:54:2e:47:
05:3b:6e:78:9e:4f:e1:b0:9e:4c:c3:34:dd:b8:35:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:AB:48:F7:95:45:16:E4:E1:55:A7:74:4A:A4:0E:68:13:ED:DB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FiurSPeVRRbk4VWndEqkDmgT7ds.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:03:95:33:8b:5e:a9:c8:34:04:1f:74:75:42:f0:6e:41:07:
b4:cc:f6:72:e1:b5:0b:ef:4f:22:7d:ab:3c:00:95:6b:be:98:
2b:db:6a:7c:68:9a:81:cd:a5:03:91:87:bf:53:66:1b:8f:5e:
2c:d5:20:3c:f7:80:31:c6:a1:35:48:1b:6d:90:c6:24:cd:88:
b3:bf:1a:85:6e:0e:b2:9b:56:88:39:a7:a9:19:94:2f:55:aa:
5f:cc:2e:9a:10:20:5c:d3:90:4d:46:b6:d6:7b:12:9f:e9:19:
9b:f5:86:9d:85:19:87:69:07:14:df:f3:63:bf:07:d8:49:b2:
f9:ed:1b:0e:0d:e7:4c:8a:63:c9:c3:98:42:87:0d:9d:ed:b3:
a4:b3:8d:7d:62:03:ea:78:ee:1c:d5:eb:72:cb:a9:24:4d:a9:
d0:6f:9f:36:21:c1:48:de:8f:d5:5b:90:98:be:b4:1c:35:62:
e6:ab:5c:d0:1e:0c:81:5c:37:81:d0:8f:9d:07:10:0a:49:e6:
d3:c2:e3:af:33:ce:bb:34:88:d2:cd:55:d2:f2:16:ae:a8:df:
32:54:d1:2b:17:b7:ae:49:83:57:f1:8d:b6:81:39:ef:d3:51:
13:0a:ee:22:0e:01:ff:72:a1:9e:f4:ee:5d:54:ab:f0:74:5f:
a5:99:40:ca
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MzdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE2MkJBQjQ4Rjc5NTQ1
MTZFNEUxNTVBNzc0NEFBNDBFNjgxM0VEREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE+T0iDrHAYWy2hGMYzVALYKckaKhBmpUhplmG7e2gG/WSoIgJ
wmQM93caoBA5brssiC3Vl/hxJg6VBQEV6y1882L2syq/KCB8pwHxNkOvVLAbzF/g
S8W2Ly9o2uBDgLR0e5j1msP7NPxxZHDxZKadNiarlgvMZjJW11YRQdpy6ljHbPYX
rl6kM+jT++40Lb50jWbVR1msu/QjOrYjawn8sNUz4C0IIUbyJDsClc2RLxKCQeLa
QPeYRSx72QIKXYfKKCZ1L9xlwCG5YL3xOUxX9dHX3xPfOm+wKvrg3yedsG1LUx7H
KhR26DgGPlQuRwU7bnieT+GwnkzDNN24NRULAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFiurSPeVRRbk4VWndEqkDmgT7dswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZpdXJTUGVWUlJiazRWV25k
RXFrRG1nVDdkcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2oQwDQYJKoZIhvcNAQELBQADggEBAA4DlTOLXqnINAQfdHVC8G5BB7TM9nLhtQvv
TyJ9qzwAlWu+mCvbanxomoHNpQORh79TZhuPXizVIDz3gDHGoTVIG22QxiTNiLO/
GoVuDrKbVog5p6kZlC9Vql/MLpoQIFzTkE1GttZ7Ep/pGZv1hp2FGYdpBxTf82O/
B9hJsvntGw4N50yKY8nDmEKHDZ3ts6SzjX1iA+p47hzV63LLqSRNqdBvnzYhwUje
j9VbkJi+tBw1YuarXNAeDIFcN4HQj50HEApJ5tPC468zzrs0iNLNVdLyFq6o3zJU
0SsXt65Jg1fxjbaBOe/TURMK7iIOAf9yoZ707l1Uq/B0X6WZQMo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org