Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i_2J0-nwZMipmD2m0p64-Yz_les.roa
File: i_2J0-nwZMipmD2m0p64-Yz_les.roa (raw, json)
Hash identifier: 4skgxgiKufdk5+nuuRof2Kl3A/I6upcuJkiHk9LAHs8=
Subject key identifier: 8B:FD:89:D3:E9:F0:64:C8:A9:98:3D:A6:D2:9E:B8:F9:8C:FF:95:EB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 191A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i_2J0-nwZMipmD2m0p64-Yz_les.roa
Signing time: Sat 22 Oct 2022 06:06:06 +0000
ROA not before: Sat 22 Oct 2022 06:06:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6426 (0x191a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8BFD89D3E9F064C8A9983DA6D29EB8F98CFF95EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:1d:8b:9d:9a:0e:e1:8e:2c:a7:57:99:32:
a5:f8:2c:b3:7c:07:39:fb:75:b9:23:16:2f:76:56:
d0:65:9b:44:d3:c6:b3:48:6a:e9:f9:3f:da:ad:ec:
b0:dc:25:0e:cd:97:7f:ab:95:15:ad:3f:c8:bf:28:
0b:a7:38:c1:83:be:7b:19:90:4c:11:97:b0:c0:8d:
a6:4e:0a:69:2c:03:d6:ff:88:18:a0:99:a0:99:1f:
9d:a2:70:3f:f4:29:98:00:53:61:a2:09:de:e0:53:
bc:f5:b2:ad:a6:e6:d8:1f:a9:a2:fd:93:88:62:fe:
16:3c:55:db:a7:8a:47:03:e1:c0:d3:a9:7b:af:3d:
98:e2:3f:21:58:e0:35:3a:76:3b:3c:9e:27:62:9c:
f8:66:36:5a:aa:80:59:dc:75:b3:8b:1a:2d:c1:93:
6e:52:dd:a5:a8:47:fd:e9:e0:2d:d9:db:47:07:de:
63:fa:4a:1c:f2:b3:0b:62:af:64:51:11:67:14:77:
b5:13:6e:ce:7b:77:a3:28:ae:ac:95:61:18:87:f8:
17:25:98:b1:72:d2:f9:e7:9c:45:00:2d:c8:cc:35:
ab:13:a4:98:d9:a7:96:81:4c:c1:4a:db:a3:87:bc:
d9:d4:b3:a5:2a:06:98:29:c4:14:d2:29:d0:7b:39:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:89:D3:E9:F0:64:C8:A9:98:3D:A6:D2:9E:B8:F9:8C:FF:95:EB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i_2J0-nwZMipmD2m0p64-Yz_les.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.188.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ef:fc:df:57:7b:51:b0:3d:03:50:e8:0a:0c:0b:4a:86:69:
29:79:48:20:40:ed:98:84:26:23:d6:45:f0:9e:71:a7:19:ee:
cf:ff:a9:a2:fe:93:36:34:da:45:7f:b5:b3:66:ac:c6:bb:78:
c2:d1:84:32:1b:4f:47:50:86:fa:33:f9:f4:7e:89:0d:1e:29:
3e:17:ec:d8:ec:bf:d4:91:eb:cc:97:4a:5e:39:26:c7:86:af:
14:0c:45:43:cc:b9:aa:c5:92:14:83:f0:a4:16:fe:03:37:c2:
1f:11:64:5b:56:ce:04:12:70:64:6b:a8:45:1f:9b:5f:46:a0:
b3:86:bc:81:bd:c9:f2:97:7d:16:3c:07:d6:3b:02:61:49:cd:
d3:a8:19:34:23:14:8a:fd:ca:1f:b1:2d:90:1d:27:ec:f0:a0:
e0:44:d6:91:f9:c9:eb:8b:89:29:19:4e:6b:55:0c:32:85:4c:
82:b8:2a:e8:7b:09:8c:b5:fb:26:18:3f:04:59:7a:56:da:99:
d9:a5:f2:35:46:97:33:be:c0:d9:24:21:bf:59:f8:a9:e0:3c:
38:9d:e0:fe:a5:e0:78:98:fe:25:a6:14:d5:38:fa:27:64:7b:
a1:56:e4:97:84:2c:22:1d:f5:31:81:82:7c:d6:3a:cf:63:1f:
b4:22:c4:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhCRkQ4OUQzRTlGMDY0
QzhBOTk4M0RBNkQyOUVCOEY5OENGRjk1RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkEB2LnZoO4Y4sp1eZMqX4LLN8Bzn7dbkjFi92VtBlm0TTxrNI
aun5P9qt7LDcJQ7Nl3+rlRWtP8i/KAunOMGDvnsZkEwRl7DAjaZOCmksA9b/iBig
maCZH52icD/0KZgAU2GiCd7gU7z1sq2m5tgfqaL9k4hi/hY8VdunikcD4cDTqXuv
PZjiPyFY4DU6djs8nidinPhmNlqqgFncdbOLGi3Bk25S3aWoR/3p4C3Z20cH3mP6
Shzyswtir2RREWcUd7UTbs57d6MorqyVYRiH+BclmLFy0vnnnEUALcjMNasTpJjZ
p5aBTMFK26OHvNnUs6UqBpgpxBTSKdB7OTDFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUi/2J0+nwZMipmD2m0p64+Yz/leswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2lfMkowLW53Wk1pcG1EMm0w
cDY0LVl6X2xlcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2rwwDQYJKoZIhvcNAQELBQADggEBADXv/N9Xe1GwPQNQ6AoMC0qGaSl5SCBA7ZiE
JiPWRfCecacZ7s//qaL+kzY02kV/tbNmrMa7eMLRhDIbT0dQhvoz+fR+iQ0eKT4X
7Njsv9SR68yXSl45JseGrxQMRUPMuarFkhSD8KQW/gM3wh8RZFtWzgQScGRrqEUf
m19GoLOGvIG9yfKXfRY8B9Y7AmFJzdOoGTQjFIr9yh+xLZAdJ+zwoOBE1pH5yeuL
iSkZTmtVDDKFTIK4Kuh7CYy1+yYYPwRZelbamdml8jVGlzO+wNkkIb9Z+KngPDid
4P6l4HiY/iWmFNU4+idke6FW5JeELCId9TGBgnzWOs9jH7QixCU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org