Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nwm8nP_eK3S3i-nn9mTDFSUK6qI.roa
File: nwm8nP_eK3S3i-nn9mTDFSUK6qI.roa (raw, json)
Hash identifier: 8WKLP5/7xqjIicjI5R3TAzF6DDkwxtgCN+2ij15NwCM=
Subject key identifier: 9F:09:BC:9C:FF:DE:2B:74:B7:8B:E9:E7:F6:64:C3:15:25:0A:EA:A2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nwm8nP_eK3S3i-nn9mTDFSUK6qI.roa
Signing time: Thu 15 Sep 2022 02:36:39 +0000
ROA not before: Thu 15 Sep 2022 02:36:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9F09BC9CFFDE2B74B78BE9E7F664C315250AEAA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:e0:1f:30:52:b9:03:ae:2b:67:07:2c:0a:
a0:d9:51:a9:29:4d:a2:8a:aa:28:60:3f:96:9d:4e:
7b:5b:a8:99:d4:17:8e:f7:bf:ee:52:8f:a7:f2:b3:
46:d3:47:52:59:6a:3d:6a:30:68:04:3b:70:d6:b1:
9d:60:61:42:ee:47:9a:19:80:4b:37:15:c3:d6:67:
87:bd:d7:3b:41:03:28:c2:91:db:44:11:01:d8:28:
fc:b0:0d:da:3e:8b:7d:7a:a1:3f:38:69:9c:ff:cf:
03:49:08:4e:1d:42:68:6d:7e:19:97:da:5b:83:76:
e5:61:4f:a6:cb:b6:c8:5c:6b:fb:53:23:11:16:d8:
30:0e:00:c9:8a:7b:4b:49:2b:28:a0:62:48:58:f6:
db:c1:cf:91:d5:d5:f8:10:37:e6:e8:65:92:2b:22:
8b:c4:0a:fd:6b:ef:27:93:72:ec:2a:fe:ce:d5:27:
be:26:a7:5c:10:f2:00:22:48:5a:55:3c:41:67:0d:
a0:82:2d:6d:cf:6a:b5:eb:e2:a0:36:40:65:27:c5:
e2:62:06:56:cc:18:29:fa:52:78:76:de:bc:3f:7c:
34:e0:47:98:86:27:4e:be:95:41:2e:70:87:11:09:
42:24:50:f4:88:d4:49:09:d1:3a:d0:6b:a2:b5:48:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:BC:9C:FF:DE:2B:74:B7:8B:E9:E7:F6:64:C3:15:25:0A:EA:A2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nwm8nP_eK3S3i-nn9mTDFSUK6qI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:60:f5:1b:9d:5e:68:f2:11:14:47:06:5f:3c:da:d6:61:6a:
f7:ee:6d:bb:8e:cf:f5:6e:d4:79:c5:21:34:00:53:1b:c6:c8:
6d:69:41:d1:6e:d9:ad:37:22:19:34:50:b4:14:97:e8:ad:7e:
0e:b1:f0:fe:73:a7:2a:d9:43:b9:eb:90:2d:ab:0f:1d:4e:2e:
13:62:38:d5:75:5a:b6:47:a5:23:f9:c3:97:f3:06:b7:e4:79:
18:62:65:87:93:c7:1a:6c:77:69:e3:26:f7:a9:d7:77:52:41:
a4:52:c4:d3:62:72:bd:bd:ea:d5:a8:84:d9:ef:6e:e9:24:27:
78:7f:40:be:a2:ce:1c:94:82:c5:41:d4:a9:fe:92:4f:3f:44:
80:d4:78:9e:2f:44:7d:6c:f2:2b:48:cf:07:75:5f:6f:b6:6e:
98:03:8b:5c:88:64:f1:2b:96:43:0f:6e:55:b8:71:7f:f5:a9:
02:f4:b2:0e:b3:ba:08:73:36:9a:fb:c2:17:90:37:56:14:fb:
6d:ed:10:de:65:6c:dc:b8:72:0e:5b:c3:67:fe:7c:b0:27:84:
42:d3:4a:3c:9e:d7:18:5f:8b:b4:22:a5:06:9a:d5:9e:41:0a:
8a:c8:07:3b:13:b6:6a:7a:13:aa:42:32:a8:79:47:09:75:2d:
32:6c:df:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlGMDlCQzlDRkZERTJC
NzRCNzhCRTlFN0Y2NjRDMzE1MjUwQUVBQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxn+AfMFK5A64rZwcsCqDZUakpTaKKqihgP5adTntbqJnUF473
v+5Sj6fys0bTR1JZaj1qMGgEO3DWsZ1gYULuR5oZgEs3FcPWZ4e91ztBAyjCkdtE
EQHYKPywDdo+i316oT84aZz/zwNJCE4dQmhtfhmX2luDduVhT6bLtshca/tTIxEW
2DAOAMmKe0tJKyigYkhY9tvBz5HV1fgQN+boZZIrIovECv1r7yeTcuwq/s7VJ74m
p1wQ8gAiSFpVPEFnDaCCLW3ParXr4qA2QGUnxeJiBlbMGCn6Unh23rw/fDTgR5iG
J06+lUEucIcRCUIkUPSI1EkJ0TrQa6K1SGZ3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnwm8nP/eK3S3i+nn9mTDFSUK6qIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL253bThuUF9lSzNTM2ktbm45
bVRERlNVSzZxSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2ngwDQYJKoZIhvcNAQELBQADggEBAEtg9RudXmjyERRHBl882tZhavfubbuOz/Vu
1HnFITQAUxvGyG1pQdFu2a03Ihk0ULQUl+itfg6x8P5zpyrZQ7nrkC2rDx1OLhNi
ONV1WrZHpSP5w5fzBrfkeRhiZYeTxxpsd2njJvep13dSQaRSxNNicr296tWohNnv
bukkJ3h/QL6izhyUgsVB1Kn+kk8/RIDUeJ4vRH1s8itIzwd1X2+2bpgDi1yIZPEr
lkMPblW4cX/1qQL0sg6zughzNpr7wheQN1YU+23tEN5lbNy4cg5bw2f+fLAnhELT
Sjye1xhfi7QipQaa1Z5BCorIBzsTtmp6E6pCMqh5Rwl1LTJs39w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org