Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zangiwT6HFuw3fBHfwPEJWFzGWk.roa
File: zangiwT6HFuw3fBHfwPEJWFzGWk.roa (raw, json)
Hash identifier: n7X/Ps7cGcEWAs6kknKYKyYQz5VKGvlvgV/3I4CbIWs=
Subject key identifier: CD:A9:E0:8B:04:FA:1C:5B:B0:DD:F0:47:7F:03:C4:25:61:73:19:69
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zangiwT6HFuw3fBHfwPEJWFzGWk.roa
Signing time: Thu 15 Sep 2022 02:35:26 +0000
ROA not before: Thu 15 Sep 2022 02:35:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CDA9E08B04FA1C5BB0DDF0477F03C42561731969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:79:a4:ae:75:50:db:ec:45:51:cd:66:67:
52:c1:01:bd:12:6c:b2:55:88:8e:ae:05:17:ef:45:
8e:1c:56:87:6e:ef:88:56:81:a3:b8:70:e6:23:9e:
51:f8:c5:9e:2b:6a:d6:e3:44:fb:14:3b:52:3e:b8:
8a:16:ed:6b:0a:3d:d8:5b:a7:03:75:c1:d8:c9:c5:
f0:1c:69:07:b9:9f:92:2c:4d:0a:67:a8:da:f7:f9:
f2:f0:b5:c0:e5:19:26:20:3c:e4:5a:f0:31:3f:9d:
11:0e:dc:2f:b5:8e:30:d7:c7:e5:d9:12:2a:1e:c4:
27:f1:5c:e8:1c:b8:58:3d:f8:3a:05:65:64:4a:1c:
1f:3b:68:aa:2f:3f:30:99:f7:78:7c:ff:5b:db:fc:
c1:f5:a3:0f:59:d9:20:66:09:d5:51:35:5b:f2:07:
9a:66:4c:ac:c5:08:b5:2f:47:61:12:8e:3e:9e:9b:
94:e3:1f:c7:95:2c:28:fe:a9:ef:ff:30:d9:ce:98:
64:a8:87:53:f1:f2:5f:99:46:34:f8:1c:8e:e5:93:
1e:f9:af:46:d7:e3:be:3d:64:a6:15:79:5c:59:08:
ba:3a:bf:2a:1a:b4:5d:84:d8:62:dd:c6:4a:f6:0a:
00:29:66:c8:72:db:6d:e0:7e:a8:e3:d5:54:4f:9c:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:E0:8B:04:FA:1C:5B:B0:DD:F0:47:7F:03:C4:25:61:73:19:69
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zangiwT6HFuw3fBHfwPEJWFzGWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:1a:f4:6d:82:40:7f:7c:14:1a:8c:f7:d7:0f:f6:f7:01:a4:
64:3f:b5:21:ee:21:6e:16:ef:b9:64:02:7e:83:43:4f:70:01:
7c:6e:47:aa:d6:e8:77:d5:b4:63:1d:57:60:87:ea:f4:b4:63:
a1:c7:0e:eb:2a:b8:f2:54:b9:55:8c:0e:6c:25:b1:83:ad:28:
67:c3:9b:c3:d4:e2:fc:0e:1a:1b:35:d2:70:8b:02:56:e4:b3:
67:c0:d3:1a:bd:c9:a4:ab:2c:f7:80:51:c4:0d:32:2b:86:5e:
8f:6d:db:f4:81:2e:fa:4b:04:73:13:6e:fd:6e:6d:ef:5c:2e:
93:46:1b:15:65:e5:b3:a4:fc:2e:29:f0:7a:57:69:45:5d:e9:
e5:1d:29:53:ce:40:a5:e7:35:0b:65:70:83:e0:cc:9f:74:8b:
2e:ca:21:f2:6b:61:fd:88:b4:13:ff:e5:df:5c:cb:21:83:6c:
62:f6:91:72:38:bd:df:b9:c6:3d:00:fc:63:4e:52:69:bd:0f:
6d:ca:24:ab:0e:8b:63:3c:96:31:c9:da:c6:15:72:a0:31:48:
2f:34:04:6e:9a:ca:a0:03:c8:12:aa:fc:0e:53:63:83:b7:fc:
a2:44:4d:f4:c1:fc:8a:da:c7:6b:44:53:d7:34:73:e2:e7:9d:
a5:ff:c7:3b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENEQTlFMDhCMDRGQTFD
NUJCMERERjA0NzdGMDNDNDI1NjE3MzE5NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAhXmkrnVQ2+xFUc1mZ1LBAb0SbLJViI6uBRfvRY4cVodu74hW
gaO4cOYjnlH4xZ4ratbjRPsUO1I+uIoW7WsKPdhbpwN1wdjJxfAcaQe5n5IsTQpn
qNr3+fLwtcDlGSYgPORa8DE/nREO3C+1jjDXx+XZEioexCfxXOgcuFg9+DoFZWRK
HB87aKovPzCZ93h8/1vb/MH1ow9Z2SBmCdVRNVvyB5pmTKzFCLUvR2ESjj6em5Tj
H8eVLCj+qe//MNnOmGSoh1Px8l+ZRjT4HI7lkx75r0bX4749ZKYVeVxZCLo6vyoa
tF2E2GLdxkr2CgApZshy223gfqjj1VRPnMQPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzangiwT6HFuw3fBHfwPEJWFzGWkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3phbmdpd1Q2SEZ1dzNmQkhm
d1BFSldGekdXay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2oQwDQYJKoZIhvcNAQELBQADggEBAKAa9G2CQH98FBqM99cP9vcBpGQ/tSHuIW4W
77lkAn6DQ09wAXxuR6rW6HfVtGMdV2CH6vS0Y6HHDusquPJUuVWMDmwlsYOtKGfD
m8PU4vwOGhs10nCLAlbks2fA0xq9yaSrLPeAUcQNMiuGXo9t2/SBLvpLBHMTbv1u
be9cLpNGGxVl5bOk/C4p8HpXaUVd6eUdKVPOQKXnNQtlcIPgzJ90iy7KIfJrYf2I
tBP/5d9cyyGDbGL2kXI4vd+5xj0A/GNOUmm9D23KJKsOi2M8ljHJ2sYVcqAxSC80
BG6ayqADyBKq/A5TY4O3/KJETfTB/Irax2tEU9c0c+LnnaX/xzs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org