Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3SL4DZs5XyVIr11dKji_HPuVi_w.roa
File: 3SL4DZs5XyVIr11dKji_HPuVi_w.roa (raw, json)
Hash identifier: 2vdzsGw8VK8W+1Rt/O++UQiHTM0Yo1VF98GMJEUbdhg=
Subject key identifier: DD:22:F8:0D:9B:39:5F:25:48:AF:5D:5D:2A:38:BF:1C:FB:95:8B:FC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3SL4DZs5XyVIr11dKji_HPuVi_w.roa
Signing time: Thu 15 Sep 2022 02:35:17 +0000
ROA not before: Thu 15 Sep 2022 02:35:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DD22F80D9B395F2548AF5D5D2A38BF1CFB958BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:7a:63:b4:c1:f7:c0:45:cb:52:64:6c:63:
2c:22:0b:ae:43:9a:d9:48:50:f9:cd:ef:85:84:5e:
7d:4a:54:91:d0:3b:9a:23:f1:11:da:96:60:43:6a:
91:5f:b0:b8:11:2e:a8:d3:27:6c:5b:96:4a:bb:75:
27:20:70:e7:17:8d:1a:ec:5c:12:d9:8b:cd:32:42:
9c:d5:a0:bb:e3:ed:13:5f:0a:62:4d:43:d7:f0:bc:
94:e1:38:44:59:20:a6:ce:90:4e:8a:68:9a:de:62:
6e:45:1a:53:10:fb:59:f0:55:58:7e:de:5a:5a:43:
18:2f:b4:29:4a:b9:f9:67:94:e7:d0:cb:96:1c:02:
2d:c0:cd:7c:ed:94:33:60:68:75:9f:b0:67:eb:46:
f6:48:8d:d7:db:c7:14:76:16:e2:89:5a:f4:5f:7d:
ca:06:6f:b5:bc:17:0b:f8:70:9f:4d:16:a5:8b:26:
64:0d:9c:05:71:41:05:41:27:e9:e0:fb:71:04:31:
df:4d:92:7d:c1:13:38:5a:1a:6c:4a:48:d2:31:ef:
2d:75:e6:0d:30:88:52:34:da:0c:86:5a:cc:72:c3:
89:5b:d7:22:a4:ac:e9:07:48:b5:b0:c3:58:78:d7:
f2:d1:f4:80:de:1b:c6:5f:11:f9:ba:d4:72:05:77:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:22:F8:0D:9B:39:5F:25:48:AF:5D:5D:2A:38:BF:1C:FB:95:8B:FC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3SL4DZs5XyVIr11dKji_HPuVi_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/22
Signature Algorithm: sha256WithRSAEncryption
31:88:9b:36:a4:87:a5:b5:11:2a:26:0e:66:a7:b6:a7:ba:92:
1f:76:2f:0a:30:14:20:39:a6:68:a7:77:c6:7a:c1:ca:0a:70:
f1:bb:62:44:43:26:e2:14:32:3b:3b:52:bb:3e:a2:63:d3:0e:
e4:84:1f:55:d6:ed:f1:f1:5f:96:a0:4b:52:2d:01:dd:f6:da:
be:1c:40:92:5d:47:97:79:13:1e:00:f9:d5:bf:54:0d:c5:df:
47:7e:53:dc:87:4e:fd:18:49:4b:ff:21:5e:06:02:b7:57:74:
96:81:6f:35:25:7e:bd:9b:81:39:90:e4:06:2d:70:13:29:ba:
da:25:b7:c3:06:ae:43:85:9e:54:50:39:a9:31:24:45:c7:fb:
d0:ab:14:c4:9f:36:98:4c:13:81:9a:a5:1f:d8:4d:bf:f1:b7:
09:08:52:4d:24:c8:cf:63:bb:53:cc:a7:7c:6f:e6:8a:67:fa:
41:05:8c:37:64:e3:66:76:50:a7:f8:ee:e5:af:9d:53:34:41:
05:ea:21:69:b6:4d:5e:f8:e4:4a:71:25:79:cc:7f:67:b3:39:
2f:98:d1:fd:75:1d:1e:3e:d5:19:41:03:3e:7c:f7:78:45:1b:
55:57:a9:a2:b7:2d:c0:61:1a:ad:19:e6:ca:3a:60:53:d2:e1:
20:e7:09:a6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEREMjJGODBEOUIzOTVG
MjU0OEFGNUQ1RDJBMzhCRjFDRkI5NThCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDebXpjtMH3wEXLUmRsYywiC65DmtlIUPnN74WEXn1KVJHQO5oj
8RHalmBDapFfsLgRLqjTJ2xblkq7dScgcOcXjRrsXBLZi80yQpzVoLvj7RNfCmJN
Q9fwvJThOERZIKbOkE6KaJreYm5FGlMQ+1nwVVh+3lpaQxgvtClKuflnlOfQy5Yc
Ai3AzXztlDNgaHWfsGfrRvZIjdfbxxR2FuKJWvRffcoGb7W8Fwv4cJ9NFqWLJmQN
nAVxQQVBJ+ng+3EEMd9Nkn3BEzhaGmxKSNIx7y115g0wiFI02gyGWsxyw4lb1yKk
rOkHSLWww1h41/LR9IDeG8ZfEfm61HIFdyz/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU3SL4DZs5XyVIr11dKji/HPuVi/wwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNTTDREWnM1WHlWSXIxMWRL
amlfSFB1Vmlfdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2pAwDQYJKoZIhvcNAQELBQADggEBADGImzakh6W1ESomDmantqe6kh92LwowFCA5
pmind8Z6wcoKcPG7YkRDJuIUMjs7Urs+omPTDuSEH1XW7fHxX5agS1ItAd322r4c
QJJdR5d5Ex4A+dW/VA3F30d+U9yHTv0YSUv/IV4GArdXdJaBbzUlfr2bgTmQ5AYt
cBMputolt8MGrkOFnlRQOakxJEXH+9CrFMSfNphME4GapR/YTb/xtwkIUk0kyM9j
u1PMp3xv5opn+kEFjDdk42Z2UKf47uWvnVM0QQXqIWm2TV745EpxJXnMf2ezOS+Y
0f11HR4+1RlBAz5893hFG1VXqaK3LcBhGq0Z5so6YFPS4SDnCaY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:27 2025 by rpki-client