Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KB5SgqETunSOrvBo-6QWbYk48Ik.roa
File: KB5SgqETunSOrvBo-6QWbYk48Ik.roa (raw, json)
Hash identifier: 9/PNuvdtHJnYEZeMDope2xXYIVtLU2vlFTqld68LP1M=
Subject key identifier: 28:1E:52:82:A1:13:BA:74:8E:AE:F0:68:FB:A4:16:6D:89:38:F0:89
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A62
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KB5SgqETunSOrvBo-6QWbYk48Ik.roa
Signing time: Thu 27 Oct 2022 03:04:42 +0000
ROA not before: Thu 27 Oct 2022 03:04:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.144.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6754 (0x1a62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 27 03:04:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=281E5282A113BA748EAEF068FBA4166D8938F089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:fd:ba:f3:55:27:c7:6e:4f:2d:7c:53:7c:
cf:98:fa:a0:2e:8f:e0:05:56:65:53:ce:55:d5:a3:
75:24:9b:d1:de:8a:fa:98:5b:d3:91:eb:94:d4:75:
97:18:4e:13:14:90:e1:5d:dd:5c:33:03:74:b5:ba:
d3:27:fd:ba:2b:46:43:79:14:4b:cd:16:8e:cb:ae:
20:17:2c:5e:ef:1c:dc:a3:76:ab:3c:07:8e:0e:11:
57:77:aa:9c:1e:12:00:b8:5c:61:66:c9:92:fb:02:
07:91:ad:ee:54:79:a1:b2:40:85:bd:88:ea:b9:6d:
7a:ad:1c:fb:71:43:ae:c2:65:6d:82:6d:e3:b2:68:
62:f7:ef:0b:98:8d:53:d6:57:7f:c5:68:65:21:57:
e2:57:b1:63:dd:09:e1:23:e1:13:a2:b9:22:94:22:
f9:57:96:d1:3b:ea:e5:7a:35:c7:9b:dc:96:96:5f:
4f:bf:a5:25:b2:fa:9e:1a:5d:d9:53:f7:0f:18:31:
1c:c3:5f:3f:92:e8:21:df:83:da:0a:f8:cd:25:0d:
b3:60:3b:f5:9a:07:e5:3b:52:33:b3:df:3d:cd:23:
19:15:9f:fb:cd:c9:a2:8e:48:da:40:00:4a:6b:2a:
00:50:1e:8e:6f:01:a6:01:d4:1d:72:43:ba:64:67:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1E:52:82:A1:13:BA:74:8E:AE:F0:68:FB:A4:16:6D:89:38:F0:89
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KB5SgqETunSOrvBo-6QWbYk48Ik.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/21
Signature Algorithm: sha256WithRSAEncryption
41:a2:3e:7c:fd:16:da:3d:d9:3e:6d:f8:ee:34:09:57:58:72:
91:e2:a1:69:82:b0:0e:11:f9:b6:3d:cb:9d:7d:40:0f:a8:87:
86:a0:d8:02:2c:92:77:4d:ff:7d:dd:6f:14:61:4f:cb:84:c4:
53:44:35:c2:7b:85:f7:77:c0:00:75:ad:35:fb:1f:f3:b5:18:
5f:87:6e:5e:1e:f6:5e:49:1a:50:c0:09:e8:9a:ed:c3:ce:c5:
59:b3:e8:3f:3a:36:ee:19:a0:4a:85:e9:e8:ad:42:71:42:b9:
f5:f5:a2:e8:b5:6c:a5:cb:5b:e1:cd:2a:e4:f1:f1:25:a7:22:
4e:09:e7:95:38:45:83:8b:2d:23:b2:fd:64:8e:7a:ce:80:da:
f7:c8:54:a3:cb:d9:a6:55:a5:bc:34:40:fd:b0:95:48:46:18:
b4:d3:c3:eb:98:67:6c:57:a1:69:51:78:7d:b6:ef:00:06:08:
b7:2d:46:c8:ed:a8:51:e7:57:ea:b5:cb:42:03:9c:92:35:4d:
ca:49:a6:39:5b:c4:8f:75:21:d2:ce:a8:81:6e:56:15:40:39:
ab:bc:1c:41:d4:12:cc:da:be:e7:c9:4e:52:7b:be:75:f0:5c:
79:be:7d:a0:d6:6f:34:85:d9:e6:f2:de:09:0a:6e:86:cd:13:
b9:5c:cc:1b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjcw
MzA0NDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI4MUU1MjgyQTExM0JB
NzQ4RUFFRjA2OEZCQTQxNjZEODkzOEYwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJev2681Unx25PLXxTfM+Y+qAuj+AFVmVTzlXVo3Ukm9HeivqY
W9OR65TUdZcYThMUkOFd3VwzA3S1utMn/borRkN5FEvNFo7LriAXLF7vHNyjdqs8
B44OEVd3qpweEgC4XGFmyZL7AgeRre5UeaGyQIW9iOq5bXqtHPtxQ67CZW2CbeOy
aGL37wuYjVPWV3/FaGUhV+JXsWPdCeEj4ROiuSKUIvlXltE76uV6Nceb3JaWX0+/
pSWy+p4aXdlT9w8YMRzDXz+S6CHfg9oK+M0lDbNgO/WaB+U7UjOz3z3NIxkVn/vN
yaKOSNpAAEprKgBQHo5vAaYB1B1yQ7pkZ96lAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKB5SgqETunSOrvBo+6QWbYk48IkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tCNVNncUVUdW5TT3J2Qm8t
NlFXYllrNDhJay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2pAwDQYJKoZIhvcNAQELBQADggEBAEGiPnz9Fto92T5t+O40CVdYcpHioWmCsA4R
+bY9y519QA+oh4ag2AIskndN/33dbxRhT8uExFNENcJ7hfd3wAB1rTX7H/O1GF+H
bl4e9l5JGlDACeia7cPOxVmz6D86Nu4ZoEqF6eitQnFCufX1oui1bKXLW+HNKuTx
8SWnIk4J55U4RYOLLSOy/WSOes6A2vfIVKPL2aZVpbw0QP2wlUhGGLTTw+uYZ2xX
oWlReH227wAGCLctRsjtqFHnV+q1y0IDnJI1TcpJpjlbxI91IdLOqIFuVhVAOau8
HEHUEszavufJTlJ7vnXwXHm+faDWbzSF2eby3gkKbobNE7lczBs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org