Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RmKOwsEFbTVRcvXVdqILrzSvp9g.roa
File: RmKOwsEFbTVRcvXVdqILrzSvp9g.roa (raw, json)
Hash identifier: n13z2u505sbxu6R/Wsc41qGc+VtZgWQDWOYujI0jvxc=
Subject key identifier: 46:62:8E:C2:C1:05:6D:35:51:72:F5:D5:76:A2:0B:AF:34:AF:A7:D8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RmKOwsEFbTVRcvXVdqILrzSvp9g.roa
Signing time: Thu 15 Sep 2022 02:35:25 +0000
ROA not before: Thu 15 Sep 2022 02:35:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=46628EC2C1056D355172F5D576A20BAF34AFA7D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:3a:19:cd:dd:09:2a:a3:18:59:c6:dc:82:
65:8b:00:14:66:c0:d2:49:cf:1b:73:a2:32:e1:8c:
cb:d1:e1:8f:57:29:09:3a:7d:08:28:77:e7:00:92:
8b:8e:0b:5f:7e:d2:bc:91:e4:8a:c2:75:ba:66:6a:
ac:bd:6b:be:01:52:4d:fb:9d:9e:89:f2:88:a3:90:
4a:84:bc:ee:5e:90:3f:b8:6d:63:22:0c:b7:73:7d:
b6:1d:06:e2:71:fd:41:44:d7:b6:e2:fc:7e:db:7a:
64:fe:ff:2a:dc:18:27:e7:f9:cf:4f:81:8c:29:6a:
8a:bc:c5:fd:cd:96:52:b7:25:08:ad:fe:41:c9:bb:
36:33:12:e1:62:92:52:92:50:30:a1:e9:36:00:60:
ec:84:d1:25:db:65:c7:61:49:fe:22:1e:c1:60:cc:
fe:1c:63:a9:65:11:1d:e5:cd:ac:19:23:6e:5a:1d:
04:d5:df:27:68:2f:4d:65:ec:58:43:65:ba:d9:15:
16:c3:a7:d4:a2:d1:49:d4:44:b5:e5:40:3d:60:a5:
65:8c:22:a6:fc:37:bc:4a:22:98:d4:bf:b9:54:68:
6d:04:a0:36:3d:94:ac:40:76:23:60:c1:2a:a0:ef:
15:0c:cc:9c:c9:1f:21:65:7c:d3:b8:0d:45:ec:6c:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:62:8E:C2:C1:05:6D:35:51:72:F5:D5:76:A2:0B:AF:34:AF:A7:D8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RmKOwsEFbTVRcvXVdqILrzSvp9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.138.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5b:38:f6:7d:0b:80:5d:f2:30:04:b3:88:f5:58:6f:e6:38:
77:22:62:5a:fa:b6:80:b6:d5:9e:87:78:d4:a6:e4:bf:fa:9b:
66:5e:84:5a:99:24:74:ba:87:c2:eb:4e:d8:28:7b:fb:92:4c:
c8:76:db:78:d5:3a:e9:7e:b4:1a:5d:d4:99:30:6f:b5:94:d8:
f3:86:ab:46:64:71:13:5d:b8:fe:f7:b2:72:d9:59:2d:1a:9a:
56:ec:36:bc:f1:20:17:6a:ac:fe:f6:89:09:09:40:04:98:c4:
47:9f:9f:21:3f:14:21:ec:52:f3:eb:de:07:f7:5a:ce:8d:90:
d0:48:50:f4:5c:b2:cc:34:5f:84:98:79:92:09:2d:ca:b7:07:
2e:77:22:79:c4:ed:1e:7f:c8:5c:63:2b:74:fc:4c:da:2c:7f:
9b:ef:39:28:82:3a:b8:47:72:84:c9:3f:4d:d1:9d:6f:e1:41:
30:f5:c6:60:b8:3d:9b:5c:c7:be:9f:77:77:36:74:34:83:50:
20:ed:97:0c:92:75:3e:a5:e7:03:87:1f:81:8d:bb:61:77:d8:
e0:8b:16:eb:2b:29:03:3b:43:44:21:f5:65:3b:2d:df:d1:27:
b2:46:60:32:2d:72:d0:49:b7:66:66:09:84:ce:1e:7a:60:6a:
26:56:16:64
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ2NjI4RUMyQzEwNTZE
MzU1MTcyRjVENTc2QTIwQkFGMzRBRkE3RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDihzoZzd0JKqMYWcbcgmWLABRmwNJJzxtzojLhjMvR4Y9XKQk6
fQgod+cAkouOC19+0ryR5IrCdbpmaqy9a74BUk37nZ6J8oijkEqEvO5ekD+4bWMi
DLdzfbYdBuJx/UFE17bi/H7bemT+/yrcGCfn+c9PgYwpaoq8xf3NllK3JQit/kHJ
uzYzEuFiklKSUDCh6TYAYOyE0SXbZcdhSf4iHsFgzP4cY6llER3lzawZI25aHQTV
3ydoL01l7FhDZbrZFRbDp9Si0UnURLXlQD1gpWWMIqb8N7xKIpjUv7lUaG0EoDY9
lKxAdiNgwSqg7xUMzJzJHyFlfNO4DUXsbESTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURmKOwsEFbTVRcvXVdqILrzSvp9gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1JtS093c0VGYlRWUmN2WFZk
cUlMcnpTdnA5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2oowDQYJKoZIhvcNAQELBQADggEBAHlbOPZ9C4Bd8jAEs4j1WG/mOHciYlr6toC2
1Z6HeNSm5L/6m2ZehFqZJHS6h8LrTtgoe/uSTMh223jVOul+tBpd1Jkwb7WU2POG
q0ZkcRNduP73snLZWS0amlbsNrzxIBdqrP72iQkJQASYxEefnyE/FCHsUvPr3gf3
Ws6NkNBIUPRcssw0X4SYeZIJLcq3By53InnE7R5/yFxjK3T8TNosf5vvOSiCOrhH
coTJP03RnW/hQTD1xmC4PZtcx76fd3c2dDSDUCDtlwySdT6l5wOHH4GNu2F32OCL
FusrKQM7Q0Qh9WU7Ld/RJ7JGYDItctBJt2ZmCYTOHnpgaiZWFmQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org