Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VGAJeu6syFL_mNeKbb_P5QFMh58.roa
File: VGAJeu6syFL_mNeKbb_P5QFMh58.roa (raw, json)
Hash identifier: N92DRooTOU/6H8KrM//6je87CENN8Pag3ZcA9vApMh4=
Subject key identifier: 54:60:09:7A:EE:AC:C8:52:FF:98:D7:8A:6D:BF:CF:E5:01:4C:87:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 17EE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VGAJeu6syFL_mNeKbb_P5QFMh58.roa
Signing time: Sat 22 Oct 2022 05:47:25 +0000
ROA not before: Sat 22 Oct 2022 05:47:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6126 (0x17ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:47:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5460097AEEACC852FF98D78A6DBFCFE5014C879F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bd:41:4e:90:f7:ef:84:c5:18:9e:c9:4f:d2:
d5:74:4c:de:a4:ce:fa:5a:88:d3:e9:68:2f:a4:b7:
e1:b6:b6:cf:5f:b8:58:0b:90:2e:67:70:6e:3a:52:
b6:97:cd:60:92:a0:6f:29:ba:74:78:7b:e5:f1:36:
b2:54:5b:bf:85:46:cc:cb:4c:36:1a:d9:50:5a:c8:
ac:53:b4:0c:11:ad:30:d6:34:81:ac:de:1d:8d:3b:
ff:25:d9:16:de:29:01:35:63:f7:52:77:10:ac:e5:
f5:2b:f3:1c:fb:70:f8:65:41:d7:5f:b5:bc:13:9c:
fe:60:76:77:7b:d2:d5:4a:7d:cf:b9:46:c1:50:a4:
c0:92:45:0a:23:26:6b:ed:08:ae:42:85:e4:c7:03:
c7:f4:fe:3b:62:4f:6f:a4:23:5e:8d:79:ff:f9:60:
9d:a0:79:7d:0a:f3:14:a8:85:39:f3:2e:de:8d:f3:
9a:c9:22:b4:db:da:4c:aa:81:4b:2c:87:9f:30:da:
8b:99:67:d6:93:ef:14:0c:6b:ec:c4:a6:31:65:f7:
c1:dd:84:d7:64:bd:30:dd:ad:e4:a3:2a:a5:fe:2a:
66:16:64:42:1e:39:87:8f:d9:d1:1a:39:6d:af:2d:
cf:0d:0d:7d:f2:ef:20:69:1b:a8:be:35:98:b5:ef:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:09:7A:EE:AC:C8:52:FF:98:D7:8A:6D:BF:CF:E5:01:4C:87:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VGAJeu6syFL_mNeKbb_P5QFMh58.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:b0:10:05:e0:8f:95:6d:39:00:a7:33:08:e2:d5:24:37:c4:
50:97:d5:56:df:ef:e3:30:5d:f6:46:c1:7f:c3:34:45:ff:ec:
66:20:e6:15:b0:9f:4c:65:0d:36:19:ea:9d:26:63:28:20:31:
2e:fe:ba:6f:ca:6a:05:d9:c1:d9:8c:91:1b:0d:9b:c3:94:93:
b0:9b:0e:b6:f8:6c:88:86:a1:33:de:dd:71:33:70:eb:16:4d:
cc:51:c2:c7:60:c2:61:97:d9:d4:d7:5c:f9:1c:40:ba:22:f1:
91:ec:04:13:48:ac:97:d8:b4:50:b6:c9:c1:bd:67:67:03:d2:
42:45:8d:fa:22:80:6e:cd:78:6a:ed:27:00:46:fe:29:40:1d:
ee:21:40:10:46:d8:ef:39:44:23:7f:de:63:ec:51:e5:20:47:
6e:26:1b:3c:6f:4e:82:b4:aa:e2:d3:c4:18:46:38:0e:0a:99:
10:f8:27:23:62:01:13:95:e0:18:98:f6:4e:85:2c:f2:1a:86:
02:f0:93:e5:40:9a:28:ac:dd:76:4b:13:c2:07:21:1d:d3:01:
27:3b:2d:f7:c9:48:79:5f:71:ad:3e:3c:a8:ef:ff:ca:7c:f1:
69:e4:50:7a:4a:ba:07:9a:b4:61:21:91:03:a2:47:3e:4a:25:
97:6c:44:7f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NTQ3MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU0NjAwOTdBRUVBQ0M4
NTJGRjk4RDc4QTZEQkZDRkU1MDE0Qzg3OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD3vUFOkPfvhMUYnslP0tV0TN6kzvpaiNPpaC+kt+G2ts9fuFgL
kC5ncG46UraXzWCSoG8punR4e+XxNrJUW7+FRszLTDYa2VBayKxTtAwRrTDWNIGs
3h2NO/8l2RbeKQE1Y/dSdxCs5fUr8xz7cPhlQddftbwTnP5gdnd70tVKfc+5RsFQ
pMCSRQojJmvtCK5CheTHA8f0/jtiT2+kI16Nef/5YJ2geX0K8xSohTnzLt6N85rJ
IrTb2kyqgUssh58w2ouZZ9aT7xQMa+zEpjFl98HdhNdkvTDdreSjKqX+KmYWZEIe
OYeP2dEaOW2vLc8NDX3y7yBpG6i+NZi176yzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVGAJeu6syFL/mNeKbb/P5QFMh58wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ZHQUpldTZzeUZMX21OZUti
Yl9QNVFGTWg1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2iwwDQYJKoZIhvcNAQELBQADggEBAFuwEAXgj5VtOQCnMwji1SQ3xFCX1Vbf7+Mw
XfZGwX/DNEX/7GYg5hWwn0xlDTYZ6p0mYyggMS7+um/KagXZwdmMkRsNm8OUk7Cb
Drb4bIiGoTPe3XEzcOsWTcxRwsdgwmGX2dTXXPkcQLoi8ZHsBBNIrJfYtFC2ycG9
Z2cD0kJFjfoigG7NeGrtJwBG/ilAHe4hQBBG2O85RCN/3mPsUeUgR24mGzxvToK0
quLTxBhGOA4KmRD4JyNiAROV4BiY9k6FLPIahgLwk+VAmiis3XZLE8IHIR3TASc7
LffJSHlfca0+PKjv/8p88WnkUHpKugeatGEhkQOiRz5KJZdsRH8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org