Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_FRQZ8WbOe-7OGGDLcWX58E_bbA.roa
File: _FRQZ8WbOe-7OGGDLcWX58E_bbA.roa (raw, json)
Hash identifier: EJ8BJveIhsVu0OCHr+AtB5GTNBLCASWi/CbW/oSSQCI=
Subject key identifier: FC:54:50:67:C5:9B:39:EF:BB:38:61:83:2D:C5:97:E7:C1:3F:6D:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D88
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_FRQZ8WbOe-7OGGDLcWX58E_bbA.roa
Signing time: Fri 01 Sep 2023 10:14:59 +0000
ROA not before: Fri 01 Sep 2023 10:14:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 180.218.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7560 (0x1d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FC545067C59B39EFBB3861832DC597E7C13F6DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:77:2e:b4:54:37:1f:b8:ff:bb:ea:99:7f:
74:63:28:7a:ed:51:7b:73:a0:12:18:78:5e:c0:90:
32:da:d5:15:78:df:2c:35:ce:ac:f2:a2:7d:d2:53:
3c:53:28:05:69:2c:65:60:e7:a1:b7:c7:7a:4e:23:
81:18:17:ab:49:99:83:c4:3c:eb:8d:5d:96:22:0b:
c0:95:34:ae:9f:dd:04:3b:99:2f:1f:38:84:75:13:
10:77:b7:b4:ed:a7:2f:47:5b:c0:fb:f3:a1:dd:22:
ef:f4:1f:24:13:46:0b:d3:47:f5:34:4b:ad:8a:45:
31:d9:b8:a6:6c:60:10:77:40:6a:31:e1:b7:6f:87:
03:ff:1b:d7:e3:da:39:fb:89:bf:ca:a4:fc:da:1b:
8e:ea:8b:d7:46:ca:46:ff:6e:08:ea:e1:33:c4:bf:
8b:8c:70:98:22:49:d2:ca:17:b7:76:59:ff:98:b9:
37:2f:2c:57:9e:d4:06:bf:58:5c:a3:a0:bb:65:ce:
d3:5f:d6:1a:59:1a:bd:7c:d7:46:b0:c0:11:f5:57:
5b:b1:c0:bf:7a:b5:cf:f4:03:24:88:fa:ee:ce:53:
c9:c8:c8:74:43:37:90:b9:91:7c:44:90:5d:dd:94:
44:98:fa:02:bb:25:6a:e3:ac:30:7d:19:3f:14:28:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:50:67:C5:9B:39:EF:BB:38:61:83:2D:C5:97:E7:C1:3F:6D:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_FRQZ8WbOe-7OGGDLcWX58E_bbA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c6:b8:43:44:b5:04:d2:8b:32:6d:6a:0e:39:19:9b:0c:96:
b4:c2:82:15:d9:fa:de:32:d5:86:10:56:d2:cd:a0:02:f5:ad:
22:b5:5e:37:ab:7e:0d:bc:78:2b:10:55:13:66:3c:fc:2f:26:
0d:78:56:e4:e5:f0:ff:2f:4d:73:90:e3:4a:9f:81:77:6e:26:
90:aa:3b:2e:0c:ab:12:d6:5a:24:59:f6:92:2d:7d:e2:ad:a9:
22:c0:ab:93:ea:00:6c:c8:e9:ae:bf:d8:f6:8a:01:25:72:c7:
77:75:85:fc:88:72:17:a5:17:04:9d:6e:85:e0:68:ee:d1:68:
e9:dd:66:ae:24:ff:68:e4:14:4d:de:5f:5c:87:74:2c:32:5b:
28:30:81:0f:9e:20:ac:88:04:28:d2:38:a7:01:62:d6:d4:0a:
9a:e2:f2:0a:79:5a:09:39:69:30:32:8a:c5:a2:00:40:9c:19:
a4:10:80:fd:da:32:19:80:a3:0b:26:e6:23:45:8e:02:c7:d3:
51:df:7a:fb:a6:cd:00:28:d5:7c:23:4d:eb:d9:d0:37:a5:cd:
4b:db:63:b9:2c:62:87:b4:59:26:03:50:e3:36:e4:5e:4c:aa:
6e:43:21:04:8f:4a:e9:78:14:6d:bd:39:c2:42:a1:b8:f9:c7:
e3:78:3f:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDNTQ1MDY3QzU5QjM5
RUZCQjM4NjE4MzJEQzU5N0U3QzEzRjZEQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC63cutFQ3H7j/u+qZf3RjKHrtUXtzoBIYeF7AkDLa1RV43yw1
zqzyon3SUzxTKAVpLGVg56G3x3pOI4EYF6tJmYPEPOuNXZYiC8CVNK6f3QQ7mS8f
OIR1ExB3t7Ttpy9HW8D786HdIu/0HyQTRgvTR/U0S62KRTHZuKZsYBB3QGox4bdv
hwP/G9fj2jn7ib/KpPzaG47qi9dGykb/bgjq4TPEv4uMcJgiSdLKF7d2Wf+YuTcv
LFee1Aa/WFyjoLtlztNf1hpZGr1810awwBH1V1uxwL96tc/0AySI+u7OU8nIyHRD
N5C5kXxEkF3dlESY+gK7JWrjrDB9GT8UKJKxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/FRQZ8WbOe+7OGGDLcWX58E/bbAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL19GUlFaOFdiT2UtN09HR0RM
Y1dYNThFX2JiQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2lAwDQYJKoZIhvcNAQELBQADggEBAErGuENEtQTSizJtag45GZsMlrTCghXZ+t4y
1YYQVtLNoAL1rSK1Xjerfg28eCsQVRNmPPwvJg14VuTl8P8vTXOQ40qfgXduJpCq
Oy4MqxLWWiRZ9pItfeKtqSLAq5PqAGzI6a6/2PaKASVyx3d1hfyIchelFwSdboXg
aO7RaOndZq4k/2jkFE3eX1yHdCwyWygwgQ+eIKyIBCjSOKcBYtbUCpri8gp5Wgk5
aTAyisWiAECcGaQQgP3aMhmAowsm5iNFjgLH01HfevumzQAo1XwjTevZ0DelzUvb
Y7ksYoe0WSYDUOM25F5Mqm5DIQSPSul4FG29OcJCobj5x+N4P+o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:44 2025 by rpki-client