Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c5P0nFzaLTm1aZoJoZns6IQAUmc.roa
File: c5P0nFzaLTm1aZoJoZns6IQAUmc.roa (raw, json)
Hash identifier: cjXH0ettYetxrWHuE/COXFGVR2rCakGauDiZdIo8F5g=
Subject key identifier: 73:93:F4:9C:5C:DA:2D:39:B5:69:9A:09:A1:99:EC:E8:84:00:52:67
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c5P0nFzaLTm1aZoJoZns6IQAUmc.roa
Signing time: Thu 15 Sep 2022 02:35:48 +0000
ROA not before: Thu 15 Sep 2022 02:35:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7393F49C5CDA2D39B5699A09A199ECE884005267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:18:fc:5e:a4:84:27:b6:d4:c2:24:2b:ce:
a1:cb:35:b6:25:e4:d7:6c:a8:4d:aa:c4:35:a1:81:
22:34:73:60:d5:95:01:b9:35:c5:73:8e:2e:be:db:
3a:8d:f1:41:61:e0:5e:4d:df:eb:a5:2f:50:95:9b:
e9:96:b4:e9:4c:44:8d:54:60:a9:36:1e:95:a9:f2:
89:c8:ba:25:fe:84:91:b8:2b:c0:84:27:03:7b:1a:
de:cb:4d:49:8c:3e:dc:55:b8:99:22:3a:ed:5e:d3:
38:ff:47:18:08:3c:49:91:99:79:a0:6b:82:4c:76:
33:af:46:0c:4e:26:89:5f:c1:87:36:fd:c9:5b:c6:
32:bf:b0:66:9b:bf:84:24:86:bf:43:0c:33:85:02:
3f:e2:5a:8a:44:19:be:bf:87:57:54:1c:ee:62:4b:
51:71:d3:88:8f:20:01:a5:90:4a:d2:f2:e4:c0:1e:
d1:05:67:32:78:8f:00:ae:2d:f6:c9:3e:01:71:d3:
e6:4f:fa:2a:b9:92:49:ca:ca:23:61:16:9b:ac:b3:
c8:7d:ec:da:b5:07:ef:93:44:43:36:1a:2a:87:c2:
ad:fe:7b:f8:80:2a:fc:07:f3:3a:b2:ef:5b:03:84:
44:3e:a6:c2:32:db:e1:bb:e3:bd:e2:62:84:01:7c:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:93:F4:9C:5C:DA:2D:39:B5:69:9A:09:A1:99:EC:E8:84:00:52:67
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c5P0nFzaLTm1aZoJoZns6IQAUmc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.232.0/21
Signature Algorithm: sha256WithRSAEncryption
09:42:49:7c:c4:87:3f:ec:98:fd:43:49:74:ad:39:49:98:f2:
18:1b:f7:30:81:be:3d:d0:bc:9e:6c:82:38:3b:e0:69:f6:99:
49:ae:dc:73:3e:d6:a6:81:b4:7e:ba:28:d5:df:87:05:93:e8:
39:f8:5b:53:9e:e7:29:7d:c2:16:76:37:8d:38:96:f5:51:5f:
a1:67:76:1b:1f:8c:2f:46:84:fa:29:39:4b:87:96:68:06:78:
ef:f5:d1:92:f3:e9:78:dd:85:06:a0:18:3b:4c:f4:b4:d8:45:
ee:54:6c:f5:ba:c0:00:c7:54:1a:91:d2:25:16:bb:2e:b5:c6:
e1:f0:de:f6:86:69:aa:0e:28:26:54:5e:38:ea:79:af:66:52:
8d:d9:c8:41:7f:8f:bd:91:1c:a4:e4:a5:9e:c0:61:91:ac:96:
4b:1b:fa:aa:f1:1e:2a:e4:52:63:ef:a9:19:33:ce:e8:d4:f1:
0a:b4:a9:42:a1:b0:e5:2b:7a:0f:63:1e:90:bc:5d:be:e4:6b:
d0:7f:75:36:f7:72:0c:72:68:ed:bc:25:55:6a:b5:bb:73:d6:
4c:b1:78:9d:75:5c:b4:c5:ae:3d:75:75:6c:a3:0b:83:dd:65:
19:bc:f1:3a:7f:7a:55:d3:b0:58:34:1b:24:84:3b:33:78:f5:
04:69:3b:44
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDczOTNGNDlDNUNEQTJE
MzlCNTY5OUEwOUExOTlFQ0U4ODQwMDUyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr1xj8XqSEJ7bUwiQrzqHLNbYl5NdsqE2qxDWhgSI0c2DVlQG5
NcVzji6+2zqN8UFh4F5N3+ulL1CVm+mWtOlMRI1UYKk2HpWp8onIuiX+hJG4K8CE
JwN7Gt7LTUmMPtxVuJkiOu1e0zj/RxgIPEmRmXmga4JMdjOvRgxOJolfwYc2/clb
xjK/sGabv4Qkhr9DDDOFAj/iWopEGb6/h1dUHO5iS1Fx04iPIAGlkErS8uTAHtEF
ZzJ4jwCuLfbJPgFx0+ZP+iq5kknKyiNhFpuss8h97Nq1B++TREM2GiqHwq3+e/iA
KvwH8zqy71sDhEQ+psIy2+G7473iYoQBfNcjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUc5P0nFzaLTm1aZoJoZns6IQAUmcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2M1UDBuRnphTFRtMWFab0pv
Wm5zNklRQVVtYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2ugwDQYJKoZIhvcNAQELBQADggEBAAlCSXzEhz/smP1DSXStOUmY8hgb9zCBvj3Q
vJ5sgjg74Gn2mUmu3HM+1qaBtH66KNXfhwWT6Dn4W1Oe5yl9whZ2N404lvVRX6Fn
dhsfjC9GhPopOUuHlmgGeO/10ZLz6XjdhQagGDtM9LTYRe5UbPW6wADHVBqR0iUW
uy61xuHw3vaGaaoOKCZUXjjqea9mUo3ZyEF/j72RHKTkpZ7AYZGslksb+qrxHirk
UmPvqRkzzujU8Qq0qUKhsOUreg9jHpC8Xb7ka9B/dTb3cgxyaO28JVVqtbtz1kyx
eJ11XLTFrj11dWyjC4PdZRm88Tp/elXTsFg0GySEOzN49QRpO0Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org