Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lS_35bLvCAmRHA6SCfGRcqrCDoY.roa
File: lS_35bLvCAmRHA6SCfGRcqrCDoY.roa (raw, json)
Hash identifier: OpoVaG4C/PEi/Km5vqsyctREj11S1Uzdh7LXs/9TSWI=
Subject key identifier: 95:2F:F7:E5:B2:EF:08:09:91:1C:0E:92:09:F1:91:72:AA:C2:0E:86
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lS_35bLvCAmRHA6SCfGRcqrCDoY.roa
Signing time: Thu 15 Sep 2022 02:36:46 +0000
ROA not before: Thu 15 Sep 2022 02:36:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=952FF7E5B2EF0809911C0E9209F19172AAC20E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:a7:7e:96:e3:62:1d:9e:f0:e3:6e:5e:02:
22:7d:62:fd:1e:30:77:be:d3:63:b8:cc:51:7f:9d:
db:f2:1f:75:08:a4:14:42:3e:bc:c4:bd:01:ae:f8:
24:e0:87:6a:c2:b5:5c:44:1d:34:59:62:29:f1:de:
f8:f9:68:07:91:f2:0b:6b:bd:78:1a:32:32:bb:18:
e1:f6:85:b2:38:4f:e0:a9:2a:88:c5:41:6a:e7:08:
a6:9d:01:f8:bc:d1:42:79:f7:75:c8:02:fd:72:e6:
30:4c:e4:17:06:58:54:0c:eb:8e:89:15:bc:7e:76:
82:a6:1e:57:67:b4:9a:05:31:e4:ae:5e:c4:01:43:
28:fd:c3:44:74:69:77:be:ee:b0:67:d6:9c:1d:b6:
28:c4:a3:07:5b:0b:50:61:ef:21:a7:87:fe:22:82:
dd:80:d6:79:df:16:0b:fb:7d:86:63:18:de:e9:1c:
24:28:7d:1d:5b:d2:31:fd:ca:e4:5b:b3:0c:18:a5:
0f:0e:9e:8e:a5:a8:4b:12:e6:5b:67:c7:1f:06:e9:
ab:c4:f6:a5:b2:dc:ef:17:9b:ee:77:3d:9d:22:a2:
70:bd:16:76:0f:12:25:db:6e:4b:8c:f2:c5:32:d8:
70:96:df:bc:5b:d9:42:04:61:9e:03:b5:b3:31:3b:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2F:F7:E5:B2:EF:08:09:91:1C:0E:92:09:F1:91:72:AA:C2:0E:86
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lS_35bLvCAmRHA6SCfGRcqrCDoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.208.0/21
Signature Algorithm: sha256WithRSAEncryption
25:dd:43:24:a5:ab:e8:ff:76:e7:f5:86:e6:d6:eb:3a:b1:6e:
79:be:b6:fc:eb:a9:b5:38:9e:5f:77:f4:bc:d5:dd:4e:1b:f0:
33:a5:b6:a4:91:31:e3:9f:2c:a7:b8:8c:2b:0e:bb:cb:c0:77:
b6:88:d1:ef:00:97:f3:84:62:11:7c:e5:99:9e:8a:6c:77:9d:
85:c6:b4:72:bb:9e:0b:62:27:da:b9:39:72:0f:96:77:65:64:
52:76:e8:52:06:d7:69:6f:41:1a:33:43:bb:72:94:fa:6b:90:
fe:20:c2:a6:34:e6:88:c7:e6:a4:37:69:3e:a5:75:b4:3c:63:
ea:59:e5:06:07:02:ef:5d:be:2d:09:56:25:31:32:6e:0b:01:
e9:fe:1b:ff:13:ca:9d:b4:06:11:97:9c:a1:cd:98:21:42:d1:
6c:9f:3a:f4:90:54:fc:7a:56:49:d3:4b:c0:59:85:a2:95:89:
55:b1:d6:02:e1:23:1d:76:e2:78:63:ea:c4:7d:bb:98:41:81:
03:e3:6d:86:fb:35:61:58:18:70:69:37:28:e1:08:68:9e:42:
37:9c:55:ee:2d:a6:da:cb:9b:e6:46:d5:fd:98:7f:ba:b9:80:
14:df:00:c2:f6:32:12:8f:18:49:91:b6:8b:77:03:60:92:d1:
01:dd:9e:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2NDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk1MkZGN0U1QjJFRjA4
MDk5MTFDMEU5MjA5RjE5MTcyQUFDMjBFODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2YKd+luNiHZ7w425eAiJ9Yv0eMHe+02O4zFF/ndvyH3UIpBRC
PrzEvQGu+CTgh2rCtVxEHTRZYinx3vj5aAeR8gtrvXgaMjK7GOH2hbI4T+CpKojF
QWrnCKadAfi80UJ593XIAv1y5jBM5BcGWFQM646JFbx+doKmHldntJoFMeSuXsQB
Qyj9w0R0aXe+7rBn1pwdtijEowdbC1Bh7yGnh/4igt2A1nnfFgv7fYZjGN7pHCQo
fR1b0jH9yuRbswwYpQ8Ono6lqEsS5ltnxx8G6avE9qWy3O8Xm+53PZ0ionC9FnYP
EiXbbkuM8sUy2HCW37xb2UIEYZ4DtbMxO2edAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlS/35bLvCAmRHA6SCfGRcqrCDoYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xTXzM1Ykx2Q0FtUkhBNlND
ZkdSY3FyQ0RvWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2tAwDQYJKoZIhvcNAQELBQADggEBACXdQySlq+j/duf1hubW6zqxbnm+tvzrqbU4
nl939LzV3U4b8DOltqSRMeOfLKe4jCsOu8vAd7aI0e8Al/OEYhF85Zmeimx3nYXG
tHK7ngtiJ9q5OXIPlndlZFJ26FIG12lvQRozQ7tylPprkP4gwqY05ojH5qQ3aT6l
dbQ8Y+pZ5QYHAu9dvi0JViUxMm4LAen+G/8Typ20BhGXnKHNmCFC0WyfOvSQVPx6
VknTS8BZhaKViVWx1gLhIx124nhj6sR9u5hBgQPjbYb7NWFYGHBpNyjhCGieQjec
Ve4tptrLm+ZG1f2Yf7q5gBTfAML2MhKPGEmRtot3A2CS0QHdnuM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org