Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p-x4_kUrgHfQZ6B_DgnyZiy3cvY.roa
File: p-x4_kUrgHfQZ6B_DgnyZiy3cvY.roa (raw, json)
Hash identifier: vKLqlR6cRvE1x7LxmqjgUt7IdowAFbCi7DGgibBgbU8=
Subject key identifier: A7:EC:78:FE:45:2B:80:77:D0:67:A0:7F:0E:09:F2:66:2C:B7:72:F6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18E8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p-x4_kUrgHfQZ6B_DgnyZiy3cvY.roa
Signing time: Sat 22 Oct 2022 06:05:51 +0000
ROA not before: Sat 22 Oct 2022 06:05:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6376 (0x18e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7EC78FE452B8077D067A07F0E09F2662CB772F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:94:89:8d:3d:9d:15:da:c4:6b:c4:41:a5:
d1:b4:f1:df:95:33:74:65:22:32:3e:2f:d9:19:c4:
e6:56:4e:f3:0f:65:0c:b3:e7:0b:11:7d:a0:97:e2:
60:9a:ab:78:bf:b9:ac:0a:2b:ac:64:42:17:f7:cd:
b6:cb:5b:04:b9:2e:ee:a6:5b:e6:12:14:d4:55:d4:
ab:75:cd:e7:df:69:76:19:d4:51:00:2d:dc:84:59:
f8:c8:dc:c0:f1:05:04:de:4c:2c:80:88:b6:05:4b:
0e:de:40:de:b8:c0:22:e8:19:e5:0c:f5:70:c5:e9:
07:71:2a:97:bc:23:21:26:4b:b6:1e:7a:d6:a0:c0:
3c:25:0d:ec:d1:23:24:1d:76:e6:c8:23:d4:6c:86:
b8:dd:02:e5:3b:9a:fa:f9:98:98:7a:62:75:f6:80:
78:1e:26:20:8b:f1:8a:25:0e:1e:d7:10:fa:d0:59:
4f:5a:9d:2f:f0:aa:9d:3d:6b:d9:df:82:a4:cd:e2:
29:d5:4a:3b:06:90:9d:1b:77:13:e2:46:3a:5e:b5:
5e:5c:9a:1b:82:46:37:13:4b:83:e1:5b:ac:ea:5e:
01:b8:6b:35:48:19:bd:5e:99:2e:55:50:12:66:cb:
1b:99:60:99:a3:5f:1e:fe:32:0f:7e:2b:3a:09:a3:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EC:78:FE:45:2B:80:77:D0:67:A0:7F:0E:09:F2:66:2C:B7:72:F6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p-x4_kUrgHfQZ6B_DgnyZiy3cvY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.138.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f1:b4:da:38:58:f4:51:38:88:73:b4:2f:35:22:fc:37:82:
80:7d:ca:90:fe:71:85:86:4c:f4:2c:0b:d7:0e:f9:f9:58:46:
77:5a:1f:8f:d5:39:7e:f6:d2:eb:b6:ba:5a:fa:75:06:50:08:
ad:f9:37:17:30:29:ec:5f:47:68:ac:b5:78:59:dd:76:45:5b:
73:0f:67:ce:85:ab:48:40:7c:a7:8d:ed:c7:18:35:20:62:24:
3e:28:e1:63:1e:09:b3:3f:96:1f:53:7b:20:a6:f8:d0:98:31:
ef:af:93:61:a7:02:eb:36:c3:cc:a9:37:7c:e9:05:46:ca:c6:
9a:8f:7e:26:98:60:f3:e4:a6:8c:15:17:f0:55:b9:8b:23:03:
e9:2c:ae:2d:fd:2e:90:1e:eb:a9:f8:c1:eb:93:3f:9f:44:3d:
72:11:eb:9c:4d:1e:09:20:3a:62:d2:3b:35:b2:cc:8d:dc:a4:
ce:2a:bf:3c:3e:eb:8a:06:55:3d:17:b2:7a:34:01:30:6d:38:
6e:22:ae:80:a0:7f:7c:07:c6:44:a1:4c:91:98:a0:40:9b:8c:
fa:8c:db:3a:2f:77:a8:e3:47:4f:eb:c2:e2:48:5a:c8:80:f4:
c4:b4:f0:d0:b3:4b:9d:c3:43:af:f6:cb:c5:b5:86:eb:fd:46:
0d:8d:62:f3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE3RUM3OEZFNDUyQjgw
NzdEMDY3QTA3RjBFMDlGMjY2MkNCNzcyRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDNJSJjT2dFdrEa8RBpdG08d+VM3RlIjI+L9kZxOZWTvMPZQyz
5wsRfaCX4mCaq3i/uawKK6xkQhf3zbbLWwS5Lu6mW+YSFNRV1Kt1zeffaXYZ1FEA
LdyEWfjI3MDxBQTeTCyAiLYFSw7eQN64wCLoGeUM9XDF6QdxKpe8IyEmS7Yeetag
wDwlDezRIyQddubII9RshrjdAuU7mvr5mJh6YnX2gHgeJiCL8YolDh7XEPrQWU9a
nS/wqp09a9nfgqTN4inVSjsGkJ0bdxPiRjpetV5cmhuCRjcTS4PhW6zqXgG4azVI
Gb1emS5VUBJmyxuZYJmjXx7+Mg9+KzoJo3zjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUp+x4/kUrgHfQZ6B/DgnyZiy3cvYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3AteDRfa1VyZ0hmUVo2Ql9E
Z255Wml5M2N2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2oowDQYJKoZIhvcNAQELBQADggEBADHxtNo4WPRROIhztC81Ivw3goB9ypD+cYWG
TPQsC9cO+flYRndaH4/VOX720uu2ulr6dQZQCK35NxcwKexfR2istXhZ3XZFW3MP
Z86Fq0hAfKeN7ccYNSBiJD4o4WMeCbM/lh9TeyCm+NCYMe+vk2GnAus2w8ypN3zp
BUbKxpqPfiaYYPPkpowVF/BVuYsjA+ksri39LpAe66n4weuTP59EPXIR65xNHgkg
OmLSOzWyzI3cpM4qvzw+64oGVT0Xsno0ATBtOG4iroCgf3wHxkShTJGYoECbjPqM
2zovd6jjR0/rwuJIWsiA9MS08NCzS53DQ6/2y8W1huv9Rg2NYvM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:41 2025 by rpki-client