Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/svQEhSacuoicz7aQa2fexlGeaZ0.roa
File: svQEhSacuoicz7aQa2fexlGeaZ0.roa (raw, json)
Hash identifier: 7zpFR0IpkNDrH8qh5RTSy/4cHqTCeoPtFcsFGmqr3IA=
Subject key identifier: B2:F4:04:85:26:9C:BA:88:9C:CF:B6:90:6B:67:DE:C6:51:9E:69:9D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1964
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/svQEhSacuoicz7aQa2fexlGeaZ0.roa
Signing time: Sat 22 Oct 2022 06:06:29 +0000
ROA not before: Sat 22 Oct 2022 06:06:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6500 (0x1964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B2F40485269CBA889CCFB6906B67DEC6519E699D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:91:5b:34:3d:9f:b9:db:cf:60:5f:96:ee:
85:20:57:3e:79:a2:e4:77:8f:61:4e:8e:31:a9:54:
b4:1a:0b:b4:78:44:cb:5b:22:0c:7f:9d:d4:ac:91:
29:9e:8d:c1:3f:43:5a:36:2c:54:df:ea:1c:da:3f:
f3:d7:d3:42:9d:87:8c:eb:e9:af:c8:0c:5e:bb:2f:
85:8c:0b:5d:61:ce:b4:62:0c:af:5a:60:76:33:06:
f7:1b:98:0e:40:b6:1e:ba:2c:6d:e9:17:fa:e0:ef:
cb:8a:fa:e4:51:f7:93:55:0b:64:49:1c:07:a6:fb:
a6:29:a0:23:4d:63:41:50:54:a6:0e:b5:05:ba:47:
bd:d7:f8:c0:4a:96:4f:70:a8:06:03:6a:fe:ed:9c:
c4:57:2d:b2:53:dc:0e:6c:85:39:99:ab:ff:99:99:
70:5b:8d:e3:81:6b:91:04:8a:0e:50:12:87:14:b6:
c1:7e:a5:40:0e:c1:ea:55:cf:87:9f:6b:84:f1:d7:
26:f7:8f:d0:8c:27:78:ef:06:d7:17:fc:ad:ab:7e:
d1:38:80:9d:bb:f6:d1:94:de:39:ce:63:c1:b2:80:
5d:62:8a:f6:95:d3:96:f1:af:0d:49:20:35:ae:c7:
ec:a6:f2:b6:29:76:72:f7:67:c2:18:89:c3:7d:c7:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:04:85:26:9C:BA:88:9C:CF:B6:90:6B:67:DE:C6:51:9E:69:9D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/svQEhSacuoicz7aQa2fexlGeaZ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.108.0/22
Signature Algorithm: sha256WithRSAEncryption
69:5b:5c:26:54:7f:c5:4f:0a:d4:fa:93:bc:9d:54:03:4b:da:
ab:83:d0:1c:e6:4a:3b:23:e6:05:55:75:de:34:75:3e:d8:36:
98:17:45:bb:42:e6:c3:d8:92:33:e2:f4:3e:af:e5:e0:50:93:
99:ac:c7:45:52:ea:36:f4:ee:b2:47:de:82:b9:b0:c3:bf:17:
22:c7:68:fb:13:41:14:74:7e:81:a5:e9:94:d5:21:6d:85:fa:
1d:08:02:5b:26:d1:67:e5:a0:f9:20:73:5c:f2:83:22:08:8d:
de:21:c5:cb:cd:da:17:cd:41:38:eb:58:a4:bd:d6:c1:29:77:
94:fe:16:db:77:9e:8a:c0:fa:1e:b6:ea:ee:45:1b:63:90:8a:
f7:f0:a3:4d:56:a3:71:3d:1b:4a:b5:66:67:6d:c7:73:f6:78:
cf:ce:5c:b0:15:49:ed:e0:0d:13:c9:78:b5:fe:45:6f:9e:95:
64:8e:33:a7:7c:94:b7:6b:42:6f:af:7e:3a:a8:bc:68:77:ff:
1d:f2:97:81:69:e3:12:38:8f:ed:6f:d1:e1:a5:c3:5f:72:d0:
64:a1:cf:ab:68:12:a0:55:5b:b0:6c:4e:9d:ce:d5:3e:95:3b:
68:18:7e:ce:fe:96:02:e6:ef:78:23:59:51:c5:19:3a:7e:0d:
a4:59:f3:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEIyRjQwNDg1MjY5Q0JB
ODg5Q0NGQjY5MDZCNjdERUM2NTE5RTY5OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoR5FbND2fudvPYF+W7oUgVz55ouR3j2FOjjGpVLQaC7R4RMtb
Igx/ndSskSmejcE/Q1o2LFTf6hzaP/PX00Kdh4zr6a/IDF67L4WMC11hzrRiDK9a
YHYzBvcbmA5Ath66LG3pF/rg78uK+uRR95NVC2RJHAem+6YpoCNNY0FQVKYOtQW6
R73X+MBKlk9wqAYDav7tnMRXLbJT3A5shTmZq/+ZmXBbjeOBa5EEig5QEocUtsF+
pUAOwepVz4efa4Tx1yb3j9CMJ3jvBtcX/K2rftE4gJ279tGU3jnOY8GygF1iivaV
05bxrw1JIDWux+ym8rYpdnL3Z8IYicN9x6dzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsvQEhSacuoicz7aQa2fexlGeaZ0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3N2UUVoU2FjdW9pY3o3YVFh
MmZleGxHZWFaMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2mwwDQYJKoZIhvcNAQELBQADggEBAGlbXCZUf8VPCtT6k7ydVANL2quD0BzmSjsj
5gVVdd40dT7YNpgXRbtC5sPYkjPi9D6v5eBQk5msx0VS6jb07rJH3oK5sMO/FyLH
aPsTQRR0foGl6ZTVIW2F+h0IAlsm0WfloPkgc1zygyIIjd4hxcvN2hfNQTjrWKS9
1sEpd5T+Ftt3norA+h626u5FG2OQivfwo01Wo3E9G0q1Zmdtx3P2eM/OXLAVSe3g
DRPJeLX+RW+elWSOM6d8lLdrQm+vfjqovGh3/x3yl4Fp4xI4j+1v0eGlw19y0GSh
z6toEqBVW7BsTp3O1T6VO2gYfs7+lgLm73gjWVHFGTp+DaRZ89w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org