Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8K5q2cMBmZ4rxuBpQLmpy2modA.roa
File: u8K5q2cMBmZ4rxuBpQLmpy2modA.roa (raw, json)
Hash identifier: PmT7Sxd7ZUPiTRi/s3aLjIjnF23LjkwZgJ9UV7TgZIU=
Subject key identifier: BB:C2:B9:AB:67:0C:06:66:78:AF:1B:81:A5:02:E6:A7:2D:A6:A1:D0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8K5q2cMBmZ4rxuBpQLmpy2modA.roa
Signing time: Thu 15 Sep 2022 02:35:38 +0000
ROA not before: Thu 15 Sep 2022 02:35:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BBC2B9AB670C066678AF1B81A502E6A72DA6A1D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:c8:81:30:1e:fa:33:0a:89:b5:07:49:8d:
53:93:92:d7:13:29:66:54:d4:4a:ab:75:2a:2d:10:
43:87:46:35:db:4c:c5:d1:3a:01:df:85:fd:5a:b1:
73:55:b1:24:c5:22:f8:f4:a4:f4:cf:44:aa:a2:e2:
bd:d8:5d:c3:1f:0f:99:99:b8:5e:a2:29:03:45:bf:
13:68:f8:db:7f:72:d7:ab:c5:3a:51:e9:48:e4:f1:
4d:3d:ee:ed:e7:bd:0b:39:d3:14:90:7a:f6:eb:5d:
a1:46:7d:00:83:a3:5d:d1:05:db:f5:07:cb:a3:5e:
78:25:92:bc:8f:67:ca:04:45:0e:62:d6:58:96:8e:
41:5c:52:6d:e3:32:af:36:10:9d:32:b2:32:fe:c8:
0e:c1:e4:45:44:0d:ae:73:d3:f9:e6:22:b9:c2:53:
1b:45:ae:38:aa:2f:a7:68:75:56:4a:96:29:df:f5:
44:a2:46:f4:42:4e:87:b9:b5:12:a0:52:a1:ba:b1:
59:e1:2f:bc:29:c6:b2:0c:95:98:0c:96:08:3f:83:
34:a8:8b:d7:47:66:82:c3:fb:a3:80:f1:2a:8c:af:
84:44:bf:ed:22:99:06:86:bc:e8:c1:fc:aa:31:cc:
f6:ab:7b:c3:c3:7c:47:a4:0e:45:c9:17:08:c1:04:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:B9:AB:67:0C:06:66:78:AF:1B:81:A5:02:E6:A7:2D:A6:A1:D0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8K5q2cMBmZ4rxuBpQLmpy2modA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.190.0/23
Signature Algorithm: sha256WithRSAEncryption
81:52:38:4d:8c:8b:a0:2a:fb:4e:cd:2f:21:f7:84:e0:8b:db:
59:7e:48:5e:ba:99:f9:b1:87:63:65:72:cc:ea:7f:14:c2:43:
30:f5:ec:5a:a6:4a:2b:41:46:ce:76:88:5f:5f:3d:fe:8d:a5:
7d:19:5c:56:ee:5c:11:74:51:6f:5f:3f:00:51:b3:65:99:1b:
27:14:4a:bd:23:db:77:d0:c4:04:32:a8:82:eb:6d:d2:18:4c:
03:5d:8c:ac:8a:04:e2:6c:72:bf:ab:9b:4e:79:99:d9:0f:b2:
c2:1b:da:90:71:cf:dc:c5:66:dd:c7:08:5d:5f:1e:1d:36:14:
3f:32:50:dc:bb:70:7b:40:97:c8:37:59:8a:77:b6:7a:24:a6:
bc:40:58:20:a0:6d:29:c1:3d:58:85:d7:d6:69:bd:72:11:e8:
ab:4f:47:eb:e3:f5:35:67:9e:40:ef:d5:81:c5:c0:3d:67:40:
b6:84:93:8f:32:0f:0b:ab:39:1c:1f:85:19:aa:5a:52:f4:c8:
cb:4d:19:aa:77:0a:85:65:68:72:99:d6:03:15:51:63:fd:55:
95:54:cd:32:a9:9a:b1:c9:36:8c:29:2c:a4:70:96:7d:b8:df:
ff:87:bf:38:a1:18:a1:95:49:09:9c:00:53:71:79:98:05:c3:
9e:c2:17:09
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJCQzJCOUFCNjcwQzA2
NjY3OEFGMUI4MUE1MDJFNkE3MkRBNkExRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbO8iBMB76MwqJtQdJjVOTktcTKWZU1EqrdSotEEOHRjXbTMXR
OgHfhf1asXNVsSTFIvj0pPTPRKqi4r3YXcMfD5mZuF6iKQNFvxNo+Nt/cterxTpR
6Ujk8U097u3nvQs50xSQevbrXaFGfQCDo13RBdv1B8ujXnglkryPZ8oERQ5i1liW
jkFcUm3jMq82EJ0ysjL+yA7B5EVEDa5z0/nmIrnCUxtFrjiqL6dodVZKlinf9USi
RvRCToe5tRKgUqG6sVnhL7wpxrIMlZgMlgg/gzSoi9dHZoLD+6OA8SqMr4REv+0i
mQaGvOjB/KoxzPare8PDfEekDkXJFwjBBDkPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUu8K5q2cMBmZ4rxuBpQLmpy2modAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3U4SzVxMmNNQm1aNHJ4dUJw
UUxtcHkybW9kQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
2r4wDQYJKoZIhvcNAQELBQADggEBAIFSOE2Mi6Aq+07NLyH3hOCL21l+SF66mfmx
h2NlcszqfxTCQzD17FqmSitBRs52iF9fPf6NpX0ZXFbuXBF0UW9fPwBRs2WZGycU
Sr0j23fQxAQyqILrbdIYTANdjKyKBOJscr+rm055mdkPssIb2pBxz9zFZt3HCF1f
Hh02FD8yUNy7cHtAl8g3WYp3tnokprxAWCCgbSnBPViF19ZpvXIR6KtPR+vj9TVn
nkDv1YHFwD1nQLaEk48yDwurORwfhRmqWlL0yMtNGap3CoVlaHKZ1gMVUWP9VZVU
zTKpmrHJNowpLKRwln243/+HvzihGKGVSQmcAFNxeZgFw57CFwk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org