Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3UUxDfI7j_6dfncafihC3UY_N0M.roa
File: 3UUxDfI7j_6dfncafihC3UY_N0M.roa (raw, json)
Hash identifier: KRax/jp7ebI6R4suK+ZD+O/IH70M8G8t1XDULbeI5o0=
Subject key identifier: DD:45:31:0D:F2:3B:8F:FE:9D:7E:77:1A:7E:28:42:DD:46:3F:37:43
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D3B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3UUxDfI7j_6dfncafihC3UY_N0M.roa
Signing time: Thu 14 Jan 2021 07:27:30 +0000
ROA not before: Thu 14 Jan 2021 07:27:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 180.218.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3387 (0xd3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:27:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DD45310DF23B8FFE9D7E771A7E2842DD463F3743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:f3:d5:ae:32:6a:a6:09:24:1a:7d:ad:70:
cb:3e:b3:f8:a4:2b:dd:3f:ce:82:8a:36:91:4e:c7:
b7:d8:93:de:38:ed:fc:01:10:51:93:34:d2:41:5d:
81:b2:e7:18:22:ce:bd:0a:8a:3a:9f:d3:8c:f3:6d:
28:5a:88:46:76:52:d7:1b:29:eb:d8:c3:7a:16:16:
14:e9:b9:d2:43:b4:06:8d:8c:41:88:34:53:3a:f7:
4a:95:c7:3b:32:f2:50:01:c8:a0:b8:98:8e:37:9e:
38:05:45:a3:86:45:69:e7:c4:ba:ae:1a:67:fb:ea:
ac:d4:ae:43:88:6a:3f:4f:75:5f:e4:83:18:3b:45:
d3:81:07:e7:ab:19:b2:17:90:a9:b7:69:5a:c5:27:
bf:89:d8:b1:34:dc:30:d3:b9:74:11:a8:d6:e7:04:
25:99:a8:a6:90:38:36:6e:54:12:b7:ee:55:cb:45:
c0:05:91:2b:de:a5:fa:58:cb:27:3f:4d:73:f9:4b:
65:6c:97:a0:cc:d1:18:74:6a:10:93:ef:36:d7:d0:
2f:91:5a:ee:c3:bf:32:51:07:ab:e4:18:f1:02:b2:
d4:a1:0b:3f:3c:38:94:3a:8a:d9:5f:31:53:08:b9:
81:9d:a1:ec:ba:4c:37:97:3c:62:8a:6d:8e:cc:64:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:45:31:0D:F2:3B:8F:FE:9D:7E:77:1A:7E:28:42:DD:46:3F:37:43
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3UUxDfI7j_6dfncafihC3UY_N0M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:9c:d8:d0:7c:dd:35:69:35:7d:be:92:00:f5:cd:11:72:02:
b4:dc:a0:28:99:fd:fc:bb:86:f8:42:e0:fa:5a:46:5a:74:d3:
9c:92:f3:e3:e3:e3:5f:b4:80:d5:5d:b0:97:da:42:0c:9c:0e:
65:9a:60:4e:85:f9:17:a8:c5:0d:7a:33:1c:55:23:a4:7f:d5:
49:95:33:bc:06:0e:3c:ff:35:03:38:15:c9:d5:c4:d7:a0:e4:
b6:e4:66:70:3b:c5:80:ba:63:b6:d1:62:fe:ae:ce:c0:75:9b:
41:8d:57:ac:07:bb:49:50:e1:bb:43:a3:31:10:20:02:dd:0e:
c5:9c:3b:dd:09:b0:f0:ca:74:62:e0:5d:b3:03:77:f0:da:1e:
f4:ef:8d:04:c1:a1:8e:f8:93:7c:a5:87:68:f3:4f:86:0b:78:
35:64:40:bc:a3:76:70:91:7c:30:20:7d:f1:cb:40:b7:b5:d4:
22:ea:8d:26:71:ac:61:f1:61:5e:c3:41:d6:b5:f5:95:3a:cd:
d1:00:f8:41:9a:62:34:3a:f1:67:4e:3f:91:a9:85:73:b8:bf:
d1:d9:d5:41:b0:3c:d2:1c:0d:e1:1d:94:88:02:a4:f7:3e:c8:
59:a9:62:db:8e:9d:b0:3d:51:4c:45:2c:26:b4:8e:4a:a2:f5:
a5:90:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org