Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4e8_l-nlmlhOpCeEVj5rqzZGhYU.roa
File: 4e8_l-nlmlhOpCeEVj5rqzZGhYU.roa (raw, json)
Hash identifier: Gvj1YCb9qu1hSWZz/WOw3PGE7hzQMcf8XlElttClGj4=
Subject key identifier: E1:EF:3F:97:E9:E5:9A:58:4E:A4:27:84:56:3E:6B:AB:36:46:85:85
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1970
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4e8_l-nlmlhOpCeEVj5rqzZGhYU.roa
Signing time: Sat 22 Oct 2022 06:06:31 +0000
ROA not before: Sat 22 Oct 2022 06:06:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6512 (0x1970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E1EF3F97E9E59A584EA42784563E6BAB36468585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:05:d1:b0:67:43:bd:98:05:d8:cc:90:17:
c0:a8:b0:4c:dc:fd:26:43:3f:79:97:b3:5d:82:2e:
da:62:d7:3a:fc:59:a0:11:4d:73:e1:48:41:66:f5:
81:be:1b:bd:ec:82:85:cf:f5:f2:25:b2:74:2c:ed:
c2:61:05:d6:22:1a:72:33:59:04:e5:6c:79:26:7b:
3e:a5:75:74:dc:48:3c:e6:6c:1f:c5:5a:8d:42:f7:
6c:47:47:7a:b6:fb:9e:ba:e2:29:6c:5b:0f:80:22:
02:6d:ff:b6:4e:71:f8:fb:57:6c:47:59:bb:47:19:
58:17:43:ad:9f:98:4c:90:4d:ea:3e:03:fe:3a:3d:
f0:16:73:fb:eb:56:8b:c9:33:20:00:2c:87:fd:27:
00:9b:a8:31:88:c0:91:85:3d:8b:84:66:6c:07:44:
79:56:3c:5d:ee:45:76:4a:b7:20:97:51:b7:d2:4c:
54:e3:cf:ad:2b:ea:07:30:9b:cf:55:a5:9b:6b:b0:
a6:de:95:aa:e6:05:a3:37:34:0d:29:91:b1:f7:9d:
ee:7b:64:ae:9d:e5:7a:92:f7:a1:d1:99:43:fd:6a:
4a:1e:c1:da:0e:2f:16:23:f0:65:6f:43:b6:2e:62:
30:df:2c:b7:9f:cc:e5:0f:8f:1f:9b:6f:48:10:36:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EF:3F:97:E9:E5:9A:58:4E:A4:27:84:56:3E:6B:AB:36:46:85:85
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4e8_l-nlmlhOpCeEVj5rqzZGhYU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
05:23:3e:7a:b3:3a:56:e7:2d:00:bd:43:8b:42:a6:3d:d8:45:
8f:fa:7f:db:34:0a:c3:2e:b2:27:ef:26:10:a3:f8:d4:ac:15:
33:b8:ac:d6:b6:c8:69:65:34:98:a4:e6:64:16:00:b1:9a:ad:
7b:56:0e:fd:cb:b7:b9:a4:b4:6a:dd:f7:3f:22:65:5f:ad:e8:
b1:06:f2:c4:03:e5:fa:2f:dc:68:a1:96:ae:31:0a:10:c8:ae:
7e:1d:70:59:c6:21:41:a3:44:6e:86:a5:cf:42:48:54:82:5a:
b9:fa:7c:62:45:07:53:6d:0c:be:8f:2a:03:b0:55:f4:61:49:
e0:49:90:d8:ef:ad:b1:14:0e:85:92:36:fc:72:1e:d8:10:df:
b2:93:cb:d6:b1:f8:9d:dc:62:80:93:5f:0e:7b:c2:98:97:ab:
51:47:ff:57:06:15:22:ef:4c:da:8e:5f:17:d7:44:a4:23:53:
38:92:07:59:40:59:ed:a2:f5:1e:a4:d6:c3:17:ec:1a:3a:73:
46:78:ec:fc:01:e0:43:e2:47:c9:dc:dc:96:d4:a7:80:98:1c:
4b:47:e8:99:8a:4c:28:7a:23:b6:ef:6c:fc:77:c4:eb:73:1d:
2a:9b:33:dd:0f:77:65:87:c9:a5:2e:6b:fb:7c:51:b5:67:6c:
1b:2b:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org