Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8A0iStfPomwiS8brgSUlomynU4g.roa
File: 8A0iStfPomwiS8brgSUlomynU4g.roa (raw, json)
Hash identifier: jYO0z8uGVZbsRR0fwkl3BW4zZ0UfRMV/S7TVLsC4o8g=
Subject key identifier: F0:0D:22:4A:D7:CF:A2:6C:22:4B:C6:EB:81:25:25:A2:6C:A7:53:88
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1932
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8A0iStfPomwiS8brgSUlomynU4g.roa
Signing time: Sat 22 Oct 2022 06:06:13 +0000
ROA not before: Sat 22 Oct 2022 06:06:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6450 (0x1932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F00D224AD7CFA26C224BC6EB812525A26CA75388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:33:d2:63:04:b3:d9:6f:9a:c5:74:89:25:
30:91:ad:9a:0d:1f:4c:e0:a4:77:08:30:56:c8:d3:
98:44:cf:9e:bf:2a:fe:85:a4:03:95:c3:c1:1b:97:
3c:f9:cc:c2:ac:c5:8f:6f:6b:85:48:96:9a:26:5e:
16:d1:cd:98:6e:b2:d6:da:6b:45:4c:1c:87:58:92:
c3:b9:33:3c:90:87:2b:05:65:cd:11:cb:1f:38:ab:
5f:50:32:66:fe:bd:03:00:44:6b:80:1b:6d:63:3c:
1e:ff:29:8e:78:0b:38:b6:86:96:9c:75:d0:d4:29:
a1:d3:7d:e1:0b:c4:cf:64:dd:80:72:04:4b:c8:79:
18:16:c7:0f:11:1b:e0:c0:35:5a:3d:b3:5f:c5:6e:
57:53:52:60:20:ad:65:5a:9d:f4:8c:d6:ca:d7:46:
d3:42:68:45:7d:c0:54:99:c8:7b:3b:24:43:bf:d7:
7d:c1:c0:9b:7c:d3:ff:25:81:41:02:dd:5f:11:d5:
ad:cc:dd:9d:0a:6a:82:a8:76:38:c7:a4:f1:03:de:
54:b6:d5:ab:02:aa:cb:b1:9f:28:91:aa:89:bd:08:
c4:fa:0f:bd:a2:c5:1d:0d:15:a5:99:95:ca:e6:76:
91:10:bd:8a:88:b6:88:74:13:09:b9:7f:d3:0b:90:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:22:4A:D7:CF:A2:6C:22:4B:C6:EB:81:25:25:A2:6C:A7:53:88
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8A0iStfPomwiS8brgSUlomynU4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:fe:44:65:54:ec:fc:24:43:ef:d6:b5:16:cf:cb:85:20:7a:
87:b4:fc:15:b4:2f:77:0c:8c:ca:18:25:9c:91:9a:bc:4a:7c:
0c:37:bf:a8:f7:26:86:2a:55:90:0a:41:e7:18:cc:38:68:9e:
f5:de:6b:72:c8:2b:14:52:48:d8:2f:a1:b4:8c:50:54:a0:8e:
fb:e8:98:27:1f:24:a0:4a:80:07:53:18:d2:31:97:a4:f6:98:
9a:c7:01:8a:91:91:7c:91:8d:e8:27:94:f9:bd:26:94:6f:00:
61:13:ec:86:ee:35:7a:3a:92:6a:d0:45:10:93:3d:b4:fd:ad:
a6:04:aa:ac:5a:83:c9:31:79:f6:1b:c1:ef:e6:67:70:c0:4b:
6c:e4:30:7c:f6:19:b5:61:02:26:41:18:a2:d5:7e:94:3e:d5:
eb:fb:f9:17:90:d3:46:23:e5:a0:4e:08:b6:c5:e5:41:78:23:
2b:b6:9f:b0:7b:75:eb:3f:4f:ba:7a:30:21:b9:cb:c3:b5:bd:
3f:c7:c5:1d:14:91:fe:31:6d:1d:ec:84:3a:fe:f2:a6:ad:c4:
58:9f:97:9c:84:fa:d7:e4:bc:79:8e:85:ae:7f:2d:e0:4a:9e:
66:3f:d5:4c:88:0c:94:9e:24:97:8b:b2:70:3d:79:a8:96:fa:
2c:ab:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org