Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9nB0yOIEr9cfElQNTj2jtMHDpO8.roa
File: 9nB0yOIEr9cfElQNTj2jtMHDpO8.roa (raw, json)
Hash identifier: kqC6WM0sbiT67jYGSx7XUnB54FBmllxlg978J+oOR2E=
Subject key identifier: F6:70:74:C8:E2:04:AF:D7:1F:12:54:0D:4E:3D:A3:B4:C1:C3:A4:EF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A88
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9nB0yOIEr9cfElQNTj2jtMHDpO8.roa
Signing time: Tue 29 Nov 2022 02:04:24 +0000
ROA not before: Tue 29 Nov 2022 02:04:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6792 (0x1a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Nov 29 02:04:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F67074C8E204AFD71F12540D4E3DA3B4C1C3A4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:1a:ef:0c:a9:a8:c6:72:82:5a:79:89:12:
73:4f:43:88:19:9f:87:44:6e:4c:b5:fe:14:c2:94:
43:1c:1f:54:bb:68:49:f5:ab:9e:fa:22:b5:09:da:
51:27:ee:62:c2:b0:2b:3f:bc:9f:06:04:23:c5:88:
14:00:cc:48:bf:ee:58:af:af:fe:c9:64:28:34:30:
26:92:40:92:a2:49:97:b8:71:36:df:fb:36:1a:45:
2d:99:02:51:b4:b7:28:62:3d:1a:25:c5:d6:a9:3a:
25:f1:b2:e0:90:9d:fb:71:3f:31:3c:30:f2:c2:30:
6d:5d:dc:0c:13:fd:64:c7:e9:30:3e:d4:b3:8b:4c:
d4:6e:cd:b6:3d:d1:5b:72:a1:ae:e3:a6:39:fd:18:
be:4f:fc:c0:42:22:25:39:47:b6:d6:5f:3e:40:31:
c0:6a:04:7f:a2:8a:9d:3b:e3:97:23:1a:2c:f4:85:
3d:aa:bc:65:e1:57:87:ed:6a:97:b9:b0:fb:f4:81:
79:ed:f3:83:00:63:a7:68:1f:c6:74:af:19:1d:b4:
e9:cb:7a:e9:51:42:b3:84:70:bc:09:1f:72:66:0a:
50:c2:68:40:19:43:6a:96:7f:7b:96:57:5e:3a:7a:
63:77:e0:35:a9:4f:93:cd:a4:76:24:fc:49:26:15:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:74:C8:E2:04:AF:D7:1F:12:54:0D:4E:3D:A3:B4:C1:C3:A4:EF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9nB0yOIEr9cfElQNTj2jtMHDpO8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.232.0/22
Signature Algorithm: sha256WithRSAEncryption
07:ec:56:b6:54:94:09:64:ba:b9:35:9c:47:1c:65:0c:bb:4d:
a0:cf:58:dd:c4:2d:4f:f3:b2:67:1c:11:69:7f:ee:91:13:ac:
1b:e6:57:b1:31:db:95:e7:27:c1:20:85:9c:f0:de:0e:e0:d9:
b0:b7:5f:b5:5c:79:3e:65:d7:21:38:e3:54:a0:54:ac:36:04:
1d:91:9d:bb:1d:b3:5e:09:70:10:5c:b8:5c:9f:c0:4d:d6:6b:
4a:78:b2:cc:1d:99:05:e1:f6:aa:82:6b:e9:f4:6a:2f:6e:fa:
98:e0:85:be:45:69:c9:6e:e3:1c:05:cd:ca:9b:0b:c0:b1:ab:
25:45:d4:68:54:f7:15:15:ba:6f:50:95:eb:4a:71:09:89:0c:
9f:d2:bb:ed:4d:04:bf:50:42:19:c3:81:6a:b4:11:0b:fd:55:
c3:0f:d3:40:38:90:b9:ff:b0:84:d9:37:69:46:85:a0:ed:c7:
5a:b9:db:e5:3a:72:f5:f8:50:be:72:f9:c7:c4:ce:39:a9:3f:
09:29:00:d1:41:e1:1b:21:7e:b2:91:e1:9d:27:8a:8c:c8:20:
b9:63:4c:23:c2:82:54:3f:f8:78:88:25:15:a9:f8:be:1a:7a:
27:0c:20:be:06:bc:bb:60:1e:92:9f:94:b9:6c:7f:46:3f:c4:
ea:42:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org