Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CFhyyvmXeJ26tShfZK5FW8sL23w.roa
File: CFhyyvmXeJ26tShfZK5FW8sL23w.roa (raw, json)
Hash identifier: X0nh9vOD7989O1XhOmjGWqRMga1K+seqJ7lgeRhBL1g=
Subject key identifier: 08:58:72:CA:F9:97:78:9D:BA:B5:28:5F:64:AE:45:5B:CB:0B:DB:7C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CFhyyvmXeJ26tShfZK5FW8sL23w.roa
Signing time: Thu 15 Sep 2022 02:36:44 +0000
ROA not before: Thu 15 Sep 2022 02:36:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=085872CAF997789DBAB5285F64AE455BCB0BDB7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:5b:4c:38:72:11:e2:30:fc:7e:b2:0d:b8:
16:f5:42:59:0f:68:04:43:42:79:9e:86:0a:b7:00:
12:a3:69:71:39:f7:60:c1:9b:b3:6a:4e:ea:6e:da:
ee:cb:e5:36:23:07:dc:fa:51:85:46:52:5c:05:0e:
e9:51:cc:63:d2:5b:1c:31:81:0d:53:b5:fd:67:f1:
36:15:96:44:3d:69:d3:2c:58:65:6e:40:ee:eb:c8:
e8:16:09:4b:a1:ff:3d:fe:16:bf:dd:b8:79:4c:01:
c4:df:f0:8e:4d:8b:7c:be:6f:8d:ed:27:c1:12:33:
29:fb:e7:ba:2f:7a:81:14:57:ca:44:b5:eb:60:5d:
7b:40:df:b0:ed:9b:d6:04:a3:33:31:41:75:bd:f3:
6e:d1:63:36:5e:ac:2b:9b:c0:cc:95:b3:98:97:2d:
c2:31:6a:d9:49:c3:31:8b:e9:1b:d3:ab:28:bc:d5:
89:91:0b:46:e7:db:5e:2c:7c:13:23:d7:ba:b8:c6:
fb:3f:5e:a1:db:92:f6:c4:27:36:72:cd:10:a7:de:
aa:cd:41:ab:61:4e:2e:9c:17:11:32:2d:e2:6c:56:
2f:9a:ba:8c:b6:b7:1b:61:8f:74:45:5a:14:50:c9:
d4:58:ff:6a:d1:f6:40:6a:bd:0b:bb:96:da:e4:2f:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:58:72:CA:F9:97:78:9D:BA:B5:28:5F:64:AE:45:5B:CB:0B:DB:7C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CFhyyvmXeJ26tShfZK5FW8sL23w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.220.0/23
Signature Algorithm: sha256WithRSAEncryption
16:f3:04:58:05:7b:d1:47:c5:97:13:50:0c:d9:7d:85:19:22:
47:4d:18:b0:ab:c2:31:1f:dd:24:50:83:44:0f:ed:97:99:8b:
9f:10:8a:99:5d:58:f7:a1:37:ed:bf:9f:86:49:23:c7:bc:46:
00:86:a5:88:0f:a6:77:1f:f4:98:ab:0c:bc:4e:c3:bd:36:3a:
05:2b:4f:cd:c6:59:cb:21:11:c7:d9:db:ad:63:3e:59:53:75:
a8:13:02:81:cb:d4:9f:2a:17:e2:9d:74:28:77:62:99:da:de:
7f:29:18:5e:48:c6:7a:5d:b5:70:f5:1a:fb:1f:4a:ce:50:91:
f3:f1:e0:67:ea:0a:1c:7f:14:31:a0:7d:0b:80:ce:6a:fc:8a:
5a:e3:76:82:87:96:56:f0:3a:c0:57:3e:79:ca:e9:cf:03:3f:
88:74:2c:68:42:d6:92:c0:68:39:3b:ed:86:12:cf:6f:a7:32:
ad:2b:62:b2:59:55:ea:5c:67:84:57:7d:ad:3a:2d:b8:4b:9a:
52:44:66:24:48:aa:90:68:94:53:ca:60:5a:a3:2c:13:8a:0e:
0e:aa:21:fd:7c:4a:d1:82:e4:9b:0f:9f:b8:cb:2b:ab:b9:c1:
f6:e4:77:0f:6b:18:1f:eb:0a:99:81:29:c1:53:aa:f1:35:ec:
53:36:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org