Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DUeR9cl6tJ8zVpI_PmfRA6Vvi6Q.roa
File: DUeR9cl6tJ8zVpI_PmfRA6Vvi6Q.roa (raw, json)
Hash identifier: 8ln8nrn8DXiomeYjILEWfsfvUDKGE/nXNcnq+wWXmtE=
Subject key identifier: 0D:47:91:F5:C9:7A:B4:9F:33:56:92:3F:3E:67:D1:03:A5:6F:8B:A4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1909
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DUeR9cl6tJ8zVpI_PmfRA6Vvi6Q.roa
Signing time: Sat 22 Oct 2022 06:06:01 +0000
ROA not before: Sat 22 Oct 2022 06:06:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6409 (0x1909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D4791F5C97AB49F3356923F3E67D103A56F8BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:48:29:58:40:f3:c8:c4:2e:bb:84:b3:f1:
da:a7:d0:65:5b:c3:cb:9a:24:cb:0a:93:4e:0e:80:
96:3e:cc:ec:09:77:8e:90:96:d4:5c:a9:2e:d2:11:
81:84:f6:59:4e:51:72:ba:d8:5a:80:51:56:c4:e0:
3a:9b:64:0a:e0:28:3c:ed:d6:28:d6:d5:b4:e0:8d:
88:ee:74:c3:33:cf:89:44:0f:d2:8a:85:e4:68:65:
15:4d:f2:48:72:43:0d:84:7d:ed:13:d1:a3:f8:8e:
78:24:25:c2:af:98:b0:9e:45:c0:db:1c:48:99:90:
f6:2d:8c:3a:17:d7:4b:97:20:6d:39:77:0c:6c:f3:
8c:ac:ba:2d:c7:d6:55:3f:82:47:74:9f:3b:7b:1b:
bb:40:26:5b:6e:df:67:f3:98:0e:ed:0e:15:63:19:
f5:eb:e6:d2:5a:a4:f6:fc:45:11:15:51:69:fb:7b:
a0:db:89:36:0f:d9:c7:01:d3:0b:35:41:c5:ad:6c:
1f:3c:f6:b0:f4:34:8d:88:71:06:3b:88:27:20:98:
88:74:f2:30:88:48:6c:62:58:3c:6f:06:b2:8d:2e:
fd:42:45:b6:64:47:b5:66:ae:22:53:c0:0f:53:83:
89:81:24:48:80:fc:8f:54:01:c3:ae:44:76:2b:3b:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:91:F5:C9:7A:B4:9F:33:56:92:3F:3E:67:D1:03:A5:6F:8B:A4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DUeR9cl6tJ8zVpI_PmfRA6Vvi6Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.56.0/24
Signature Algorithm: sha256WithRSAEncryption
25:41:f2:9e:e2:17:67:02:6e:97:14:af:77:90:6e:f0:10:c4:
a3:a8:9f:56:99:41:50:83:f6:b6:07:7b:a1:ea:99:77:3f:ad:
5e:fa:b0:97:7a:d8:d1:4a:78:f0:c6:0d:c9:2c:c8:45:db:b6:
55:d5:93:69:d4:d5:4e:ca:ae:98:13:1d:3b:27:34:df:91:81:
ea:0e:ef:14:a1:fe:2b:67:0b:eb:51:55:1f:d0:aa:6d:e3:f5:
cf:f2:4e:f5:3a:a6:56:26:b5:41:e1:67:17:c4:46:ed:b9:ba:
14:74:ae:a8:9d:8b:88:2e:9b:81:1c:9e:34:c8:6d:8d:f3:95:
e9:01:f9:e3:20:f2:84:43:9d:5f:62:d4:f5:9e:98:27:10:a8:
7c:c6:78:65:65:76:f6:cb:2a:89:b6:db:e9:60:92:86:4f:6c:
11:84:95:84:88:ca:5f:b8:12:43:d4:70:a9:18:44:05:d5:68:
75:e0:34:b8:b8:70:1c:36:19:3c:9c:13:58:7c:96:6e:b7:08:
7e:ab:41:4e:b9:91:7d:2e:9d:4f:83:6b:56:3c:67:bf:53:74:
95:72:e4:83:cc:1a:8a:d4:62:24:1b:84:7d:97:63:f6:c7:80:
98:92:96:1f:a6:10:37:2a:08:b7:9d:34:2b:6b:9d:63:aa:6e:
6d:4f:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org