Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DWdV5RbzzzoX7-09btLHGKxOtU0.roa
File: DWdV5RbzzzoX7-09btLHGKxOtU0.roa (raw, json)
Hash identifier: Zyz/s7XjVtQZYfePJ8/HDRJ75h5bCSf6D7CNmGsfvkY=
Subject key identifier: 0D:67:55:E5:16:F3:CF:3A:17:EF:ED:3D:6E:D2:C7:18:AC:4E:B5:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DWdV5RbzzzoX7-09btLHGKxOtU0.roa
Signing time: Thu 15 Sep 2022 02:36:20 +0000
ROA not before: Thu 15 Sep 2022 02:36:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D6755E516F3CF3A17EFED3D6ED2C718AC4EB54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:ed:e8:4a:02:2f:87:f0:43:f3:58:6d:e1:
e4:27:28:22:b1:b3:6c:e7:3f:fe:2b:0f:05:6f:cf:
54:07:6e:e6:c1:d1:64:14:08:d0:c6:d7:a4:5c:cf:
9f:eb:00:58:79:03:db:cd:61:91:88:d3:ea:80:c1:
ef:2b:9f:97:e8:a0:a0:61:88:ae:69:4a:7d:98:7a:
33:1d:b2:6c:36:02:8a:f6:51:5c:e1:7b:91:6a:9d:
57:35:44:0f:e1:c6:36:d8:ca:57:af:35:92:86:ec:
b9:d7:88:9a:09:8b:33:ff:51:2d:be:14:85:ec:bb:
71:cc:20:c5:59:0c:6a:da:c0:36:12:87:d7:05:1f:
75:20:da:29:af:20:68:25:ff:5e:c1:54:f5:f6:2c:
a5:7b:5e:89:c9:9c:a6:4e:85:3f:67:c0:c4:5d:c3:
75:21:fb:1b:25:c9:45:c1:e0:40:47:60:03:6a:74:
b7:21:e3:c7:10:6f:bb:94:23:5d:1e:40:e3:8f:83:
ca:a9:db:be:98:8f:38:cc:31:a2:1b:41:64:a7:5a:
10:9f:af:05:31:39:5a:3d:aa:b3:9e:8b:84:97:aa:
b2:a0:78:8f:1b:2f:09:2c:10:86:0e:a5:ef:6a:40:
3d:7d:25:f4:4b:74:ea:ed:e4:73:35:4d:6d:ef:57:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:55:E5:16:F3:CF:3A:17:EF:ED:3D:6E:D2:C7:18:AC:4E:B5:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DWdV5RbzzzoX7-09btLHGKxOtU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a7:a4:ff:88:29:14:7b:c2:d6:66:ab:d2:83:dd:fa:57:4f:
10:ea:98:d8:b6:2c:ba:d5:b1:f8:46:97:78:b8:b7:3d:6e:c7:
3e:7b:eb:b9:7c:cd:08:3e:74:0d:47:cc:5d:ce:82:2e:5f:ee:
2a:d3:45:ae:f5:a6:a1:75:a9:e1:4b:92:58:b5:3a:c8:c5:a3:
14:26:92:71:0a:71:4a:b8:b5:5a:da:bc:de:d4:02:40:66:22:
fe:c7:59:70:6a:c5:f4:c0:14:e5:35:ba:c8:8f:5b:4b:b1:69:
98:2a:c0:96:33:45:0c:da:f6:c1:21:f3:74:59:8b:96:f7:06:
00:46:f4:0c:11:c0:4d:51:1d:07:ec:31:8f:3c:3c:24:70:1a:
e8:f2:6f:c5:4c:80:e3:ad:8a:74:f4:54:8b:bd:6c:dd:3a:31:
50:2b:df:1d:f4:e4:70:8b:bb:fe:72:34:56:35:be:b9:bd:66:
ae:22:d0:0a:26:56:6f:40:ff:92:09:bd:1b:0e:8c:af:36:af:
52:b1:00:c5:96:09:7d:5e:77:fe:90:24:0d:3a:36:09:45:35:
0d:55:76:74:e6:06:18:3b:e9:1f:37:2d:34:26:46:22:64:fc:
65:29:48:a3:23:99:14:1b:1a:7a:d3:76:df:b7:aa:75:4f:2c:
46:ed:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org