Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DgOGfunzOjxaVpS2K0ztTH0XiEo.roa
File: DgOGfunzOjxaVpS2K0ztTH0XiEo.roa (raw, json)
Hash identifier: RkZOBRIgvFnFgbwDDC0NtX+oqZZnMqdUEyyTE7Ur1Jw=
Subject key identifier: 0E:03:86:7E:E9:F3:3A:3C:5A:56:94:B6:2B:4C:ED:4C:7D:17:88:4A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DgOGfunzOjxaVpS2K0ztTH0XiEo.roa
Signing time: Thu 15 Sep 2022 02:35:42 +0000
ROA not before: Thu 15 Sep 2022 02:35:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0E03867EE9F33A3C5A5694B62B4CED4C7D17884A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:50:84:66:c4:ba:5b:24:3d:45:28:f4:b2:
20:60:8f:f9:68:09:91:82:28:cd:67:7e:01:05:b5:
c0:52:50:d9:59:5d:18:1c:35:98:c2:98:97:c1:2d:
26:b8:f3:4b:e7:df:8f:f1:55:1e:06:68:3a:d2:76:
56:56:83:22:c6:99:d5:b3:a6:d5:7c:28:bc:13:e0:
33:d6:81:7d:51:cb:46:73:7b:c3:24:f6:fc:24:56:
ce:c2:82:7e:65:08:5c:da:77:dc:e6:38:bc:10:04:
04:16:ba:3b:a6:9b:76:f9:cf:ee:45:55:91:ca:0a:
13:ec:b1:11:0e:4b:40:54:3d:04:8c:8d:a7:38:a8:
de:5f:a5:7c:75:d1:25:9b:1d:a4:c2:c3:36:34:be:
5a:b8:61:70:fa:10:f9:cd:b0:17:f4:6f:e3:08:9b:
4b:ca:a7:c2:93:d6:1c:61:0f:9e:26:94:5f:eb:af:
45:57:a0:d1:c3:92:48:e7:46:17:a0:b9:c4:f3:d9:
b4:8b:c0:b4:f7:5f:3b:74:62:ee:94:00:d3:33:bd:
54:b3:37:62:a5:70:4c:a9:8d:02:60:fd:0e:9b:a6:
a2:a1:6b:31:bd:89:e6:f5:9d:4e:5e:71:1d:67:ac:
53:cc:b5:37:f9:eb:50:5e:31:28:68:33:d5:b6:35:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:86:7E:E9:F3:3A:3C:5A:56:94:B6:2B:4C:ED:4C:7D:17:88:4A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DgOGfunzOjxaVpS2K0ztTH0XiEo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.245.0/24
Signature Algorithm: sha256WithRSAEncryption
36:22:8c:a7:8e:5a:e9:53:d7:a0:e0:19:01:ed:46:ea:51:ec:
2c:31:9e:f2:75:83:57:bc:0b:a0:82:9d:0d:76:42:10:e5:74:
1c:e6:88:d8:80:65:e2:31:11:16:d5:68:75:00:3e:1a:57:a0:
60:9d:6d:bc:15:d7:36:4a:ac:fb:ec:7a:50:76:e5:23:cb:f7:
0e:64:d3:14:79:10:37:e1:02:45:0a:85:22:a3:b3:f2:3f:49:
19:8a:41:8a:17:48:4a:39:4c:56:74:d1:19:f1:8a:d3:95:80:
bd:e5:f9:09:dd:b4:7e:91:74:16:7c:51:7b:e6:3a:20:74:25:
e1:21:e8:4b:78:86:c2:70:0e:73:1d:63:d1:c2:2d:f8:64:b2:
a7:a4:84:e4:3c:15:c7:9b:11:4c:0b:f1:67:59:61:99:f5:ba:
48:d2:46:fb:f2:b1:cb:fd:ed:9b:a6:a7:10:d5:25:5b:c4:b2:
4f:c5:1c:bb:a4:c8:7f:ba:af:5a:6c:5b:92:d9:93:71:88:25:
5c:71:56:c2:e4:af:64:6f:80:02:45:b4:42:7a:03:f8:06:63:
7e:39:de:9b:4b:be:ea:0a:be:e5:51:88:08:de:a4:56:09:f7:
2b:af:10:0d:35:d5:9a:ab:45:02:0f:2d:23:b0:b2:8f:99:a9:
1e:61:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org