Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IjrIPscF3tA6RpiO4kpKuFn6uzA.roa
File: IjrIPscF3tA6RpiO4kpKuFn6uzA.roa (raw, json)
Hash identifier: lht0eNO1BFXazN4qpBwo9U3XQwnHumGQpwd/H+WKhEQ=
Subject key identifier: 22:3A:C8:3E:C7:05:DE:D0:3A:46:98:8E:E2:4A:4A:B8:59:FA:BB:30
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IjrIPscF3tA6RpiO4kpKuFn6uzA.roa
Signing time: Thu 15 Sep 2022 02:36:13 +0000
ROA not before: Thu 15 Sep 2022 02:36:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=223AC83EC705DED03A46988EE24A4AB859FABB30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:9d:64:60:16:5c:b4:ff:b5:26:bc:18:cb:
87:07:51:4c:f6:8a:58:da:7e:80:08:05:b9:61:57:
57:08:e5:d9:1b:b7:32:9e:62:ae:a1:e3:3b:2e:fa:
29:4f:73:2c:80:8a:9b:37:8c:59:3b:cc:55:72:26:
68:54:14:3a:08:83:01:80:d3:ea:e2:41:09:ce:7a:
f1:17:8f:b7:e7:c4:d1:cf:7b:52:67:af:af:b7:97:
d0:1d:d4:1a:fb:39:a0:b2:2c:97:88:4d:d6:0e:09:
90:6a:d1:26:a6:66:7b:0e:cb:ae:fd:7c:14:a8:81:
b6:17:33:b5:bd:bf:34:71:52:dd:4f:a0:fb:d0:02:
4b:31:07:c8:e0:ff:16:47:ad:c4:87:7a:e7:c0:ad:
d3:91:9c:9c:98:bc:fd:66:a4:77:6a:60:a8:2b:6e:
89:e0:4f:e7:76:ee:bb:92:90:d3:e8:67:af:40:ae:
b4:aa:bc:dd:46:43:17:aa:54:29:f8:07:6f:45:31:
75:b4:5d:62:9f:79:13:fe:6d:34:64:4b:89:cc:9f:
f0:5d:ac:e5:d2:18:bd:5b:63:bf:bb:9c:ca:75:e1:
8b:5a:97:23:03:5b:b0:70:14:13:82:53:11:cb:8c:
f9:5e:f7:2a:55:d6:f2:39:81:65:7e:3b:44:d4:cf:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3A:C8:3E:C7:05:DE:D0:3A:46:98:8E:E2:4A:4A:B8:59:FA:BB:30
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IjrIPscF3tA6RpiO4kpKuFn6uzA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.216.0/22
Signature Algorithm: sha256WithRSAEncryption
03:65:b6:2f:60:30:a6:7b:73:c9:58:75:a5:18:5c:cf:4e:0a:
f6:03:db:da:17:2d:59:5c:5a:34:24:24:44:8d:4d:ce:96:4b:
8f:b0:74:47:5c:de:b7:be:1b:01:30:57:6e:c6:aa:ac:51:61:
9d:29:68:9c:2c:f9:10:91:4c:b7:a2:89:67:de:e1:d3:e0:b4:
0d:5c:d5:9e:9b:4d:78:94:6e:d5:11:3e:00:c2:29:ed:5c:6c:
e6:40:81:e5:d1:3d:7d:ba:4f:85:f5:18:b3:5e:6f:50:46:7a:
17:91:e7:09:8f:08:b8:a7:87:e6:b2:5f:27:a9:2f:1a:57:e6:
5d:76:db:f2:ea:54:e7:60:f9:60:43:10:cd:1a:05:d7:24:21:
1a:9c:00:d5:4b:aa:db:c4:91:5e:b6:53:ea:5c:70:9b:be:b4:
0b:5c:e1:0a:91:a9:3d:30:28:38:60:b3:82:ad:f9:d2:35:65:
49:f6:2a:07:6f:3e:a5:9b:b2:0e:23:40:b5:3b:eb:b0:6d:3c:
1c:14:39:3c:1a:77:72:b5:c0:f4:40:7d:4c:20:e9:90:21:a0:
ee:e1:29:ed:a5:49:9d:ba:37:da:2e:d8:8c:1d:8b:ba:de:26:
e8:ee:06:33:8e:a4:d9:d5:85:99:07:a0:d1:a6:ce:c9:e6:2c:
70:b3:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org