Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IrRBdJ6Np4x5ie3AfVoRddcLyss.roa
File: IrRBdJ6Np4x5ie3AfVoRddcLyss.roa (raw, json)
Hash identifier: QGb/qXXjehCFjmLQKOhyCnkLg+u+U0UH798m+TSRAYQ=
Subject key identifier: 22:B4:41:74:9E:8D:A7:8C:79:89:ED:C0:7D:5A:11:75:D7:0B:CA:CB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IrRBdJ6Np4x5ie3AfVoRddcLyss.roa
Signing time: Thu 15 Sep 2022 02:35:52 +0000
ROA not before: Thu 15 Sep 2022 02:35:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=22B441749E8DA78C7989EDC07D5A1175D70BCACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:d5:6c:9e:7a:7f:4b:ca:11:2d:04:08:81:
b9:0f:ee:af:6d:f1:92:10:bf:e5:3c:e2:9c:5e:6b:
b5:11:0c:9b:cc:0b:62:d6:4c:0b:8f:d7:2a:48:21:
5c:59:fe:d9:38:5a:29:0c:c4:b0:6d:21:8a:8d:c1:
72:3f:7c:e8:84:2b:7c:6b:5f:0a:15:04:b9:ac:1b:
f6:b3:16:0e:62:fd:32:db:45:81:6e:e3:58:05:64:
b4:86:8c:57:bf:7d:e5:b6:cd:bd:52:de:d8:e8:28:
5e:e3:9f:57:db:c8:e5:30:f5:52:ba:96:c8:76:33:
5f:4d:95:d7:d6:16:7e:8d:11:bf:0a:b7:21:f5:c0:
86:03:f6:a9:9a:13:99:0e:b5:d5:aa:33:22:9e:cd:
ce:71:cc:19:d1:4e:cb:4e:68:3e:d5:3a:c8:ce:e5:
a0:73:a2:c5:2b:d5:32:66:ff:f4:7f:65:21:02:19:
dc:d8:0e:d9:ef:e9:84:13:88:76:57:e6:54:36:63:
e5:b2:ee:ec:9a:2a:ba:31:ec:26:18:49:31:87:25:
02:d6:65:92:a1:4a:be:5a:e5:ad:c5:ac:c1:45:99:
25:e6:21:42:c5:84:fc:68:d3:ea:de:da:da:a0:d2:
76:2a:69:49:35:a3:97:1b:20:d8:a6:7f:b5:65:a1:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B4:41:74:9E:8D:A7:8C:79:89:ED:C0:7D:5A:11:75:D7:0B:CA:CB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IrRBdJ6Np4x5ie3AfVoRddcLyss.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/21
Signature Algorithm: sha256WithRSAEncryption
64:38:82:9d:b4:e3:fc:3f:88:44:09:4f:8f:8a:8b:94:ee:82:
5b:d5:d3:2f:f9:8f:22:fe:81:02:3d:da:73:d6:23:8e:74:02:
11:d6:a1:7a:d4:aa:0a:24:bc:f8:6c:15:00:c3:e6:0f:a2:16:
57:36:39:e7:0e:98:75:ff:49:fa:44:fb:3b:a5:8a:58:ba:09:
2c:ab:dc:c8:96:91:f7:91:c4:62:ef:f7:f8:28:4f:9e:c5:2a:
41:10:37:52:a0:62:44:da:27:11:05:a4:dc:ad:e4:03:e9:03:
62:74:a6:de:a6:fe:dd:e2:c8:54:a5:ca:90:01:19:96:d2:98:
a2:6a:4d:c2:82:e6:70:db:90:31:bb:f4:cb:40:18:e1:f4:70:
83:05:35:17:a7:1e:f7:d9:dc:df:d3:07:32:43:fb:7e:49:c1:
f2:a4:41:c4:94:66:0c:5f:76:08:07:29:8f:80:14:1c:d1:c6:
fa:f2:ff:83:70:6a:65:48:ac:c8:53:33:09:65:7e:fa:06:24:
84:4c:76:d4:d8:2b:e5:6e:e6:a5:36:69:f3:95:af:b1:49:51:
d9:dd:e7:6c:2f:35:14:ee:72:d4:74:ba:34:1d:bb:95:a6:c7:
47:b6:ca:07:1a:fc:c9:d1:7e:c6:8e:0f:18:4c:fb:2d:ec:fc:
94:cf:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org