Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PKYGi4lVNojmHpZWJe2gxmcR5MQ.roa
File: PKYGi4lVNojmHpZWJe2gxmcR5MQ.roa (raw, json)
Hash identifier: foB8zSlpT7Jfn+tPgRpaNIz3gssm6rgwf7Y70R/anUw=
Subject key identifier: 3C:A6:06:8B:89:55:36:88:E6:1E:96:56:25:ED:A0:C6:67:11:E4:C4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1300
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PKYGi4lVNojmHpZWJe2gxmcR5MQ.roa
Signing time: Wed 29 Sep 2021 02:55:14 +0000
ROA not before: Wed 29 Sep 2021 02:55:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4864 (0x1300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3CA6068B89553688E61E965625EDA0C66711E4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:e9:8d:38:4d:df:3b:26:59:1b:a6:23:04:
c2:70:c3:d7:b5:32:90:51:be:fe:6f:62:ac:8b:55:
ec:a4:0d:cc:22:f5:7c:e6:81:a5:86:f8:25:ba:dd:
7f:6a:f5:80:81:f7:18:17:2b:15:19:0f:53:62:b8:
1d:c1:8e:a1:d1:f2:e8:69:54:75:70:40:36:b0:7f:
9e:43:01:29:68:4b:a5:72:53:f0:af:33:27:fe:d0:
70:c5:81:15:08:c2:44:2d:ad:c0:9d:f1:be:d5:b6:
f3:ba:8d:69:ab:3b:ff:1f:56:1a:2b:f2:54:a6:16:
63:7c:66:88:f5:31:b9:db:7a:a6:cd:ca:fa:43:1c:
52:c3:1a:b2:d4:75:14:f8:04:e4:2b:cf:cc:04:b9:
1a:75:f5:f0:c1:d1:7a:28:66:a1:9d:3f:7d:9f:3a:
e1:9c:fc:7c:ae:6b:f1:2f:91:ff:70:9e:7b:4e:ae:
ec:fd:2e:bb:6e:6a:fd:d5:c7:0c:22:7b:b8:97:61:
c9:48:61:50:fe:ef:00:b5:6f:e7:25:42:6a:03:15:
8b:28:f8:6a:46:77:b4:ab:bd:20:29:18:51:df:c3:
a0:e6:65:56:ca:72:aa:ce:82:e3:fc:98:d4:1f:d3:
ce:ca:73:07:b7:d5:9b:de:16:e6:07:c1:37:72:38:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A6:06:8B:89:55:36:88:E6:1E:96:56:25:ED:A0:C6:67:11:E4:C4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PKYGi4lVNojmHpZWJe2gxmcR5MQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.132.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e9:ce:5b:ac:ec:a7:64:0d:0e:04:f8:25:cf:7e:92:52:c4:
ec:93:29:c8:15:3c:dc:68:37:6b:a7:e4:13:68:be:69:f0:84:
5d:84:d2:e7:6c:e7:07:29:dc:2e:07:dd:c4:64:09:c9:a0:d6:
09:77:d9:89:f6:9a:7f:a4:35:ad:e5:af:1c:3a:a6:0f:74:38:
d1:4a:e2:bf:76:c4:79:1e:64:13:e1:3e:0a:e3:39:f8:f9:c5:
1a:e4:e1:d9:ff:a2:fd:43:c6:5a:df:01:16:52:6f:cf:13:75:
6c:79:78:29:40:9d:4a:45:65:af:6a:53:e1:f1:84:03:42:41:
2a:24:d7:fb:11:72:c4:5b:7a:25:db:fe:b9:82:e8:56:81:3e:
b4:67:02:6a:d5:2d:df:6b:17:a5:3a:77:4c:52:4d:2e:ae:94:
67:0e:87:7d:ba:58:4a:fa:bb:3f:e4:9b:74:00:06:3b:cb:50:
f4:0e:9d:61:8d:f2:fb:c9:04:3f:7d:04:73:34:6e:10:48:f5:
f3:d4:2c:9b:f0:38:f2:64:8c:a8:54:03:ea:0a:ce:88:3f:66:
49:8e:dd:04:b1:14:b8:42:1a:25:9b:38:58:7f:c0:5b:64:da:
90:3d:78:be:7a:09:c4:d5:dd:45:bd:98:2f:c7:22:d6:90:17:
6e:98:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:33 2025 by rpki-client