Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PzPaGoOuOhWXWZx_4VA-LKcxcgc.roa
File: PzPaGoOuOhWXWZx_4VA-LKcxcgc.roa (raw, json)
Hash identifier: E1TRUAmjx3FNtDI+Vy2wXBeph31wPntfWJCFh5+bF+8=
Subject key identifier: 3F:33:DA:1A:83:AE:3A:15:97:59:9C:7F:E1:50:3E:2C:A7:31:72:07
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PzPaGoOuOhWXWZx_4VA-LKcxcgc.roa
Signing time: Thu 15 Sep 2022 02:35:18 +0000
ROA not before: Thu 15 Sep 2022 02:35:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3F33DA1A83AE3A1597599C7FE1503E2CA7317207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:96:3b:e3:ca:37:e1:d0:fb:c5:e1:13:a4:
1c:0a:5f:db:02:b6:6c:57:0d:a7:62:2f:20:43:08:
9b:26:77:df:dc:2d:81:52:19:d9:4f:aa:c6:d2:a1:
2c:04:5d:b5:08:22:32:a2:35:29:ca:fa:19:63:e3:
86:a2:46:18:c1:13:5d:0f:19:97:62:bb:44:35:d2:
1a:90:4f:e4:16:3b:6c:b2:73:46:10:b1:00:4a:1d:
21:8d:41:e5:df:9a:2d:c3:c6:f0:57:c3:75:e6:32:
af:04:af:a7:6b:49:9f:96:96:d1:04:53:41:44:f6:
41:04:56:86:74:82:58:1c:ea:ee:f0:dd:fb:c1:13:
0d:79:00:e8:a9:3b:5b:72:ba:fe:61:01:9b:e5:d1:
13:72:25:36:d4:80:eb:1b:bb:30:56:53:47:d2:c2:
e8:1b:42:da:27:38:76:05:e3:99:b8:18:73:0e:28:
e1:b3:7a:85:ae:11:e5:71:e4:5e:8f:d1:9c:dc:e4:
41:79:1d:29:40:ea:93:40:81:fc:93:ad:ed:62:22:
14:8a:4f:96:a1:67:58:a1:e4:79:74:e6:13:04:25:
09:f0:57:73:24:46:e2:8b:d0:8b:a9:6b:f3:70:d6:
2f:1c:5b:ee:4a:7c:3f:10:a0:de:a1:ab:ae:b1:37:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:DA:1A:83:AE:3A:15:97:59:9C:7F:E1:50:3E:2C:A7:31:72:07
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PzPaGoOuOhWXWZx_4VA-LKcxcgc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
18:75:fa:56:a2:ec:7e:c8:b4:d9:59:1e:b6:be:aa:4e:70:51:
31:7e:d3:45:d0:fb:39:64:9b:43:29:4f:d9:58:fd:70:a2:cb:
94:ff:31:fa:4c:26:fb:53:06:b6:e0:e6:ef:dc:72:21:08:67:
04:85:e1:6c:70:cb:64:b1:33:cc:b9:e3:65:66:d4:87:07:98:
2a:a1:62:5e:94:68:c9:64:72:d4:03:51:3b:42:4f:79:03:84:
5c:d1:fa:2b:a3:28:b3:78:e8:72:fb:ae:01:2c:97:66:84:f6:
7c:56:95:59:b9:31:7a:eb:04:26:db:68:29:73:f4:79:f9:80:
89:ca:51:43:d5:bc:76:0b:f0:6c:ca:bb:5b:b8:a4:90:e4:d2:
e8:d5:22:37:b3:85:b0:82:fd:ea:34:73:7a:ab:84:d7:61:f9:
b3:26:e3:61:16:e3:7e:fc:d6:69:0f:63:3f:72:9b:55:f6:1e:
8d:78:26:c0:98:19:3f:95:43:fb:83:27:74:dd:ff:90:ec:83:
c7:d6:90:bb:83:4d:8e:ee:89:45:2c:5c:4e:1d:3d:fc:d6:aa:
00:dc:46:41:5a:bb:9b:1f:ec:a2:41:ee:79:54:e1:a6:6c:3b:
2a:71:82:33:8e:3b:6f:f9:2e:33:1b:cd:20:6e:ac:f8:4c:41:
61:33:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org