Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJw6D861t2kJT5565Q0mLk_sbgQ.roa
File: hJw6D861t2kJT5565Q0mLk_sbgQ.roa (raw, json)
Hash identifier: 4ONyUzF0Sl2HuX4+ahkv2ubZyO49D9gDcSXaSbL5DLc=
Subject key identifier: 84:9C:3A:0F:CE:B5:B7:69:09:4F:9E:7A:E5:0D:26:2E:4F:EC:6E:04
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJw6D861t2kJT5565Q0mLk_sbgQ.roa
Signing time: Thu 15 Sep 2022 02:35:53 +0000
ROA not before: Thu 15 Sep 2022 02:35:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=849C3A0FCEB5B769094F9E7AE50D262E4FEC6E04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:09:7c:a7:36:db:f0:c5:be:d9:3d:1a:12:
e5:ce:a3:2d:55:a0:1c:aa:6a:23:3e:74:cf:68:a0:
7d:58:1f:cd:db:31:65:a0:d5:ca:3f:5b:08:6e:49:
22:61:9d:5f:ea:e1:91:ad:7c:88:bf:26:49:11:8e:
d6:d8:ad:60:5c:dd:dc:b2:0c:6f:34:aa:20:a7:a8:
72:81:29:5f:db:db:0a:6e:f5:35:6c:17:5e:59:df:
19:37:3b:ae:a1:ba:11:e0:6c:91:35:c4:95:84:66:
9b:d8:dc:eb:5b:0b:cc:ec:ed:b4:f8:6c:1e:af:be:
84:3a:c9:81:50:fd:47:32:04:1d:04:9c:66:6c:b5:
4c:3b:73:43:d9:06:1a:16:3c:e4:6e:bf:c3:71:50:
6a:8c:d4:78:aa:bd:93:1c:5e:9e:24:eb:04:c0:02:
15:07:0f:ad:ba:30:dd:eb:b0:14:c0:82:91:0b:a6:
c8:ca:66:b2:91:b8:12:4b:e1:e7:7b:7f:73:e4:af:
ac:2e:e3:f6:6a:3c:3c:0f:07:54:d7:15:29:4c:dc:
c5:2a:ec:f4:d3:a2:4c:90:d4:d1:82:6a:81:ff:6e:
4f:8b:55:76:a5:81:d7:b9:39:fb:be:d1:67:70:1f:
b4:f0:65:de:c9:05:71:6f:56:89:18:78:1f:98:b0:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:3A:0F:CE:B5:B7:69:09:4F:9E:7A:E5:0D:26:2E:4F:EC:6E:04
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJw6D861t2kJT5565Q0mLk_sbgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
33:43:ba:4a:1e:64:0b:11:1e:3e:05:3e:59:91:90:df:7b:d0:
ec:d1:cc:8a:a1:32:c5:ce:40:d2:30:8a:16:64:98:b8:ec:07:
92:87:e1:af:bd:42:a0:8d:cb:ac:a7:5b:3e:e9:70:15:a6:c9:
9c:7b:a5:9f:76:c6:0a:31:b3:05:ca:46:1f:e6:2b:6b:6a:73:
80:fb:0f:60:f3:67:fb:53:0f:30:ad:94:d7:05:cb:55:73:75:
15:f8:88:f6:d7:c7:dc:f3:3c:72:30:f5:2e:87:53:ac:58:0a:
4e:6f:66:27:30:e3:b8:e1:fc:c6:51:6e:f7:0a:c1:9f:42:6a:
bb:7c:88:0d:36:d2:26:ed:3d:f0:b1:ad:02:7c:74:02:3b:a5:
8f:72:3a:cb:f0:30:55:03:e4:eb:55:07:c3:a6:32:72:74:24:
4b:19:e3:ac:ba:29:f6:c8:eb:73:77:bb:e8:0d:8b:f3:70:88:
ba:5d:72:3b:b4:91:6b:31:12:71:52:f2:24:78:ce:34:59:50:
f4:3f:63:00:bf:2b:15:09:2f:51:3c:53:b9:d0:2e:f5:c9:c7:
e1:39:75:42:7c:06:f6:d0:86:b5:cb:32:03:93:97:4f:5d:f2:
0d:36:81:c9:a5:a1:89:42:38:f0:8e:5d:6d:00:62:1d:78:90:
09:90:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org