Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hywDQ0Yr4fN91f0fivxaZUzz93Q.roa
File: hywDQ0Yr4fN91f0fivxaZUzz93Q.roa (raw, json)
Hash identifier: 5zUvuVZlGwu/WqjXOPQqPARvn1imt5o0A1mcz9oI+RQ=
Subject key identifier: 87:2C:03:43:46:2B:E1:F3:7D:D5:FD:1F:8A:FC:5A:65:4C:F3:F7:74
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 131D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hywDQ0Yr4fN91f0fivxaZUzz93Q.roa
Signing time: Wed 29 Sep 2021 02:55:23 +0000
ROA not before: Wed 29 Sep 2021 02:55:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 180.218.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4893 (0x131d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=872C0343462BE1F37DD5FD1F8AFC5A654CF3F774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:0d:23:4e:fe:d9:27:88:4f:ed:38:1d:c8:
56:58:4e:bd:0c:45:bd:a3:e7:dc:8b:e3:6e:fd:93:
52:0a:1d:0d:14:56:50:27:b0:12:c3:90:77:37:29:
16:89:8b:9a:77:21:d2:47:96:2b:52:23:f3:01:07:
11:da:3f:36:52:c7:78:01:d3:dc:fa:f2:84:f7:54:
70:1f:63:07:8f:56:d7:ab:6d:29:78:d9:94:83:55:
87:cb:81:bd:53:4d:ba:6f:bc:25:03:fa:68:04:4f:
64:f5:0d:c1:5e:d9:ed:83:2a:91:ce:14:78:d9:d1:
3b:46:b0:5d:1d:3c:d9:2d:79:fe:85:4b:fc:1f:d0:
51:13:20:82:a2:8a:10:74:b1:b8:90:75:71:ab:e0:
fe:09:7f:15:2b:8b:c2:94:21:4a:5c:7c:2d:47:5b:
28:8e:53:44:2a:75:5f:1f:7c:f3:41:78:70:83:9a:
ae:68:65:aa:fa:72:03:33:5f:d9:b7:77:16:d2:51:
46:46:d0:71:b9:38:29:6c:13:f1:72:42:35:dc:23:
b3:2f:a3:c0:d4:cd:eb:39:25:f4:07:de:58:2e:d4:
74:38:cd:55:fc:4d:85:da:92:e1:e3:66:77:7b:62:
01:75:26:73:2f:62:65:f4:ae:01:49:2c:79:c9:8d:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:03:43:46:2B:E1:F3:7D:D5:FD:1F:8A:FC:5A:65:4C:F3:F7:74
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hywDQ0Yr4fN91f0fivxaZUzz93Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.112.0/21
Signature Algorithm: sha256WithRSAEncryption
93:7f:b0:ec:1f:88:ac:f6:30:c7:5b:34:cb:1e:d0:39:bc:b9:
10:96:05:16:5f:0c:0c:be:d7:ce:c7:1b:98:36:17:d3:99:9a:
44:2e:4b:9d:82:d6:ed:7e:ef:93:a6:d9:da:5d:d2:34:8e:ba:
ce:c8:ca:bf:04:e2:23:f1:31:fb:1c:49:6e:8d:84:b5:09:76:
cc:4e:d6:b9:8a:c1:61:f8:b2:2f:ff:d7:37:5c:15:ae:aa:44:
09:c0:05:e9:53:10:70:ed:4a:54:b6:d0:d8:bd:bd:5e:ae:f4:
c9:c7:ea:fd:57:d8:d2:3c:1e:94:22:82:c2:35:2f:1c:a7:78:
82:04:23:18:1d:12:3d:4c:99:87:96:9e:aa:6d:59:df:f1:cc:
47:e8:53:a1:9e:01:14:bf:88:84:8b:f5:0e:87:9d:ec:f9:7a:
75:b5:97:06:28:9e:82:fe:76:5f:d5:b5:34:ec:8f:6a:25:69:
62:de:4d:af:cd:24:47:18:7c:c3:1a:81:74:ae:38:89:ce:5f:
1b:0e:58:bf:ec:45:ab:b5:ca:82:45:2d:64:00:e1:67:9e:76:
23:21:36:e3:e4:cb:30:eb:dd:86:06:0d:85:74:34:4f:fa:72:
6a:80:a6:7b:9a:70:04:91:37:6e:98:16:21:04:87:40:6f:3a:
e7:e5:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org