Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nHlJQfaOd5nJKD8ZBHlcS3foV70.roa
File: nHlJQfaOd5nJKD8ZBHlcS3foV70.roa (raw, json)
Hash identifier: zPrBjaV097D8Rmx9yHcPFZvuXSqUJM79vchfFU2W2Jc=
Subject key identifier: 9C:79:49:41:F6:8E:77:99:C9:28:3F:19:04:79:5C:4B:77:E8:57:BD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1303
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nHlJQfaOd5nJKD8ZBHlcS3foV70.roa
Signing time: Wed 29 Sep 2021 02:55:15 +0000
ROA not before: Wed 29 Sep 2021 02:55:15 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.144.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4867 (0x1303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:15 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9C794941F68E7799C9283F1904795C4B77E857BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ab:4d:ff:57:70:0a:5f:b2:c1:d0:50:34:6f:
c8:60:ec:b4:20:bc:bb:af:38:81:66:fb:99:95:3f:
56:2e:4a:ed:45:79:45:3a:b4:d3:44:5b:ba:17:9d:
67:1a:3e:e7:66:0f:ea:ad:d8:81:8f:f5:2b:95:54:
9d:7e:e7:1d:1e:5c:f4:d2:75:d7:56:2d:4d:c4:3e:
c1:51:a7:99:6c:e9:97:70:dd:a1:d7:0d:f7:76:1a:
32:7f:54:62:14:38:4d:58:e3:93:a4:74:a5:e0:d7:
66:c5:f4:f6:5f:9a:0c:70:f5:d3:d4:07:68:f5:d2:
ec:28:ea:6b:47:e0:7a:d0:5e:b4:6a:57:53:c2:94:
d0:99:1f:49:97:3a:c3:43:ac:3d:c8:7e:93:ad:5d:
cf:8f:a6:b2:1b:03:35:2e:0b:1a:bb:0d:ff:98:13:
db:b5:dc:8c:9c:d5:d3:2c:6b:0e:b1:85:44:66:32:
80:ab:56:bd:1c:72:dd:9f:40:d1:14:a9:85:db:c4:
0e:6f:47:53:6f:4d:aa:57:56:6c:ee:98:7c:2b:77:
3c:99:aa:66:71:be:35:d8:e3:f4:02:0e:fb:b4:06:
55:4b:0f:39:d0:24:65:bc:27:5b:49:1d:4c:31:d6:
0b:50:bb:78:89:56:14:fa:df:ee:ab:74:aa:01:f1:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:79:49:41:F6:8E:77:99:C9:28:3F:19:04:79:5C:4B:77:E8:57:BD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nHlJQfaOd5nJKD8ZBHlcS3foV70.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ed:49:1b:64:b7:20:f1:e2:7f:28:d6:f2:30:f0:ca:41:d1:
64:7b:6b:d9:e3:6f:73:1b:08:0c:61:c5:85:e7:d9:5d:0c:68:
1c:be:23:03:c9:eb:54:35:99:04:86:f2:93:05:77:d6:2b:84:
3c:6e:19:db:6d:cc:02:a3:be:2d:f0:e9:67:89:48:f4:ae:17:
c8:bf:a6:6b:7c:cd:ca:31:ff:b9:e9:01:4e:1e:b0:25:7d:a1:
85:1f:72:f2:43:dd:a6:18:90:1d:39:5b:fe:84:8c:08:fa:69:
02:3e:86:1b:b9:b4:f1:78:11:9a:53:ed:29:2a:ff:3b:b7:ba:
f5:14:0e:71:3e:9a:9b:5a:f9:ca:a8:be:f8:b8:e1:a6:d8:80:
ea:b8:02:d1:5f:a7:a1:91:d7:d2:df:9f:97:eb:8d:30:83:5f:
90:4c:03:92:fd:9f:1a:61:ca:cb:5d:07:d0:a5:47:e0:c0:a8:
37:cb:b5:4c:a9:44:97:a1:3b:c4:ee:50:73:18:4d:2c:61:24:
42:05:8f:29:11:f8:ae:e5:14:9d:67:a3:2d:30:5f:d4:01:50:
b1:fb:7a:fc:72:09:d0:7d:1d:fc:42:6d:97:c1:c3:cb:43:ec:
58:5e:ab:15:b1:ce:81:90:71:df:21:51:74:79:5a:13:0e:05:
15:f1:1f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org