Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nr3f8rHa0s87S0m4F2VqTq88Rz0.roa
File: nr3f8rHa0s87S0m4F2VqTq88Rz0.roa (raw, json)
Hash identifier: d1PePRIyI5Spyf/oylUgH0Lf6Jh7hv5tIj6/9lZIsL8=
Subject key identifier: 9E:BD:DF:F2:B1:DA:D2:CF:3B:4B:49:B8:17:65:6A:4E:AF:3C:47:3D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18EC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nr3f8rHa0s87S0m4F2VqTq88Rz0.roa
Signing time: Sat 22 Oct 2022 06:05:52 +0000
ROA not before: Sat 22 Oct 2022 06:05:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.16.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6380 (0x18ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9EBDDFF2B1DAD2CF3B4B49B817656A4EAF3C473D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:ca:13:9f:ea:e2:df:5c:33:56:3f:5f:4d:
97:e0:99:d6:dd:c1:e5:a0:14:2f:35:8d:49:c9:f1:
31:2f:da:1e:b8:49:88:24:82:e6:91:e2:b4:af:05:
08:bf:21:d8:2a:46:a0:2b:37:a9:f1:4a:78:de:6a:
e1:d3:89:58:70:b0:da:12:2d:9d:52:67:40:77:0b:
77:2f:88:4f:99:ba:e9:e3:e1:12:c3:3b:22:4f:40:
50:da:f6:3b:85:d8:db:4a:41:f2:e6:9c:25:c0:05:
fb:92:ac:14:ff:65:64:79:0d:0a:b4:8a:09:40:e8:
66:6b:0c:93:39:b9:4b:e0:54:b1:1b:fc:64:8a:0e:
f4:96:46:8b:68:ca:a5:20:8b:85:1b:d5:fb:6e:d2:
49:53:aa:1d:00:36:00:ea:f6:60:fe:e1:2b:3a:b1:
60:cc:84:14:74:8d:85:00:a3:8b:24:e9:80:04:bd:
ea:a7:20:15:98:5f:a1:7c:9a:df:d8:d7:8b:e6:6c:
00:9b:32:21:46:c3:2a:b6:33:da:f7:30:e7:67:54:
41:df:fe:55:48:77:4b:e9:38:36:73:0e:e6:4d:39:
4d:7c:dd:2c:af:d7:85:48:51:ca:76:3a:db:42:19:
d9:2f:e5:74:68:fa:36:51:90:4a:48:bb:44:65:e8:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BD:DF:F2:B1:DA:D2:CF:3B:4B:49:B8:17:65:6A:4E:AF:3C:47:3D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nr3f8rHa0s87S0m4F2VqTq88Rz0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.16.0/20
Signature Algorithm: sha256WithRSAEncryption
33:dc:c7:5a:0f:e7:8a:65:66:0b:80:88:0a:14:98:c6:4e:86:
76:73:0b:3b:b1:38:9c:88:fc:b3:e6:62:4c:bd:04:f4:3a:a9:
2b:81:1b:45:61:1b:76:62:37:46:43:5a:e3:7f:7b:c3:e2:4d:
21:6a:74:77:4b:7c:c2:ec:a4:dd:e2:3c:c4:a0:18:32:e2:3f:
24:49:e3:c0:6a:8f:f6:ca:eb:66:7c:b4:c3:9a:08:3b:0c:f2:
6f:18:23:6c:92:30:e0:ff:ef:0e:d9:77:85:5e:10:31:a3:99:
ff:fb:0f:39:e4:bc:52:5b:18:54:ec:c7:20:a4:df:c4:04:92:
6d:57:3c:84:2b:f5:0d:2f:b5:fe:e5:da:ae:e0:c4:98:fa:00:
3d:ba:7c:49:22:81:bf:89:a1:be:94:2b:10:40:ee:a1:34:ad:
44:37:87:8a:a4:cd:95:15:2a:d3:49:fe:b2:fa:d2:db:2d:74:
9b:3c:a9:8b:f2:78:c4:98:ca:cf:39:f1:cb:a7:96:dc:40:29:
71:d8:43:19:23:c5:f4:cc:8d:1d:c1:a6:39:bb:42:f7:3d:e6:
5f:08:cc:db:00:d8:a7:37:4d:43:b6:36:3f:9f:44:3a:b5:dd:
85:d2:94:75:80:92:a9:53:b0:06:4b:b4:28:e0:9a:18:6b:b9:
f0:2c:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org