Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p8mUf7A2nFGroqjQ_puAYioF2Qw.roa
File: p8mUf7A2nFGroqjQ_puAYioF2Qw.roa (raw, json)
Hash identifier: DmCfxkXL3Jze/lLxLV6/Mv5YaExUgPf7z4O0x9lFhP0=
Subject key identifier: A7:C9:94:7F:B0:36:9C:51:AB:A2:A8:D0:FE:9B:80:62:2A:05:D9:0C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 194D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p8mUf7A2nFGroqjQ_puAYioF2Qw.roa
Signing time: Sat 22 Oct 2022 06:06:21 +0000
ROA not before: Sat 22 Oct 2022 06:06:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6477 (0x194d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7C9947FB0369C51ABA2A8D0FE9B80622A05D90C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:9b:76:78:1b:36:93:ae:40:73:b4:eb:3d:
2b:c3:b3:0e:af:c5:d5:ee:e3:b5:3d:31:04:a0:4d:
42:87:bb:a0:f0:1c:21:d8:49:a7:9c:88:a9:8a:4f:
fc:a1:5b:22:b5:a7:ca:db:09:81:8b:35:c9:76:e2:
f7:9a:19:36:6b:c0:3e:66:dc:27:65:74:32:1c:e2:
65:4b:f1:8c:d7:4d:0e:e7:97:99:ae:91:d7:6c:4c:
ca:59:b6:a1:1a:54:ca:8d:95:4c:f3:94:5b:1f:34:
30:ae:bd:46:01:db:4e:08:3a:0b:67:23:46:a4:fb:
75:a7:8a:20:18:51:63:bf:f8:1e:bb:49:fb:dd:ea:
a4:17:22:69:44:f4:bd:b3:b7:6b:4e:05:d6:ad:2d:
0f:7c:63:c3:7a:37:6d:d8:9e:1e:73:13:64:47:58:
a2:24:44:3a:b3:e9:f0:fd:47:dc:45:76:51:10:a5:
ab:d5:39:76:dc:f6:0c:e3:ac:53:69:1b:07:09:ae:
70:22:be:64:bd:22:7e:67:0b:f3:ab:2b:37:63:25:
db:f7:8b:ec:2e:37:d5:35:7e:7f:65:1d:7c:47:cd:
22:1d:cd:b2:77:4d:84:bf:74:cb:ed:89:bb:a1:77:
59:34:ed:fe:27:8f:0e:2f:35:11:db:e1:75:59:88:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C9:94:7F:B0:36:9C:51:AB:A2:A8:D0:FE:9B:80:62:2A:05:D9:0C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p8mUf7A2nFGroqjQ_puAYioF2Qw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.137.0/24
Signature Algorithm: sha256WithRSAEncryption
63:da:8e:7f:ae:bb:ce:49:de:b0:42:a5:a9:c6:35:88:18:ce:
71:00:e6:ce:77:8d:6e:55:0c:1b:a6:bd:a7:58:3b:49:06:29:
5d:f9:7e:cb:63:a6:14:38:e2:7c:c8:1e:81:fd:eb:c0:0d:55:
d6:aa:40:bf:eb:27:f0:b5:ce:80:9c:42:76:42:c2:96:77:4d:
d8:64:cb:2b:35:f6:94:43:8a:cb:66:84:ba:ad:48:e2:d4:fa:
7c:ed:6a:6b:42:8c:10:b7:a0:80:18:fa:ce:50:5f:1c:fe:b0:
c4:39:51:cb:7a:99:d6:1c:9a:2f:e1:c9:a1:3e:c3:db:e1:b3:
18:51:96:8e:34:39:08:18:e1:cb:20:eb:56:8b:81:d0:e1:ec:
5a:02:16:53:65:ac:f2:10:ab:fa:65:9a:96:f6:3e:e1:9f:23:
0c:49:29:11:f9:8b:61:d1:93:61:68:04:6f:ee:1a:b2:bd:17:
80:82:22:fa:a0:26:c1:72:5b:bd:af:39:80:44:c5:50:3a:db:
d3:92:3e:f7:62:a6:6d:02:3f:07:d3:8b:dd:91:bc:07:b3:56:
13:dd:1d:be:fa:9f:e3:80:8b:02:b3:fb:48:a6:81:8a:0b:bc:
8f:47:ef:fa:cc:45:b2:0a:48:e2:25:84:d4:7d:5d:16:25:94:
80:f6:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org