Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vq-Qgs9hdRtXd8-Fiza5OdZ4Bng.roa
File: vq-Qgs9hdRtXd8-Fiza5OdZ4Bng.roa (raw, json)
Hash identifier: GmNO/AdFPBHngfn8KM+fJsVWY2x4CmHZvpsFUkv4jVk=
Subject key identifier: BE:AF:90:82:CF:61:75:1B:57:77:CF:85:8B:36:B9:39:D6:78:06:78
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vq-Qgs9hdRtXd8-Fiza5OdZ4Bng.roa
Signing time: Thu 15 Sep 2022 02:35:45 +0000
ROA not before: Thu 15 Sep 2022 02:35:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BEAF9082CF61751B5777CF858B36B939D6780678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:db:fa:58:2a:92:57:c4:91:5b:fb:1f:c6:
5c:1d:ef:b8:b8:01:1e:27:d8:2c:a7:b6:2e:b3:ea:
ee:3b:6d:6d:16:95:0c:06:b0:5c:72:be:04:74:24:
2a:14:73:3b:bb:e5:1c:79:c2:fb:0e:4c:71:8d:7a:
9e:d0:2f:14:b5:97:45:e3:fa:5f:2b:90:d7:3e:7f:
f5:64:8c:0d:af:68:52:88:b2:76:fb:ea:b7:8c:69:
0e:08:ff:e8:e1:bd:30:71:d6:47:9f:c9:c6:89:e7:
53:25:91:13:63:cf:ec:45:03:88:b0:a8:ce:59:e8:
2f:17:48:44:53:d8:61:d1:f6:89:91:3b:01:a7:84:
ae:4e:dc:d7:84:36:d2:54:70:6c:8c:30:29:0c:3f:
53:31:e8:6e:0a:f8:eb:23:11:b3:5f:e6:b5:17:96:
7c:ba:84:31:8d:ae:59:cf:f1:9b:66:9c:30:ee:be:
e8:dd:b1:47:a0:55:c2:bf:21:53:08:1f:a4:c6:d9:
82:1f:87:e6:11:ba:38:c2:64:26:db:9e:91:78:55:
0e:3d:5b:06:cd:49:1a:76:e5:d1:25:ae:e3:b4:73:
b8:ac:c3:87:f0:55:f7:44:a9:fc:e4:25:01:c0:b9:
4e:5c:60:66:d8:3e:ad:e4:f2:89:87:94:50:05:ce:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:90:82:CF:61:75:1B:57:77:CF:85:8B:36:B9:39:D6:78:06:78
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vq-Qgs9hdRtXd8-Fiza5OdZ4Bng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.80.0/22
Signature Algorithm: sha256WithRSAEncryption
60:48:ca:98:b2:88:5f:e2:9f:14:d0:d7:aa:9a:07:23:8d:51:
4b:87:29:6d:ab:34:c4:e2:ca:80:54:62:33:96:29:b4:04:de:
6c:a9:58:c3:f2:78:22:8b:56:50:ff:8c:b5:a8:cb:c1:fc:65:
43:c3:8f:48:fd:08:bb:9d:86:c5:12:c8:a9:b9:d3:49:52:8b:
aa:47:8b:73:ff:f3:da:3b:6d:89:a6:31:75:3a:cc:23:7d:00:
dd:61:f9:9e:99:21:4b:33:d1:5f:0f:8a:11:e9:b4:ef:49:d3:
02:31:ed:ba:87:84:4a:0f:42:8c:4c:23:17:a5:09:6c:5f:9d:
d0:f8:35:12:fa:44:bf:92:8f:5b:f8:77:d6:28:33:12:27:10:
42:ec:6a:82:d6:34:bd:5e:16:41:6a:7f:a9:6d:65:95:da:47:
d6:a0:90:59:49:45:f9:ea:4d:97:b1:81:1f:00:ff:fe:f4:13:
f1:b0:12:a7:46:d4:c2:9a:fa:5d:dc:6b:a7:f5:6a:56:1a:08:
75:a3:7b:03:1a:ec:9f:14:23:ca:80:19:02:93:1f:e4:f1:89:
35:8f:92:ed:5b:cd:a1:f0:60:8a:f8:a9:93:44:0a:bb:5d:57:
97:91:ac:4f:21:f0:c3:59:2b:26:e2:2d:0c:51:19:dc:7d:e4:
11:d1:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org