Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8Us73TTfSD1eR957UvjfAiRbHo.roa
File: w8Us73TTfSD1eR957UvjfAiRbHo.roa (raw, json)
Hash identifier: KYUBoQbO7QTtTrTR3sl2ylEWGKpyp6RR32mSMDmLvEs=
Subject key identifier: C3:C5:2C:EF:74:D3:7D:20:F5:79:1F:79:ED:4B:E3:7C:08:91:6C:7A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B12
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8Us73TTfSD1eR957UvjfAiRbHo.roa
Signing time: Tue 29 Sep 2020 10:07:59 +0000
ROA not before: Tue 29 Sep 2020 10:07:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2834 (0xb12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C3C52CEF74D37D20F5791F79ED4BE37C08916C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:ad:9a:f2:a1:f3:83:78:b4:2f:41:b2:15:
4f:1a:fe:5c:e3:e7:8e:3e:1b:ba:fa:39:0f:5a:a6:
77:d6:7a:90:79:27:b9:06:bd:a6:7b:71:a8:d7:4c:
56:0b:82:87:be:54:67:37:97:f6:f2:1b:9f:f7:cf:
13:89:43:56:0f:61:0c:34:b6:b2:46:8b:7d:33:7a:
08:31:d8:07:ce:39:61:6f:8a:2b:9e:af:89:bb:44:
5e:62:41:9c:25:97:05:10:c4:9e:dd:30:6d:a5:a5:
cd:4e:67:f7:35:5b:96:a6:aa:de:27:8e:8b:ed:f8:
7f:d9:98:1a:38:a5:35:9f:8e:10:54:33:e4:f8:67:
93:f1:23:99:06:19:ba:a1:f4:13:54:78:11:21:03:
4c:93:57:4e:fe:51:6f:e4:a4:9f:a7:ec:2b:87:5f:
5f:af:e1:6f:cc:b7:3d:84:48:3b:2c:bb:79:15:03:
72:0c:de:d8:a4:3a:0b:62:9d:0f:a1:ef:59:c0:43:
ae:2d:0d:3d:cb:a7:46:8e:dd:cb:22:67:48:b8:aa:
92:38:33:57:ec:65:f1:8d:b8:8a:42:11:36:82:1e:
83:68:c0:34:19:b0:0c:08:8b:66:15:57:88:9f:fd:
16:66:ae:a9:64:79:58:74:49:06:34:17:40:24:dd:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C5:2C:EF:74:D3:7D:20:F5:79:1F:79:ED:4B:E3:7C:08:91:6C:7A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8Us73TTfSD1eR957UvjfAiRbHo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.160.0/22
Signature Algorithm: sha256WithRSAEncryption
90:78:89:b8:6c:57:c9:48:9a:b2:d2:b2:d8:17:6e:c2:d9:b7:
cd:e6:58:2c:e5:68:63:50:ff:f6:2c:e6:c8:cd:b8:d9:74:2e:
59:24:34:23:b4:dd:b8:2d:0e:62:d1:d1:1f:55:69:c2:d4:61:
e5:2d:fb:8b:0b:96:21:99:11:20:65:00:31:9d:dd:ff:e4:90:
02:82:00:57:11:bf:93:5e:7f:f1:fb:40:2f:12:87:bc:34:17:
ee:b8:0c:95:f5:7f:4e:38:84:e3:73:c8:ed:0d:12:3f:d1:39:
1b:3a:18:51:c5:a1:4e:cd:ec:6f:6d:ab:0e:36:ee:16:16:92:
f7:b7:7f:de:89:bb:8a:77:c4:d7:dc:5d:90:17:f0:0f:3a:85:
c6:50:d1:36:08:95:bf:38:ef:0e:6e:b9:8b:99:db:46:fd:af:
4a:a6:6c:2d:56:a9:16:b4:10:28:66:db:c4:31:d4:18:f0:88:
9f:96:a6:f9:a1:d0:d8:0f:5a:53:79:b6:8c:96:42:cb:af:12:
11:3c:ec:68:a3:11:d8:b8:b5:6c:8f:ee:6f:1f:bd:30:c7:14:
da:77:76:b9:c5:5f:42:35:d6:7d:60:d3:e1:1f:1a:f3:6d:15:
10:c7:92:6a:52:e8:46:4d:22:d4:17:d1:e6:93:43:50:d3:02:
85:b9:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org