Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wl_hD6Py0CfPIZeyYVxwxgFYzZA.roa
File: wl_hD6Py0CfPIZeyYVxwxgFYzZA.roa (raw, json)
Hash identifier: nQQjbhjdP89Lv7XGHDg8m3EkadCSumVvZc3yhyirbIg=
Subject key identifier: C2:5F:E1:0F:A3:F2:D0:27:CF:21:97:B2:61:5C:70:C6:01:58:CD:90
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1991
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wl_hD6Py0CfPIZeyYVxwxgFYzZA.roa
Signing time: Sat 22 Oct 2022 06:06:42 +0000
ROA not before: Sat 22 Oct 2022 06:06:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.216.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6545 (0x1991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C25FE10FA3F2D027CF2197B2615C70C60158CD90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:ff:2f:28:3d:1a:12:1e:c0:50:b4:52:ec:
3e:8f:f3:51:1b:be:0e:0b:a7:e5:e0:2f:75:79:2d:
32:31:c2:e8:fe:b5:3a:7a:14:43:c4:e9:b2:3e:1c:
a4:94:b9:2f:02:fa:88:ca:4e:18:c2:e4:ef:e5:8c:
8d:43:66:b0:2b:dd:19:81:36:f7:c4:54:2e:a1:fe:
8c:f1:a4:94:4b:fa:1c:8b:67:91:67:e5:9f:58:4b:
e1:a7:ea:4b:65:c4:22:cb:95:49:92:0f:1a:4f:3d:
d6:6d:d7:19:24:ca:52:5d:fc:e5:06:e1:c4:03:36:
e0:c1:34:66:72:b4:bd:0e:04:96:11:e1:65:c1:d0:
08:ad:24:6b:b3:7e:67:e2:03:5d:92:fc:d9:8b:1a:
67:ac:7f:a7:81:89:e3:6b:93:c0:f4:93:54:bb:5b:
59:66:5a:85:18:1a:a7:82:b1:c3:f6:02:e8:27:ec:
d2:fd:e4:ee:78:e7:da:64:46:10:9c:e8:b9:04:1c:
73:ee:79:ec:4c:36:f3:5b:35:93:14:c2:99:2b:92:
5e:39:57:50:0b:ff:49:ce:21:83:eb:08:80:10:8d:
5f:45:0d:60:c0:e1:2d:45:36:ae:53:b8:90:8d:40:
58:82:48:3c:0e:90:c1:89:f8:4f:34:02:26:61:44:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5F:E1:0F:A3:F2:D0:27:CF:21:97:B2:61:5C:70:C6:01:58:CD:90
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wl_hD6Py0CfPIZeyYVxwxgFYzZA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.216.0/21
Signature Algorithm: sha256WithRSAEncryption
26:6e:38:97:e6:8a:9e:14:19:70:1a:bf:e8:bf:a4:9d:02:ae:
d3:41:f9:9a:07:8a:8d:28:0c:d3:57:e7:ca:c2:76:77:75:07:
93:c4:99:81:c5:7f:c8:45:bc:b4:b7:70:3a:47:19:84:f4:1a:
9d:79:19:6b:a4:16:8c:10:5b:a9:54:19:50:58:79:36:eb:b7:
06:40:1a:bb:87:1d:32:10:6b:89:42:95:c0:20:21:a9:6c:f4:
3f:39:cf:35:88:be:b5:fc:ab:5e:56:db:2a:be:bf:5a:76:ee:
ac:0b:6e:9d:bd:7b:c8:b3:d8:88:ae:ec:6d:3c:50:9a:ae:cf:
c5:a2:6d:6a:9a:42:7e:ae:43:59:cd:a6:24:69:81:3e:03:9c:
0c:a3:d9:30:48:d6:11:89:30:c8:79:59:da:92:21:78:ff:8f:
4a:4b:10:81:01:9f:0b:12:bc:5a:fc:b7:22:d5:10:c0:43:b9:
be:b7:4a:5d:16:cd:94:f7:b8:e1:39:ce:4f:d1:09:93:c3:d4:
d5:dd:e7:d1:1f:ad:09:d2:7c:3c:88:af:c3:ce:b1:5b:8c:f7:
b9:6f:b1:c4:2b:40:2a:59:f9:74:80:ea:7a:41:08:0f:89:5f:
93:d1:6e:11:e6:48:b7:8b:e7:e3:7a:e6:8a:11:77:2c:54:8f:
b0:2a:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org