Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x9T6W4EbUm2y73Q-NPTUS8PgVhc.roa
File: x9T6W4EbUm2y73Q-NPTUS8PgVhc.roa (raw, json)
Hash identifier: +woyWfaHTdGV0j2d+FpeLE9xlTDwZ7Fvdq0tOriPhIg=
Subject key identifier: C7:D4:FA:5B:81:1B:52:6D:B2:EF:74:3E:34:F4:D4:4B:C3:E0:56:17
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1968
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x9T6W4EbUm2y73Q-NPTUS8PgVhc.roa
Signing time: Sat 22 Oct 2022 06:06:29 +0000
ROA not before: Sat 22 Oct 2022 06:06:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6504 (0x1968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C7D4FA5B811B526DB2EF743E34F4D44BC3E05617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:de:2d:05:ed:27:9e:20:ba:82:72:d9:4a:
36:59:ad:b1:cf:af:d4:b1:51:85:56:3f:bc:2c:52:
fe:63:2d:f7:21:41:9d:d6:82:87:9f:5c:c7:da:a5:
a5:b6:bb:db:c3:ea:60:23:21:3b:23:ee:1d:ab:e5:
3e:13:1d:df:19:1f:ce:c5:5d:3e:88:29:41:1e:97:
a7:31:ca:f8:28:43:e1:04:e5:fb:9a:52:3a:ec:a0:
61:27:a0:4b:ba:46:47:6a:3a:ae:44:47:77:62:d6:
f6:d1:6b:e9:3c:1d:e4:54:cb:2a:fb:5b:3e:35:83:
62:1d:5a:ea:15:61:5b:41:4f:f2:0d:58:31:98:86:
3c:d0:d4:d1:fa:9d:c0:aa:8f:35:c6:62:e8:e8:94:
a6:bc:19:fc:71:3e:6e:21:04:6d:57:92:76:c8:4f:
de:27:0d:d6:43:6a:75:36:4b:f7:49:01:ce:2f:f6:
d8:91:56:fc:80:0d:d6:9d:ed:28:2a:bc:44:58:8f:
71:05:c5:d8:aa:1b:41:c8:43:b8:15:bb:a8:6b:fd:
cf:17:b1:b2:0d:89:61:f8:f0:09:b3:b9:ee:19:83:
4c:97:bf:91:5f:ea:f4:ff:d3:f4:7f:7c:80:fa:7c:
04:3e:fe:06:b7:6a:c1:2e:41:6b:ca:30:f9:1b:1c:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D4:FA:5B:81:1B:52:6D:B2:EF:74:3E:34:F4:D4:4B:C3:E0:56:17
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x9T6W4EbUm2y73Q-NPTUS8PgVhc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.160.0/22
Signature Algorithm: sha256WithRSAEncryption
38:96:b9:cd:ea:3b:ea:85:cd:69:bf:13:08:9f:3a:07:74:a0:
25:dc:6d:d1:cd:6c:50:96:54:79:96:c9:10:7a:1b:29:cf:be:
ee:cf:f5:b2:25:35:ee:98:0d:f9:c7:f6:20:31:e8:68:c0:1a:
7c:db:16:15:31:0a:76:3f:6e:c7:7d:e8:73:7a:c5:50:6e:88:
63:04:b9:95:be:1b:b6:13:e7:02:c9:de:2b:54:d9:16:0e:7f:
80:1e:b0:8f:f1:f2:9f:61:50:76:b5:8a:3d:e5:c4:6a:21:f2:
18:c5:af:f9:3b:0f:41:4e:43:ee:08:e0:c4:75:7d:6f:d9:1a:
50:de:85:21:27:57:d7:a7:d4:a0:e6:f0:16:b9:e5:d2:68:6f:
8d:ab:b1:3f:40:97:01:d6:52:19:3d:ba:0e:a1:e1:95:5f:29:
bd:71:8b:82:57:72:94:54:a1:e9:2d:d5:57:9b:24:df:a5:5d:
26:26:36:20:de:23:f9:ec:18:1b:12:08:d0:ce:e2:cd:9c:c8:
52:c3:55:2c:9f:cd:7e:69:c8:73:bf:90:32:db:b5:46:eb:f0:
7e:cc:a0:01:b7:f2:4e:94:aa:f5:da:ce:c8:48:07:39:8a:ba:
b9:ee:a7:ae:d9:46:91:63:6f:f6:a2:58:ea:a1:79:d0:cc:54:
91:39:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org