Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QG1nuXjx4MaggfV-g5ujkZV5R4.roa
File: -QG1nuXjx4MaggfV-g5ujkZV5R4.roa (raw, json)
Hash identifier: ajfvpp2hUe7+cMRTJUWpK2gLdRs20qoiJAvbFW5S9WE=
Subject key identifier: F9:01:B5:9E:E5:E3:C7:83:1A:82:07:D5:FA:0E:6E:8E:46:55:E5:1E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D89
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QG1nuXjx4MaggfV-g5ujkZV5R4.roa
Signing time: Fri 01 Sep 2023 10:14:59 +0000
ROA not before: Fri 01 Sep 2023 10:14:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.136.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7561 (0x1d89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F901B59EE5E3C7831A8207D5FA0E6E8E4655E51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:ca:f2:23:8a:9b:76:1d:e7:b5:3e:2f:fd:
ca:ef:d5:ec:2a:af:e1:c6:65:0e:d8:c3:d6:c9:08:
b3:8d:0e:07:a2:dc:4f:3f:f1:71:01:26:e5:20:d9:
03:ba:af:8c:df:27:e2:8b:0e:e1:dc:05:a1:88:98:
f7:28:be:6c:52:ca:e3:73:f0:13:2f:09:02:30:0a:
86:cd:ab:bf:ba:a0:be:47:24:77:05:3e:0b:69:e3:
00:4c:0e:29:8a:42:18:7a:c4:f2:56:ed:e1:91:51:
9f:d2:06:c6:e9:b9:2b:dd:14:dd:d1:87:d7:30:cc:
36:3d:27:4a:bf:f8:14:db:d3:6c:23:24:37:0e:4e:
a1:14:e4:f8:18:57:8c:1e:56:11:05:a2:4c:59:37:
00:dc:7b:ae:b6:3f:c5:0c:05:7f:2f:98:5d:1a:be:
c5:bb:57:d4:63:7a:32:49:3f:46:5d:27:d3:6b:e7:
48:01:b1:fb:74:e4:23:8f:48:45:ca:ef:46:de:df:
4f:6f:29:34:f5:ac:f4:f6:82:cc:c8:5f:e8:c1:69:
79:15:b3:69:2f:4a:6a:24:61:81:f6:c0:7f:d7:c8:
d9:d9:25:26:7b:30:62:89:1e:c1:33:0f:fb:bc:2c:
7c:6c:dd:15:7b:75:2d:c2:89:d0:e4:46:b5:a7:f2:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:01:B5:9E:E5:E3:C7:83:1A:82:07:D5:FA:0E:6E:8E:46:55:E5:1E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-QG1nuXjx4MaggfV-g5ujkZV5R4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.136.0/21
Signature Algorithm: sha256WithRSAEncryption
51:01:a7:61:3f:be:f0:10:a5:7d:78:b2:7c:60:fb:c0:df:44:
04:c1:f8:c4:c2:af:a0:df:2d:c2:e2:93:ba:41:a6:80:dc:41:
c0:14:79:b5:1a:09:60:ac:f8:07:11:20:d9:9e:87:7e:b1:d6:
b9:62:0e:8c:bc:6f:c0:3e:45:00:d6:b2:fb:a2:5a:a6:32:56:
c2:c8:6c:cd:de:2d:e1:ef:5c:db:5a:bc:27:e9:ad:b3:f8:4d:
40:0b:9d:cf:b9:46:81:95:38:12:37:22:4d:85:92:c6:b3:75:
26:22:78:4a:9b:d9:1d:20:fd:37:16:eb:0b:8a:e3:2d:4b:60:
0e:eb:3e:d6:04:b3:43:86:92:ca:10:9e:4e:a1:78:de:86:09:
6d:95:51:4d:44:82:57:f1:3d:5e:8d:8a:a9:48:14:4a:2e:ca:
a7:99:2c:67:89:5a:3b:09:a3:03:6b:7a:b9:ce:59:77:1c:b7:
6e:ea:98:76:59:bb:da:b8:7c:f8:c9:40:e3:5e:ef:dd:6a:71:
1f:0a:c3:5f:36:b2:71:3f:63:ee:56:8a:4c:06:cb:90:98:69:
99:90:b1:11:9a:3e:2f:b4:e2:a7:34:03:ba:6c:6b:ec:af:8b:
a6:3a:52:4a:84:ca:1f:57:cb:17:23:31:fb:29:e7:af:16:f8:
fb:55:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:36 2025 by rpki-client