Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-uv7dtiQdM3k4JUyOTpSXU4oME0.roa
File: -uv7dtiQdM3k4JUyOTpSXU4oME0.roa (raw, json)
Hash identifier: QDO+RPIch93iG3MttWivP8EzMkbdMnB94ExWYrMH1Uo=
Subject key identifier: FA:EB:FB:76:D8:90:74:CD:E4:E0:95:32:39:3A:52:5D:4E:28:30:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-uv7dtiQdM3k4JUyOTpSXU4oME0.roa
Signing time: Thu 15 Sep 2022 02:36:33 +0000
ROA not before: Thu 15 Sep 2022 02:36:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FAEBFB76D89074CDE4E09532393A525D4E28304D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ea:66:f4:7d:95:4a:37:91:d3:91:b3:a9:30:
e2:64:dd:52:a8:3a:e7:00:2e:f9:91:47:91:ee:ca:
71:e1:d3:04:6f:c6:ca:37:f9:8e:46:24:89:e6:b1:
bf:2f:f2:74:d0:cb:3b:59:24:e8:1f:69:c6:81:f3:
16:76:d3:47:23:4f:d5:95:fe:6e:af:c1:5c:4b:e7:
06:a2:d7:1b:31:f6:fd:f3:8e:f3:63:f9:75:a3:a3:
fa:16:d8:33:35:4c:8a:d4:b9:69:e2:01:d3:fb:e1:
41:15:ca:aa:4b:80:3c:2e:58:67:17:5c:dc:d9:a9:
0b:ab:08:46:99:89:fa:23:13:26:eb:a1:73:eb:84:
49:27:76:17:3e:1d:5e:c8:93:a6:da:c6:b2:81:7c:
c6:33:2b:f8:b2:3d:2d:87:f9:69:23:a2:00:36:42:
f4:c6:cf:71:90:08:8f:62:d4:4e:cb:57:0f:aa:e3:
56:83:c7:62:03:dd:4e:79:4f:74:5b:cc:13:4b:cd:
50:31:85:09:f3:36:af:e2:af:3c:98:a0:bb:44:83:
39:3d:ea:7b:a0:b8:49:c0:1c:3f:41:d4:95:f7:d0:
9a:3d:17:3c:c1:3f:ca:61:2f:c9:ef:33:ed:a3:44:
f7:f1:f3:40:52:4e:e6:b4:fe:f1:9b:c8:4a:39:6f:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:FB:76:D8:90:74:CD:E4:E0:95:32:39:3A:52:5D:4E:28:30:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-uv7dtiQdM3k4JUyOTpSXU4oME0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.176.0/21
Signature Algorithm: sha256WithRSAEncryption
89:eb:61:d6:31:99:a5:ad:28:9d:01:ba:59:04:b3:65:3d:2b:
7d:f0:5e:cc:44:77:54:ab:35:4a:42:21:95:91:89:a9:7a:3c:
f7:5a:95:1e:cb:6e:be:5e:e4:a2:e1:1f:c2:e6:e0:98:de:fa:
e7:e8:9a:82:4d:1e:26:2e:ea:e9:7e:15:47:8a:b0:3d:f6:c3:
a8:9f:17:42:11:ac:46:5f:e5:fe:d3:7d:1c:7e:03:c9:83:8d:
2c:8e:ac:0a:7d:74:57:6d:36:34:26:7b:8e:79:e1:65:43:11:
b0:82:eb:49:22:b3:4f:ff:40:9b:09:a3:d1:ab:8a:60:55:f1:
d4:bf:23:15:8a:72:0c:4f:60:d4:1f:74:63:ad:62:1b:e0:7b:
e3:28:d0:b2:44:18:59:1e:7d:c7:05:b0:b1:ed:b9:80:70:56:
5d:3d:68:66:a1:ff:9b:13:6f:8d:9b:b2:4b:ad:d3:71:53:41:
a6:e3:05:43:17:9a:9e:51:45:59:b4:69:4d:89:92:2a:73:b8:
85:3b:30:34:93:5f:d5:6e:0a:f3:5a:db:a8:3e:42:ab:9b:1f:
37:4f:cd:5d:6c:3c:53:9c:6e:cb:50:68:58:e9:c0:a5:1a:d5:
af:dc:31:c2:e5:40:b2:7c:4e:fc:be:4d:14:a8:a2:4b:9e:1c:
57:b6:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org