Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4aqdf8jbJerFr4DwNP6V0gLGJrk.roa
File: 4aqdf8jbJerFr4DwNP6V0gLGJrk.roa (raw, json)
Hash identifier: oEw58tX5UNYdSMS6WWDF4cQPhB9IAza97PZCvypsSIk=
Subject key identifier: E1:AA:9D:7F:C8:DB:25:EA:C5:AF:80:F0:34:FE:95:D2:02:C6:26:B9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18FB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4aqdf8jbJerFr4DwNP6V0gLGJrk.roa
Signing time: Sat 22 Oct 2022 06:05:57 +0000
ROA not before: Sat 22 Oct 2022 06:05:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6395 (0x18fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E1AA9D7FC8DB25EAC5AF80F034FE95D202C626B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:dc:59:2c:97:9b:49:de:9e:63:65:2e:33:9b:
99:9b:8c:b7:93:f2:5e:38:e4:1c:bb:db:ef:83:30:
69:9b:5c:bc:41:78:ff:86:c9:fc:c7:df:f0:ee:bb:
28:66:69:a8:65:66:5c:a4:77:80:1a:32:72:99:1d:
78:4e:8c:2f:eb:9d:68:d2:06:00:ad:57:69:2a:5c:
98:ba:33:8f:7b:50:81:bd:31:17:04:b5:3c:cc:75:
fb:af:48:06:20:70:e6:1f:32:cb:09:2f:1c:24:15:
6f:79:fd:af:f1:65:ac:9a:12:1f:0a:7b:1e:69:3c:
7c:9f:e5:7d:60:0d:00:00:88:3e:d5:ce:06:92:b8:
af:8c:0d:f2:49:94:81:a6:9a:e3:26:c7:a0:22:2d:
06:ef:07:01:90:45:01:b8:a3:dc:5b:39:75:fb:a4:
83:7f:de:fe:d7:ee:23:ec:63:05:f1:5b:f5:a4:f7:
2e:df:b5:cf:b7:11:fc:ee:ca:fd:99:71:9a:00:26:
54:9f:72:52:05:4a:c3:7e:6f:59:44:2d:7b:42:e8:
a1:9f:5c:52:50:e3:b4:80:8f:06:d5:12:23:10:f5:
6d:4b:7f:5f:84:2b:0d:9f:7e:18:99:e8:2f:89:75:
19:5f:8c:7e:50:66:89:52:e3:aa:3e:fa:a5:ea:ff:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:9D:7F:C8:DB:25:EA:C5:AF:80:F0:34:FE:95:D2:02:C6:26:B9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4aqdf8jbJerFr4DwNP6V0gLGJrk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:c4:2e:4e:2e:4f:33:5d:0a:dd:a4:f1:49:8c:d1:c9:25:b0:
23:12:c6:1a:f8:22:78:57:d3:eb:81:cb:bc:70:b3:dc:18:ad:
fc:a7:72:1d:65:d6:ec:36:5e:cd:7c:89:da:c6:08:6f:da:81:
d9:de:3c:69:be:91:e2:b1:e2:b5:e5:81:4b:2e:cd:ae:41:fb:
4b:6d:4f:ee:7c:fd:17:72:87:ae:38:5f:65:25:b9:81:ba:be:
71:81:f0:8e:56:25:ac:84:a5:13:31:08:71:70:af:da:d9:6b:
8f:a0:67:a9:ff:42:68:8e:27:0d:6c:dc:5f:6a:44:61:22:26:
55:1d:91:57:d0:dc:76:c4:e6:c0:ba:9f:df:4e:a8:a7:d6:52:
26:32:0e:21:24:41:96:91:6b:bf:a2:1c:58:89:e2:aa:52:cd:
fa:15:e7:dd:57:3c:b0:6f:a4:42:a5:56:20:3e:73:5c:61:41:
0a:a1:ea:f4:cc:37:9b:fa:03:42:dd:98:13:b8:9f:e6:28:c6:
0d:59:25:88:8d:46:aa:c3:93:4e:37:3a:ed:69:ee:2b:89:73:
a7:67:66:17:bf:64:cd:6a:3e:19:95:be:ef:70:94:a8:43:2b:
65:10:42:f0:89:40:32:c8:c4:ef:8e:f6:d7:d0:81:e5:ad:b4:
e4:6a:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:21 2025 by rpki-client