Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7RtJ-10n-q9pvcxEiPiQ9qHZSbU.roa
File: 7RtJ-10n-q9pvcxEiPiQ9qHZSbU.roa (raw, json)
Hash identifier: n53qxjLMGVoumQDcj9y43e4c7H8RT7no4RygPB4DSwo=
Subject key identifier: ED:1B:49:FB:5D:27:FA:AF:69:BD:CC:44:88:F8:90:F6:A1:D9:49:B5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7RtJ-10n-q9pvcxEiPiQ9qHZSbU.roa
Signing time: Thu 15 Sep 2022 02:35:55 +0000
ROA not before: Thu 15 Sep 2022 02:35:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ED1B49FB5D27FAAF69BDCC4488F890F6A1D949B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:cd:d1:4f:22:08:cc:55:65:6b:e9:0e:44:
58:74:7a:04:3a:55:00:b5:82:e7:5f:fe:6a:19:84:
56:f9:6e:b4:f0:c4:40:35:11:41:da:92:e3:61:e1:
79:30:4a:c5:1f:bf:fb:10:be:34:b5:f9:5e:22:aa:
be:2c:24:62:36:f2:07:a2:ba:b2:9e:c7:bf:dc:19:
cb:74:62:1a:65:58:4a:ca:42:e4:7e:42:47:47:6b:
75:0f:ec:fe:f3:6c:a4:f6:11:d9:2a:51:f9:3d:14:
ca:99:2a:55:f4:3d:62:eb:84:ba:ab:d9:39:50:7d:
65:21:53:6b:fc:dc:38:9e:c9:13:ad:f9:a1:a3:39:
25:46:2d:67:5e:12:d4:06:e1:84:02:10:d1:c1:a9:
6d:54:d9:35:c6:44:21:53:87:be:17:b7:0f:ff:1a:
47:4d:2a:61:f4:62:f7:04:95:0c:fa:49:90:f5:23:
76:26:3d:e1:e5:3f:c9:e2:07:2b:e9:54:e5:34:a5:
78:c8:ad:c8:b8:0d:c3:9d:65:c4:7a:3a:74:bc:e0:
3e:96:21:3e:6d:5b:8b:8a:a9:fc:21:1b:15:e9:01:
34:78:35:af:00:30:94:1b:51:53:3f:de:ef:55:4f:
b1:ee:e3:b9:7f:c4:da:b2:59:f0:4b:68:38:e9:be:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:49:FB:5D:27:FA:AF:69:BD:CC:44:88:F8:90:F6:A1:D9:49:B5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7RtJ-10n-q9pvcxEiPiQ9qHZSbU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.141.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7a:23:fa:2e:14:41:1a:f2:d5:15:4e:b6:2b:a3:2d:ad:06:
5e:98:df:64:d7:02:c7:53:c3:4f:9e:7f:e0:f1:0e:5a:de:2c:
40:09:18:5c:84:07:ea:26:4a:9d:8b:af:c8:38:27:d6:97:8e:
64:e9:1b:b2:28:96:35:1a:b1:18:8b:3f:2c:2b:ff:34:c3:41:
ac:80:67:59:59:81:a6:f3:6d:09:77:81:02:2f:7a:3d:ea:8b:
79:ed:ff:97:00:80:9b:bf:c9:2a:69:1d:ce:6e:ce:26:ad:2a:
ea:b5:26:57:1b:4a:01:b8:d5:f8:af:19:0b:50:01:43:b3:7d:
cd:14:54:29:e2:4f:ed:ef:75:31:5b:ba:58:5b:17:ed:5b:a3:
2b:a7:77:46:51:6b:e0:27:9e:82:55:25:24:79:46:7d:c5:9c:
0b:5f:25:24:ca:50:da:e7:7a:fa:a1:84:3b:77:ad:52:8b:61:
70:64:88:0e:56:b2:bf:21:81:58:03:bb:c8:fa:da:36:12:3c:
16:e7:83:8a:31:ad:7f:ea:ed:df:de:83:df:fc:ef:c2:5b:f0:
0a:96:11:1a:4d:d6:70:37:6f:89:d4:55:2b:54:a7:bd:13:5b:
05:20:e5:cf:ac:47:e9:a0:4a:7d:bd:2c:62:0b:ee:95:49:cc:
20:61:30:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org