Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BK51mI2tKlMACKQKpbW0Eq-nD4o.roa
File: BK51mI2tKlMACKQKpbW0Eq-nD4o.roa (raw, json)
Hash identifier: o7iedK0a5LCBwgrdauV62JPhJ91lAjjVFFxNYUthBKs=
Subject key identifier: 04:AE:75:98:8D:AD:2A:53:00:08:A4:0A:A5:B5:B4:12:AF:A7:0F:8A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1305
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BK51mI2tKlMACKQKpbW0Eq-nD4o.roa
Signing time: Wed 29 Sep 2021 02:55:16 +0000
ROA not before: Wed 29 Sep 2021 02:55:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.186.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4869 (0x1305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=04AE75988DAD2A530008A40AA5B5B412AFA70F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bb:ae:b7:c7:28:3c:c7:23:8b:bb:04:9f:16:
d1:6d:92:bd:c3:96:e4:c3:2c:70:7e:40:bf:6b:ca:
89:03:f0:9a:d4:2c:11:0f:b4:b5:b0:12:b9:49:5b:
4e:e5:e2:55:2a:29:41:5a:ac:1e:41:dc:2c:56:2a:
fc:6c:53:2f:bf:7d:8d:cc:70:f3:90:a9:d8:23:1b:
c7:d1:4b:7c:04:02:80:27:bc:16:5d:98:48:61:db:
f1:94:40:16:d5:2f:bd:9c:d6:c6:7e:88:51:c8:0c:
7a:a2:0f:1f:b5:f7:de:63:6e:e6:9c:b7:b6:e6:1e:
c3:0e:6a:aa:10:61:4e:3a:fa:e3:fb:13:df:27:81:
c4:85:a9:94:db:f6:27:92:10:50:37:8f:2c:9a:e5:
7f:d3:9d:31:59:40:a4:4b:4f:7e:6a:f9:f0:49:45:
4d:b1:4f:66:b9:a6:57:40:f3:64:48:7a:e4:8e:d3:
c4:df:23:73:56:71:27:84:5c:0d:66:e1:ea:61:f5:
ee:bd:92:6a:1d:7d:42:b3:cf:02:04:33:a8:dc:c7:
ba:34:89:cb:0f:e7:63:db:e4:69:64:73:2e:53:46:
3b:2b:be:a0:0c:d8:89:74:08:65:fd:6b:40:18:04:
26:c6:40:1a:00:f0:90:1e:df:14:40:5a:33:37:00:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:75:98:8D:AD:2A:53:00:08:A4:0A:A5:B5:B4:12:AF:A7:0F:8A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BK51mI2tKlMACKQKpbW0Eq-nD4o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.186.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:61:13:03:4d:76:b3:93:a4:55:05:d9:c1:3d:4b:4a:6a:5a:
ca:62:39:83:48:c9:50:ea:44:d0:69:79:e4:7c:02:9d:c3:4d:
4d:36:c3:63:01:8b:4b:06:0c:a7:e6:ec:e3:5d:8e:14:ac:cb:
91:72:42:aa:64:19:0f:71:17:a7:ad:38:62:0f:95:6f:a5:5f:
1b:86:28:86:f6:ca:bc:67:85:88:ff:73:31:50:74:2b:56:63:
67:53:b2:ec:c3:6b:c9:db:05:cd:31:dd:79:39:cf:05:f0:e0:
b2:20:e4:be:68:85:ca:40:b7:86:82:a5:74:5d:e3:2f:ce:6a:
1b:9d:1c:d2:82:1e:cf:6d:60:81:df:cb:67:56:28:74:63:d9:
89:37:86:01:01:a9:d2:34:e5:ca:fb:b8:93:4a:01:c0:80:d2:
e5:7c:c4:d6:bb:6c:53:7a:b7:61:36:26:7e:ad:67:1e:dc:36:
64:bf:dd:ec:23:bb:49:7c:7f:a8:7d:ab:19:f1:05:55:3b:c6:
4c:75:f9:85:78:41:26:bd:14:ae:cb:9e:67:90:44:e4:1b:91:
68:b7:e5:d3:28:e4:27:c6:6e:a2:51:e6:25:a8:6e:28:4e:09:
24:36:54:56:61:c4:8d:0c:44:6a:84:ee:dd:8b:71:e0:18:5e:
6e:8a:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:35 2025 by rpki-client