Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BcU8xrK8JfY0QBBNg-7RkXuuET4.roa
File: BcU8xrK8JfY0QBBNg-7RkXuuET4.roa (raw, json)
Hash identifier: 0MdWjTbIiVPUyeLOUHgiVj6d2XlVHZZwXX6m2JTk5M4=
Subject key identifier: 05:C5:3C:C6:B2:BC:25:F6:34:40:10:4D:83:EE:D1:91:7B:AE:11:3E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BcU8xrK8JfY0QBBNg-7RkXuuET4.roa
Signing time: Thu 15 Sep 2022 02:35:14 +0000
ROA not before: Thu 15 Sep 2022 02:35:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=05C53CC6B2BC25F63440104D83EED1917BAE113E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:e9:b2:bd:67:a6:09:34:eb:fe:bc:3f:14:
7b:3b:c3:68:5a:23:bc:3c:15:06:7c:ed:a6:18:dc:
8e:82:87:06:04:b0:0d:1f:be:31:af:f9:de:9d:93:
6f:a9:d4:6f:d8:63:8a:77:58:3f:ab:76:90:3a:ab:
e3:b9:55:6c:4d:42:4a:bf:61:94:be:7d:e5:ea:a4:
71:bb:ff:09:7e:e9:dc:2b:ed:c6:a3:e3:e6:fa:c2:
a6:b4:38:30:73:33:21:fb:e6:5d:55:1a:4c:ca:48:
7d:b9:5d:4e:1e:33:d7:fe:42:ff:0f:58:89:aa:91:
a1:2c:a3:c3:ee:4e:24:b1:29:5b:e5:76:bf:ff:7b:
0d:ad:20:80:b0:c2:bb:5e:39:ac:cb:5c:29:1c:a0:
ef:f5:f1:1a:14:30:fc:b2:65:68:1c:5e:fe:2c:26:
c3:66:ce:8e:02:da:f5:14:4f:6c:49:66:60:8b:71:
a6:db:da:8d:26:02:10:c0:f3:b8:ab:7a:b4:b0:af:
04:30:69:66:33:1a:39:3d:b2:d3:ae:a4:6f:6e:4e:
cc:da:e4:3e:8c:44:b2:ae:60:f6:2f:12:f6:eb:e1:
ba:18:54:4e:3e:3f:28:50:7e:25:ab:24:39:50:0f:
fb:df:1d:55:03:aa:ee:a6:e3:7d:28:cf:f8:f0:7f:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:3C:C6:B2:BC:25:F6:34:40:10:4D:83:EE:D1:91:7B:AE:11:3E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BcU8xrK8JfY0QBBNg-7RkXuuET4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/22
Signature Algorithm: sha256WithRSAEncryption
26:d9:b1:51:d0:bf:ac:93:85:7e:a1:6c:f1:f6:e0:7c:b4:e7:
d4:6a:14:04:98:a8:f4:c5:7e:5c:0d:c6:4a:08:06:fd:24:c3:
d9:09:1c:09:5c:8f:98:8f:31:63:8a:07:3c:45:59:7a:b0:cd:
d1:8f:2d:9b:a2:d6:ff:81:c4:f8:a7:38:76:67:db:77:fe:ec:
28:7c:08:ec:29:e0:31:b1:b9:bc:11:26:2d:c6:4d:17:28:29:
46:de:a7:2f:d9:36:a6:6e:0c:4f:86:7f:93:8a:c7:9a:f9:8f:
71:48:1f:38:f8:c2:11:79:38:c7:db:d3:c2:e6:aa:56:b6:b8:
e0:42:ab:3c:a9:f1:2e:7c:d4:57:09:b2:37:65:86:bd:c5:42:
ae:5d:9b:37:16:c8:76:c7:ee:95:27:bf:c3:a8:75:ba:90:04:
b3:9d:f3:62:16:82:82:29:68:5a:4c:d6:18:39:51:46:3a:57:
0c:08:90:63:8c:67:02:00:fc:98:d2:f4:03:c2:3f:73:74:59:
63:d9:4a:d8:76:0f:71:c1:1a:a5:fc:68:26:ec:9a:45:15:56:
af:ea:ad:11:12:a2:15:9e:9a:30:fb:0e:1a:f4:77:67:0f:48:
47:bd:71:f9:f2:f8:2f:d1:10:41:42:53:7d:8a:a7:f2:2c:10:
f1:49:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org