Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C-GDpwzsWMwa8lKsjMdw0lth3C0.roa
File: C-GDpwzsWMwa8lKsjMdw0lth3C0.roa (raw, json)
Hash identifier: MK4i6/jSs2cZi0waaxn9jOd7fsFxq88wY6U8mM6fMiA=
Subject key identifier: 0B:E1:83:A7:0C:EC:58:CC:1A:F2:52:AC:8C:C7:70:D2:5B:61:DC:2D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 197B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C-GDpwzsWMwa8lKsjMdw0lth3C0.roa
Signing time: Sat 22 Oct 2022 06:06:34 +0000
ROA not before: Sat 22 Oct 2022 06:06:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6523 (0x197b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0BE183A70CEC58CC1AF252AC8CC770D25B61DC2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:64:ff:00:d6:b1:54:13:8e:b4:27:c7:78:
a9:49:43:07:2f:d7:e9:72:f4:d3:4e:e3:c3:2d:aa:
10:9e:ef:20:5f:52:e1:66:8b:2f:77:c0:6e:49:4c:
df:f2:26:2b:75:03:6a:6e:41:44:1e:7c:66:47:34:
a9:1a:5d:d8:8f:bf:42:aa:fe:21:5c:fa:50:26:bf:
7e:03:09:d1:00:c4:c5:29:d0:a1:fb:67:40:df:8c:
66:b9:65:63:d5:49:1e:4a:1d:6b:98:c1:d1:a7:48:
f0:21:ab:40:da:9e:75:d4:4d:b3:d8:a1:4e:8d:83:
59:53:9c:c7:1e:bd:5d:7b:29:f4:1c:b4:ef:e2:f6:
4a:0a:a5:3b:c7:dc:c3:7d:27:ee:c0:5e:ae:f6:63:
79:67:d7:e0:b6:a3:e5:fd:a8:cc:e3:03:b3:8f:12:
33:57:6c:f8:a7:4a:41:17:bd:58:3f:2b:fd:78:38:
a7:bc:83:ba:b4:4e:31:5c:76:76:3f:48:4b:cb:1d:
13:d2:0b:ae:6d:e5:bc:8f:f0:72:a4:12:8b:94:f9:
1e:ac:47:f3:5b:8d:19:7c:01:63:70:1d:b2:e3:73:
e2:46:27:e1:a6:d5:b0:b0:73:55:87:d7:52:59:03:
0c:95:4d:1f:47:e3:2e:d2:7b:d2:26:7c:9e:a5:dd:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:83:A7:0C:EC:58:CC:1A:F2:52:AC:8C:C7:70:D2:5B:61:DC:2D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C-GDpwzsWMwa8lKsjMdw0lth3C0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:65:53:03:1d:9d:69:a6:00:53:9a:f9:1d:72:c3:34:3d:17:
0c:81:67:0c:50:f3:1d:76:e7:34:8c:54:69:6e:32:39:01:59:
98:6c:cb:18:56:5d:88:60:be:59:59:4a:a9:b5:38:1d:36:65:
41:86:cc:ea:2f:78:04:7c:81:e8:af:c4:58:76:eb:8c:95:05:
3e:df:fa:dd:73:72:6c:d1:0b:92:17:02:58:ea:45:bd:24:a9:
8e:13:2f:71:9e:ae:db:c6:b0:bb:7b:89:a2:ec:3a:d7:3f:0d:
ad:32:fa:2e:4f:88:af:99:3f:e9:e9:39:84:db:e5:5a:5c:2e:
60:8b:51:cd:5c:84:d8:55:6a:16:b9:a4:27:d5:07:53:57:b0:
97:43:39:91:73:5f:0e:32:4c:13:f7:ad:93:23:90:11:2f:9b:
64:be:72:39:89:d3:f7:15:36:a4:61:27:f0:1c:e7:7f:22:48:
1b:6b:c1:a4:92:c7:91:77:e0:06:ab:37:f5:be:6b:85:93:6b:
eb:4d:2e:b9:ee:9b:bc:ef:00:ba:d6:4d:cd:99:7b:33:0c:3d:
28:71:c7:b9:bb:f3:fc:78:29:c6:0b:ca:c2:2a:40:a8:d6:40:
c7:09:82:5d:c1:d0:e5:d9:03:07:ae:64:fc:26:a2:43:6d:9d:
da:77:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org