Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kf6sxKurFhwOsw7qq8ymTAF0bHs.roa
File: Kf6sxKurFhwOsw7qq8ymTAF0bHs.roa (raw, json)
Hash identifier: 1HxHQz6Hl4R02zolORLRpQa/z/q7gzZ0mL3/PwvBSaA=
Subject key identifier: 29:FE:AC:C4:AB:AB:16:1C:0E:B3:0E:EA:AB:CC:A6:4C:01:74:6C:7B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kf6sxKurFhwOsw7qq8ymTAF0bHs.roa
Signing time: Thu 15 Sep 2022 02:36:44 +0000
ROA not before: Thu 15 Sep 2022 02:36:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=29FEACC4ABAB161C0EB30EEAABCCA64C01746C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:26:c3:31:90:bd:03:74:ed:ce:f9:a8:71:
4f:b3:57:89:fc:f0:e4:f8:ed:d8:39:4d:7f:95:fb:
64:1f:ea:30:86:71:e5:e2:bd:49:60:db:3f:73:68:
51:27:a7:7d:a3:9f:e3:dc:96:15:6b:71:c1:7c:d4:
2c:9c:6f:a6:a6:5b:48:6e:b9:f5:7c:97:be:71:0c:
4f:69:18:11:07:99:8a:1b:4a:1d:72:01:ed:96:2b:
a4:7a:92:56:1f:84:3a:26:39:59:45:5f:7c:94:1b:
e7:5d:89:98:82:5c:5c:b0:8a:b0:72:d2:57:50:27:
ea:53:1c:cd:23:02:0f:44:d2:5e:17:bf:4a:93:7e:
02:44:cb:5e:a2:76:42:40:34:33:12:9f:50:9a:48:
58:f1:02:e6:25:cc:f0:f0:7b:f4:26:e8:3a:ae:88:
e6:99:b7:97:d4:35:dc:3f:d5:84:e0:17:cf:d3:6a:
fa:7a:57:db:66:a6:35:f5:6b:35:91:69:81:a5:38:
76:61:f9:a1:cd:33:e3:59:41:20:c3:5a:56:b7:85:
0a:b5:43:f8:2f:f5:a1:16:fc:d1:da:0e:4d:18:e1:
58:b3:69:d6:9d:bd:95:c8:52:45:9c:06:55:94:47:
01:4a:18:72:89:c8:6d:90:b3:ec:8e:fa:9a:c7:9a:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:AC:C4:AB:AB:16:1C:0E:B3:0E:EA:AB:CC:A6:4C:01:74:6C:7B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kf6sxKurFhwOsw7qq8ymTAF0bHs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
54:74:82:0e:e5:ca:e1:ca:37:1e:62:49:77:a5:db:75:eb:a5:
6f:9e:06:dc:b2:b3:a4:03:de:37:99:d5:29:ca:1c:db:3a:da:
c9:3b:cb:3c:72:a7:21:13:a9:80:78:a7:01:16:a7:4d:2b:fa:
a2:fd:c7:5b:37:ca:cf:ce:b4:ac:98:f9:de:d9:1d:52:6a:66:
9b:b1:c2:9a:03:12:fc:38:e9:33:b1:2b:4c:9d:54:ff:90:aa:
b6:b2:a5:11:73:35:0a:c1:a7:a0:b4:e8:60:42:b8:65:22:87:
6b:12:63:c4:92:9f:fc:2e:7c:9b:5e:a4:b2:a6:b6:da:16:47:
e8:4d:4c:24:a9:e7:04:eb:65:ba:98:36:b7:2a:7c:76:99:13:
54:aa:dd:f5:36:aa:a8:c3:57:19:4d:f7:61:55:63:ad:28:72:
a3:8d:ff:59:96:ce:fe:4c:96:b1:12:bb:1c:2b:75:76:30:7b:
17:6d:6a:6e:66:f3:c4:4e:20:d4:99:4e:d3:bb:15:db:c5:7a:
f9:9b:80:1f:ee:30:3a:a7:28:05:06:1b:43:52:6c:ef:7a:3b:
8e:06:60:17:c5:e2:13:fd:f1:bf:d5:58:16:64:b3:f3:7c:ff:
d0:f2:f1:34:47:32:d9:41:8b:5b:c1:c5:15:a3:bb:d5:f0:59:
84:c3:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org