Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ob0ougIa9Ru9IyduuYlFh5vZLdA.roa
File: Ob0ougIa9Ru9IyduuYlFh5vZLdA.roa (raw, json)
Hash identifier: 2vTVoQYVUsCaEwFqJbd7peGnJdQeJGHMHUaBk5z9dwc=
Subject key identifier: 39:BD:28:BA:02:1A:F5:1B:BD:23:27:6E:B9:89:45:87:9B:D9:2D:D0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ob0ougIa9Ru9IyduuYlFh5vZLdA.roa
Signing time: Thu 15 Sep 2022 02:35:56 +0000
ROA not before: Thu 15 Sep 2022 02:35:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=39BD28BA021AF51BBD23276EB98945879BD92DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:36:2c:08:31:36:dc:3c:9c:a1:7b:e6:a6:
81:4b:8c:2c:48:3f:74:14:58:3b:69:b9:10:af:0f:
ef:32:69:67:e5:c0:30:03:2d:63:8b:36:32:57:96:
9e:e9:d8:dd:d6:86:18:5a:42:17:82:00:f4:e1:2f:
05:2c:b5:1b:53:6f:32:f9:a1:67:aa:28:32:eb:5c:
34:74:0c:a8:43:ef:84:7a:d5:b6:ac:c9:96:ea:98:
0d:44:29:83:a1:e4:5e:3d:13:6c:57:a7:c6:70:fd:
9f:4c:18:d8:1f:68:c4:9c:90:d2:f1:3e:9c:23:82:
ae:c1:ba:83:21:a7:73:f0:8f:fc:16:f7:e3:44:2e:
c1:a8:2e:93:b3:a9:5c:81:fe:a9:98:04:14:e7:99:
38:af:31:40:ec:76:d5:7e:52:8c:1e:0a:73:93:a7:
2f:e0:f5:83:e7:47:dc:ce:a1:25:9d:ae:64:fd:e2:
c1:74:b3:83:a1:9c:b6:75:a4:55:cc:2f:ce:c5:6a:
d4:af:4d:5f:05:61:75:8a:a8:1b:ee:d4:bc:02:75:
88:3f:f7:a1:e1:64:ae:b1:78:a0:30:46:50:96:fd:
20:2a:11:1b:7d:01:2a:b5:b4:27:35:20:ae:e4:18:
2f:7e:25:4a:1e:1a:1b:da:ab:ec:29:d4:73:79:86:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BD:28:BA:02:1A:F5:1B:BD:23:27:6E:B9:89:45:87:9B:D9:2D:D0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ob0ougIa9Ru9IyduuYlFh5vZLdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.32.0/21
Signature Algorithm: sha256WithRSAEncryption
24:d1:e2:60:b2:03:26:32:39:08:6b:69:54:81:b2:8b:3c:da:
a0:57:de:30:93:ce:ef:80:7d:bb:fd:f7:1a:56:5c:a2:c9:cf:
2f:9b:e4:70:8f:fd:e6:36:5c:03:f1:8c:be:20:d6:24:6b:9b:
08:63:f5:61:d3:49:33:68:7e:7e:87:72:7f:62:a0:76:e9:79:
57:1a:a0:f4:7a:da:0e:93:6b:0b:b0:fe:44:3d:a3:24:dc:0b:
d0:8c:df:8a:c3:31:06:f3:f9:6e:db:31:a7:d6:14:c6:f8:0a:
9b:c9:5a:45:7e:90:53:9e:8f:ba:d3:e5:e1:b5:b2:5a:55:16:
11:46:0a:58:7d:5c:48:95:ac:62:4a:f0:1b:9c:73:65:31:a6:
d0:88:58:8b:ca:f6:68:a2:a3:03:0d:60:4f:e3:70:1e:38:0e:
60:d6:d0:0e:bc:9e:63:ff:6c:0a:85:d1:3e:97:ee:48:eb:12:
24:7b:f9:02:8f:28:a9:bc:68:af:71:dc:5b:61:56:4a:91:b2:
95:3a:24:ae:1e:e5:3c:a3:04:8f:e0:66:bd:d5:2d:bf:8b:af:
6a:07:cd:aa:56:3f:7b:a5:ae:62:1e:2f:70:05:cf:27:d0:a6:
0a:7b:60:32:08:e3:bd:e9:b5:55:63:08:40:c5:03:00:d6:19:
04:bc:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org