Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcgdBkZcYia59ZksFzAQWV29jkA.roa
File: QcgdBkZcYia59ZksFzAQWV29jkA.roa (raw, json)
Hash identifier: sUy+x8sYtw7PNQBuJRGi5bRePTLQ03GLpqry2/RuCtc=
Subject key identifier: 41:C8:1D:06:46:5C:62:26:B9:F5:99:2C:17:30:10:59:5D:BD:8E:40
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D42
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcgdBkZcYia59ZksFzAQWV29jkA.roa
Signing time: Thu 14 Jan 2021 07:30:20 +0000
ROA not before: Thu 14 Jan 2021 07:30:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:30:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=41C81D06465C6226B9F5992C173010595DBD8E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:4f:4d:60:61:a0:77:67:93:16:66:37:07:
f6:25:d7:05:77:d7:31:ab:98:83:65:41:ec:69:40:
97:8c:ef:f4:b3:a9:3d:94:bb:4d:eb:45:f3:b2:db:
a9:a3:dd:81:79:91:10:70:91:ba:c0:9a:56:92:dc:
a3:ef:45:a8:ab:19:ed:9d:f2:f1:b6:11:76:be:5a:
3d:51:f7:bd:53:3c:db:c4:be:04:04:f9:0c:f8:7f:
7b:a5:5d:6d:59:c9:f7:60:b6:14:2c:c1:a1:3e:97:
d7:80:dc:4e:2f:01:97:2b:7d:32:46:a3:58:e2:dc:
7d:f7:97:60:54:38:48:9f:9b:ff:3f:a4:fe:64:d4:
b9:c5:90:3a:7c:65:09:04:ae:f0:a7:a9:19:45:8c:
77:fe:b0:f5:0d:f9:e3:7f:14:39:1e:05:fc:09:87:
a6:46:b9:e5:27:f1:5d:00:86:ec:cf:a3:b0:9a:bc:
13:57:0d:b8:af:ee:a6:33:08:3b:d5:98:ba:32:c3:
2d:04:1e:6c:de:52:78:d3:54:42:31:54:d7:4e:a5:
40:51:18:7e:27:ac:c5:a8:36:a4:5c:16:4d:be:bc:
0e:fb:92:6c:03:b4:d9:18:df:85:af:8d:d8:ae:24:
98:22:10:95:67:02:d4:a1:da:be:f9:05:86:13:0b:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C8:1D:06:46:5C:62:26:B9:F5:99:2C:17:30:10:59:5D:BD:8E:40
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcgdBkZcYia59ZksFzAQWV29jkA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.124.0/22
Signature Algorithm: sha256WithRSAEncryption
58:32:dc:ef:30:63:39:3a:35:ee:48:68:81:3d:ad:65:91:d9:
65:67:3a:c8:75:83:91:6d:0a:53:88:88:ec:9a:c6:27:1e:b6:
d1:f9:b9:b7:28:b9:86:fc:34:43:9b:82:87:dc:f5:2e:5f:8b:
35:c6:0b:c1:12:2e:18:ae:c0:f2:b4:90:fe:df:a0:09:21:2d:
7c:f4:5d:6c:5c:1c:32:68:f9:4a:c9:ca:ac:ae:5f:75:51:24:
47:a3:69:48:f1:42:ae:ee:37:67:75:67:a2:35:72:08:7a:a8:
e3:39:0c:ef:5e:48:64:04:38:00:1f:17:37:9e:fe:cb:d1:b9:
1d:61:31:a0:9a:a7:fe:de:78:41:7c:15:aa:bb:0b:ca:af:a9:
e7:a3:94:cf:c7:01:98:3f:d5:99:69:de:54:a8:6a:c7:fc:0e:
fe:66:ff:1a:b0:dd:5a:6f:a1:8b:86:d2:bd:08:b4:f8:29:6d:
df:2c:3d:e6:e5:2d:33:8c:1c:c1:a4:bc:b2:ee:a2:1b:f8:76:
74:9d:6b:18:e0:46:ed:cb:a5:7f:bc:af:24:8a:e1:b8:f0:58:
d2:45:c5:91:81:c8:c3:e2:39:52:fa:90:49:1f:14:ff:85:97:
4d:08:8d:52:69:45:be:65:07:52:80:a7:4c:5e:c2:5a:08:66:
64:9c:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org