Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RUif3xpya1tPuSsjZE8kRJ3RULg.roa
File: RUif3xpya1tPuSsjZE8kRJ3RULg.roa (raw, json)
Hash identifier: lwr3Mw+bBFCGv3WMYFzPhlb05wSZ/ySXhDOWuZyngeo=
Subject key identifier: 45:48:9F:DF:1A:72:6B:5B:4F:B9:2B:23:64:4F:24:44:9D:D1:50:B8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12E9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RUif3xpya1tPuSsjZE8kRJ3RULg.roa
Signing time: Wed 29 Sep 2021 02:55:08 +0000
ROA not before: Wed 29 Sep 2021 02:55:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4841 (0x12e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=45489FDF1A726B5B4FB92B23644F24449DD150B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:0b:3c:f2:51:9d:3e:7a:b7:13:63:5f:50:
2a:b7:9e:37:71:17:77:c6:b8:31:f0:4c:ab:f6:c3:
29:88:fb:2a:f0:ae:f8:24:4d:25:d7:0d:64:09:f2:
15:a3:f6:f4:12:15:2b:94:1f:79:0b:ed:ea:45:42:
95:a0:36:8a:f5:4b:e9:bc:3b:fb:b7:f4:15:7b:4f:
84:ba:7f:01:d5:5e:de:80:a8:b3:af:dc:b2:64:4f:
85:ef:bc:d3:80:cc:77:05:7e:21:fb:bb:d2:92:40:
c9:6b:e8:be:34:44:57:c8:5e:6d:79:de:9b:c5:ad:
05:b5:c0:29:22:51:9d:54:f4:ea:ab:12:ef:27:20:
52:5c:db:7e:37:9f:20:74:71:21:8a:bf:7b:16:8a:
c1:3d:c4:17:b9:83:32:df:40:14:32:c3:70:f4:4d:
29:3c:45:cc:3a:fc:5e:cc:bd:67:f9:6c:af:d9:9c:
f7:3a:30:cf:ef:fa:c8:eb:c8:61:3e:01:2b:57:74:
ed:65:8a:21:2b:79:83:99:3f:a7:af:2d:d8:17:9f:
77:c0:cd:0f:f2:4c:87:2d:97:b3:f7:3b:c7:5f:9a:
8b:cf:14:7e:ed:c1:23:f6:e5:3b:be:ea:53:68:fe:
fd:c8:f1:91:49:ac:69:4c:64:51:55:88:9a:c9:a9:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:9F:DF:1A:72:6B:5B:4F:B9:2B:23:64:4F:24:44:9D:D1:50:B8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RUif3xpya1tPuSsjZE8kRJ3RULg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.140.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c2:3a:b8:2f:ea:45:6a:fb:7e:70:9c:60:01:c7:c5:c2:ba:
d9:2a:eb:5b:7f:df:0e:b9:03:e3:9f:9c:04:00:30:e1:37:57:
19:17:ed:31:d6:f2:d6:bd:f2:ee:f6:1b:9d:38:76:32:2e:fb:
3f:37:72:e7:2e:c3:79:77:80:50:30:1e:8a:30:87:e7:0f:85:
0a:19:86:24:49:03:f0:a6:84:d2:21:19:76:0b:3a:c1:6c:60:
41:d1:64:40:b8:fe:bf:30:63:55:c8:f4:26:16:43:c5:fa:28:
77:fd:63:6f:d3:bf:23:b9:f0:53:37:ba:8e:14:13:c9:77:2f:
ba:d4:15:dd:39:10:93:bf:f6:07:37:b8:26:5b:21:b2:3f:45:
b8:3e:0e:d6:8a:7f:b7:90:f5:d0:50:f8:de:44:51:34:af:d9:
98:17:73:f4:4f:0c:c7:d0:26:b6:4e:aa:95:ac:22:e6:f1:34:
66:43:cc:03:e6:94:9e:2b:2e:2c:95:79:aa:72:e1:05:9c:02:
b9:7d:31:29:6e:cc:13:5d:dd:53:0e:48:b5:73:d3:d0:78:ec:
fd:04:37:d0:b6:3f:be:d3:07:5d:83:23:8e:6b:b2:40:ea:6e:
05:25:84:08:f5:b8:1b:30:65:02:d5:fb:4b:e8:e5:37:6e:da:
66:26:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:47 2025 by rpki-client