Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RWOX-SuGmc2y-5OzW-EGbqlkU4o.roa
File: RWOX-SuGmc2y-5OzW-EGbqlkU4o.roa (raw, json)
Hash identifier: dca/RD0tn7rgFKh39dpD3eT0l2YAAj1WJNfU16WXw00=
Subject key identifier: 45:63:97:F9:2B:86:99:CD:B2:FB:93:B3:5B:E1:06:6E:A9:64:53:8A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1302
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RWOX-SuGmc2y-5OzW-EGbqlkU4o.roa
Signing time: Wed 29 Sep 2021 02:55:15 +0000
ROA not before: Wed 29 Sep 2021 02:55:15 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4866 (0x1302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:15 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=456397F92B8699CDB2FB93B35BE1066EA964538A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:90:b0:99:ba:54:64:b5:54:08:28:e4:c6:
bc:9b:3b:a0:50:d6:2e:fe:20:fa:e0:fe:4c:89:14:
0e:57:7e:19:ec:de:dd:cb:bb:8b:52:b5:70:d6:07:
70:21:64:13:5b:f1:e2:b6:76:3a:a1:91:f4:15:83:
57:9d:8e:fc:ff:d1:f2:6b:1f:85:27:9b:38:53:cc:
cd:0d:38:3b:e7:72:9a:74:27:c8:dc:47:e7:df:57:
85:be:fe:2d:71:cd:e2:69:13:1d:62:66:0e:8f:d3:
b6:9a:99:8d:32:60:07:7f:de:dc:27:55:e6:03:e3:
59:f8:b4:18:5f:29:80:92:5b:9c:d1:16:60:43:9b:
32:bd:21:03:9b:78:85:b8:47:f5:db:d3:07:e4:64:
e3:18:63:e8:27:18:64:b4:df:58:b9:5d:ab:ee:05:
8d:99:55:3a:79:83:1d:10:50:1b:1c:6e:df:68:16:
78:a4:f6:64:1c:9c:86:36:53:cd:5d:c2:cd:7c:f9:
36:d5:3b:f4:f1:1f:75:20:fc:a5:c1:14:e4:00:5b:
64:af:60:cd:29:f0:11:a1:fc:82:a7:3c:48:3b:43:
e0:1d:1c:70:05:51:fe:14:da:f1:1e:b3:6f:b8:ec:
31:13:2e:e0:4b:8b:5f:cc:a0:ee:91:5c:90:1a:0f:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:97:F9:2B:86:99:CD:B2:FB:93:B3:5B:E1:06:6E:A9:64:53:8A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RWOX-SuGmc2y-5OzW-EGbqlkU4o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:03:5c:b1:20:b5:f3:b9:d8:57:ee:ab:d7:69:d6:65:7e:09:
e2:07:8d:27:10:13:45:95:f6:07:56:c2:22:02:cc:f5:2e:60:
94:ae:e7:4c:7b:02:ab:e8:33:95:6a:93:c7:f2:46:48:0a:77:
7c:f5:05:ed:70:cf:6d:99:fd:ca:15:eb:47:2c:e7:75:b4:10:
2d:10:fc:22:c3:18:aa:3e:48:d4:ed:b2:33:8c:af:a2:18:93:
f2:9a:54:9d:6c:d0:ce:f9:b3:a5:b6:ae:c6:f2:2c:7a:b2:5a:
66:f6:99:b3:20:36:49:40:a6:1e:11:d0:cd:8c:75:80:b9:1d:
a3:74:d1:3d:be:a1:35:ba:96:19:17:10:2a:42:14:c5:9a:77:
99:00:fc:1e:73:c7:78:d6:ab:1a:65:ad:9f:3e:20:bf:3f:54:
35:93:3e:db:89:81:c6:fa:ce:75:b0:66:5e:fa:57:19:56:ea:
f7:6a:7e:2b:24:e5:fe:30:24:d5:cf:d6:ca:11:68:66:a4:04:
5b:8a:4e:c8:2a:8a:60:8e:5a:f5:71:cb:6a:9b:a8:59:5c:88:
4b:c2:4b:5f:47:c0:6c:6a:e2:b4:63:60:07:1b:ba:75:4d:8f:
9a:45:59:e9:70:07:b1:4e:e5:78:29:75:f5:5e:ba:1a:8d:1b:
81:45:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-fra.rpki-client.org