Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ShuRwyYVoO_HZ8Bxrfi4W4K9j4s.roa
File: ShuRwyYVoO_HZ8Bxrfi4W4K9j4s.roa (raw, json)
Hash identifier: tSGSsMgPlWVmnzXveIFOFqPyqb1qe/UJSIX1dFP83Ow=
Subject key identifier: 4A:1B:91:C3:26:15:A0:EF:C7:67:C0:71:AD:F8:B8:5B:82:BD:8F:8B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ShuRwyYVoO_HZ8Bxrfi4W4K9j4s.roa
Signing time: Thu 15 Sep 2022 02:36:29 +0000
ROA not before: Thu 15 Sep 2022 02:36:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4A1B91C32615A0EFC767C071ADF8B85B82BD8F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:8c:09:b4:24:1d:f3:28:02:9c:75:7f:cf:
d3:d9:94:a3:ab:4f:96:8d:b8:a1:9f:f6:fb:48:47:
7e:30:ac:a6:50:5f:c3:a0:2d:7b:32:3a:f1:c5:6a:
9d:6c:ee:69:e1:f7:d2:05:fd:ed:30:b1:c9:65:c1:
95:cb:ce:06:14:8f:33:13:c8:1d:b8:d1:0a:30:b7:
40:67:ce:74:49:10:2d:8a:b3:3b:bd:5c:73:aa:21:
36:b9:7c:11:50:5b:fd:72:18:4f:d1:b4:6b:19:49:
a1:2a:a0:b1:50:ff:45:3f:3c:21:90:5d:f8:94:89:
ca:8a:3a:88:0c:72:7e:01:3d:d3:12:c0:ad:23:ea:
d1:b7:0d:09:8a:71:87:ed:3f:03:46:68:ca:0c:b6:
19:4b:c8:13:2f:90:6e:83:3d:41:33:25:3f:48:02:
0a:65:57:c1:44:c7:40:22:a5:f9:33:47:3a:fa:42:
77:eb:ac:97:e2:d8:53:8f:f2:4b:87:d7:58:56:f5:
cb:46:2d:23:14:d3:18:f1:87:7f:6b:7e:03:cc:b3:
79:64:a0:3f:d3:01:d1:13:9f:60:ed:1b:39:e7:20:
03:92:8a:ea:85:c3:f5:e1:e0:b8:07:7d:04:5f:d2:
d0:bf:77:ea:d5:03:12:5c:38:f4:35:68:ae:50:cc:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:91:C3:26:15:A0:EF:C7:67:C0:71:AD:F8:B8:5B:82:BD:8F:8B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ShuRwyYVoO_HZ8Bxrfi4W4K9j4s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.48.0/21
Signature Algorithm: sha256WithRSAEncryption
25:5b:31:cb:5b:d5:af:b3:81:3e:3c:92:88:9e:20:f9:cd:da:
80:9b:22:f7:d2:b6:da:39:8c:5a:a0:ab:7c:aa:db:40:c9:7e:
cd:4d:eb:ee:6d:c9:24:2f:6f:c3:7e:40:06:ec:62:6b:01:b5:
e5:dc:07:ed:b2:54:19:43:ba:a9:62:5a:56:2a:9e:91:eb:df:
79:13:5e:f6:d1:af:78:34:97:87:cd:6f:18:8d:fc:c9:e9:bf:
0e:9c:1d:5c:97:f0:da:ba:f3:0e:6a:7f:34:7f:ca:10:13:7e:
3a:a6:4c:5c:0a:a5:b0:c3:27:c9:12:cc:7a:54:0f:eb:26:68:
95:fc:23:a8:a1:f0:75:26:77:2c:60:02:8f:bd:e4:13:40:aa:
da:48:44:5d:f0:3c:6f:4a:1e:64:c7:1f:6f:88:bf:68:c8:6d:
fb:07:6f:62:7f:ca:1f:1b:66:11:42:64:04:f8:4a:f2:a8:af:
18:52:3b:d7:90:79:de:91:f8:f6:73:43:f3:bc:a4:96:f9:c4:
55:21:6f:4a:cb:01:64:0b:f4:29:86:ef:28:62:b6:4a:3a:57:
69:7e:c8:22:ec:5b:0c:92:d3:25:fa:76:63:96:b4:72:88:e1:
39:dd:26:67:2b:9c:96:ce:c9:e2:01:db:00:93:d9:a4:a2:fb:
34:e6:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org