Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UqKXEBNNaegCKBqsB6FAePWG41Q.roa
File: UqKXEBNNaegCKBqsB6FAePWG41Q.roa (raw, json)
Hash identifier: pHpHWfCyhD3RcT8bH7jhfsJzGmC31hOHQLrui/Ep3AY=
Subject key identifier: 52:A2:97:10:13:4D:69:E8:02:28:1A:AC:07:A1:40:78:F5:86:E3:54
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D46
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UqKXEBNNaegCKBqsB6FAePWG41Q.roa
Signing time: Thu 14 Jan 2021 07:32:43 +0000
ROA not before: Thu 14 Jan 2021 07:32:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3398 (0xd46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:32:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=52A29710134D69E802281AAC07A14078F586E354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:31:1d:f8:81:b8:49:26:bb:da:37:7a:18:
12:2d:df:13:0c:d7:4a:50:80:c4:fb:e3:6a:b6:ec:
04:ec:0c:64:40:4c:a5:37:53:7e:9e:89:92:02:d4:
f9:c6:25:7d:4b:13:93:3d:c2:4a:a7:c1:30:5d:5d:
14:a3:1e:db:ff:2f:74:df:08:39:29:3a:7e:4c:65:
d9:ad:e8:1a:67:ff:0e:f8:a1:7c:3f:4c:8e:e7:29:
26:bd:df:48:02:30:3d:d9:b1:02:d4:a8:5d:01:47:
03:2b:79:8c:31:be:85:d9:6f:b6:77:bb:9b:ac:94:
23:db:f7:b8:27:5b:52:fd:89:d6:6b:ed:fb:49:94:
6e:f4:6e:18:13:df:69:74:cc:ff:2e:b1:e9:db:6f:
84:f8:e9:bf:21:50:cb:14:4a:aa:9a:85:6f:f9:8f:
70:98:41:6f:62:89:7d:46:35:33:d9:29:0b:6e:90:
8f:90:25:99:86:84:18:e9:5c:1f:2d:97:df:cc:34:
35:cd:89:a5:fc:c6:8d:7c:f9:0a:0e:0d:48:aa:17:
6d:66:10:16:a3:08:65:d3:52:f4:b4:4b:95:e9:38:
e1:af:06:4e:5f:3b:06:85:38:ab:5b:ec:be:87:64:
d8:48:37:21:7d:fe:3f:7c:db:3b:d0:53:00:61:7d:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:97:10:13:4D:69:E8:02:28:1A:AC:07:A1:40:78:F5:86:E3:54
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UqKXEBNNaegCKBqsB6FAePWG41Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7e:43:db:12:30:96:98:08:92:2e:fe:5e:00:61:88:b0:9e:
a3:23:2e:cf:3a:6a:82:98:72:e5:ef:d1:26:e7:78:04:62:04:
ff:63:3d:18:2e:98:60:c9:08:c3:42:d3:91:79:6b:b8:64:e2:
97:35:28:0d:6a:9d:8b:25:f6:46:1d:38:09:0f:82:84:54:f6:
7a:db:a1:e8:0b:fe:9c:e3:25:b4:6e:55:12:5e:fd:02:e1:6b:
0e:3e:ea:41:1f:7f:49:19:de:78:e2:ed:dd:8b:78:d9:2e:36:
93:fc:18:44:e0:b9:91:e8:78:2e:d1:cb:dc:89:42:22:39:6a:
78:7c:32:1d:18:67:04:41:75:01:96:35:3a:46:32:d5:14:f0:
5e:37:b7:c0:d0:77:58:b3:17:fc:59:2a:4a:79:43:75:11:65:
95:d3:1e:26:04:e5:63:57:9c:ad:29:2c:b0:a5:a9:6f:71:79:
c3:6d:c7:3c:a0:99:7a:2a:56:31:27:b9:57:b3:2c:f4:0d:87:
b0:da:22:6e:59:99:2a:b2:d5:71:10:34:05:f5:2c:f4:9f:ab:
99:d8:29:d4:a3:70:32:d6:ba:fb:8c:14:96:e5:d2:58:9b:29:
f8:60:f1:34:3e:c0:ec:32:dc:37:5a:64:fa:eb:ce:93:e5:1c:
c6:60:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:37 2023 by rpki-client on console-ams.rpki-client.org