Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XjXy60q3t3S7n8SBuRLLoEvYRtI.roa
File: XjXy60q3t3S7n8SBuRLLoEvYRtI.roa (raw, json)
Hash identifier: LPCAqYukEb85SupK7DclMD/ctVseEysrCDaXKDVd2hY=
Subject key identifier: 5E:35:F2:EB:4A:B7:B7:74:BB:9F:C4:81:B9:12:CB:A0:4B:D8:46:D2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18DE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XjXy60q3t3S7n8SBuRLLoEvYRtI.roa
Signing time: Sat 22 Oct 2022 06:05:49 +0000
ROA not before: Sat 22 Oct 2022 06:05:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6366 (0x18de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5E35F2EB4AB7B774BB9FC481B912CBA04BD846D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:4a:66:3e:81:eb:81:64:ec:98:cc:08:b9:
ce:53:06:53:a9:83:72:79:10:c9:87:d6:68:14:81:
35:9c:d3:23:91:7b:c0:62:d6:73:01:13:07:d0:1c:
22:aa:02:d9:a4:a8:e7:9b:76:a3:1a:08:39:58:bf:
df:63:ac:45:9c:30:6a:d2:38:23:fb:b7:46:98:e7:
a0:c8:96:97:5b:6b:8e:c9:53:79:4b:55:1a:67:09:
e0:7b:64:9d:a1:46:91:ea:cf:2b:b6:d9:6f:dd:da:
1c:f1:54:d2:19:b7:ff:5c:12:43:76:5a:51:5d:7c:
2c:c3:6d:14:be:db:71:2e:c7:53:69:64:f5:93:03:
1b:a2:84:ca:b8:90:a3:19:2e:87:6b:48:f8:d0:24:
3e:8d:7c:b8:e6:f3:85:6c:06:01:0c:59:54:eb:dd:
03:f7:f1:23:00:5d:f2:20:bb:64:f2:90:ab:55:2d:
7f:1c:3e:21:66:6a:8a:71:96:aa:47:da:4e:fa:7a:
1f:93:b9:70:f8:87:26:e1:e4:a9:94:a4:f1:73:86:
9e:7c:46:1c:f5:14:50:82:e2:73:33:18:71:67:29:
55:6a:78:af:9b:3f:e7:0b:c6:94:b1:be:b7:ce:95:
b5:bc:85:52:49:62:fa:8e:6d:61:2d:84:c0:58:82:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:F2:EB:4A:B7:B7:74:BB:9F:C4:81:B9:12:CB:A0:4B:D8:46:D2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XjXy60q3t3S7n8SBuRLLoEvYRtI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.216.0/22
Signature Algorithm: sha256WithRSAEncryption
39:95:ae:44:54:ec:0b:8d:b8:25:55:5b:c6:68:14:4a:4d:f9:
60:7a:e1:b4:6e:b2:0e:fe:d2:c8:74:ad:95:9b:a9:fb:a2:d7:
bd:28:1d:38:72:30:e1:e7:90:bd:48:bc:c4:58:dc:6c:27:45:
5e:82:b4:6b:54:bc:65:28:fc:dd:8c:1b:a9:de:c8:b0:ca:dd:
86:83:85:35:96:c8:22:87:e3:55:6c:0b:06:04:54:a8:ed:0b:
dc:c1:d0:bf:e4:dd:6c:e8:7f:83:c8:7b:86:0f:17:75:ad:ac:
6b:fd:38:17:a8:8f:08:1f:63:1a:b0:5c:dd:49:18:3a:88:ca:
2a:70:e9:3a:d5:2f:42:2d:d8:2a:5e:1b:92:c8:ca:f9:43:56:
01:84:90:71:14:94:84:d6:1d:19:63:0a:da:1a:cd:da:9d:95:
86:b9:17:1b:5a:67:c9:3d:c2:81:84:50:a2:b0:3c:5b:0f:e1:
4c:3c:44:e6:76:ec:c9:d9:84:4a:45:41:56:2c:a6:82:c6:40:
e9:c4:8b:6b:8a:b2:79:51:3e:26:92:bf:0c:5f:c8:80:56:cd:
4b:e7:6b:92:f4:e8:9b:06:57:9e:41:2e:59:a6:c1:62:2c:a5:
71:a7:97:6f:45:b6:f2:af:67:9b:19:e5:7b:8a:00:54:51:3a:
df:cc:62:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org