Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZLBmJ0ZGJf3CcJ0xNyLoCcFiMz0.roa
File: ZLBmJ0ZGJf3CcJ0xNyLoCcFiMz0.roa (raw, json)
Hash identifier: 7s4jYLpV0nvq9cTPwAHor/p+9tJXGQZZP92RJK0+yzM=
Subject key identifier: 64:B0:66:27:46:46:25:FD:C2:70:9D:31:37:22:E8:09:C1:62:33:3D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZLBmJ0ZGJf3CcJ0xNyLoCcFiMz0.roa
Signing time: Thu 15 Sep 2022 02:35:47 +0000
ROA not before: Thu 15 Sep 2022 02:35:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=64B06627464625FDC2709D313722E809C162333D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:54:7f:5b:ce:b4:a2:9a:a6:3d:f3:33:42:
07:c0:85:6b:83:f0:d0:d2:f4:e3:6e:6d:8d:e9:ab:
90:ef:8d:b9:9a:ab:24:d7:4d:20:d9:60:4a:65:74:
fa:ac:7d:61:04:ec:27:06:ae:09:80:09:9e:c8:8d:
c3:f5:75:19:4d:4b:ca:5a:d3:0f:0f:d6:28:f0:01:
b7:b9:4a:89:92:7f:fb:9d:79:e9:da:2b:57:ac:08:
b5:3e:f5:24:9e:87:aa:58:35:fa:23:81:57:21:3d:
9a:89:18:6b:a7:66:a3:4c:da:29:ca:1b:fa:ea:88:
3b:85:a8:a9:35:7a:3d:5f:a9:24:61:86:66:e2:ec:
9c:35:3a:59:31:4b:62:00:dc:37:84:2a:93:3e:85:
6b:e1:f5:12:f5:fa:8f:86:fa:d1:d9:e1:6e:54:ee:
b4:d1:51:0d:af:62:97:b8:73:b1:a0:d0:27:d8:ae:
df:92:40:70:0d:b2:46:cd:22:45:74:c9:63:e9:01:
8b:fa:0f:38:79:eb:1c:71:df:68:e1:f1:6f:0a:0a:
05:ff:f0:91:34:03:4c:83:a0:40:fe:3a:cc:9c:04:
42:92:02:83:47:bb:83:fb:54:40:0e:0c:61:35:68:
0b:69:7c:be:6d:fd:85:94:99:1c:83:4b:ac:8b:66:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:66:27:46:46:25:FD:C2:70:9D:31:37:22:E8:09:C1:62:33:3D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZLBmJ0ZGJf3CcJ0xNyLoCcFiMz0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.133.0/24
Signature Algorithm: sha256WithRSAEncryption
52:86:10:c7:e7:8e:9f:49:cb:6b:7b:82:08:2a:36:cc:4e:9d:
b9:91:58:db:9d:d3:a8:69:96:66:a7:3d:aa:ac:3c:8b:34:2a:
aa:97:ef:5d:31:2b:c8:39:d4:45:a0:b1:77:d3:c7:64:d9:01:
80:b2:1a:72:9c:57:ad:f5:c2:98:57:ce:10:68:58:69:74:9e:
ff:94:9a:40:e3:31:a0:99:0c:05:fa:c7:37:28:a5:53:bb:fa:
9c:87:91:e9:c2:d2:88:d6:97:c0:00:96:df:6f:a9:2a:53:d3:
b8:48:c0:b2:55:15:21:41:d8:5b:5c:e5:2f:f6:b7:0a:99:8c:
62:ea:f4:35:28:ec:5c:f8:56:71:da:db:f5:be:9d:f0:48:7c:
ed:36:79:ee:c3:47:54:11:84:16:9f:ce:8d:ba:70:80:c6:0b:
45:6e:17:1f:a3:97:4c:4d:ec:9a:a2:b4:86:c5:21:b1:6b:fc:
13:10:73:ab:e2:1d:24:7f:bc:c7:90:68:c6:a6:05:98:02:21:
8d:81:90:9d:88:da:2e:4b:03:9e:22:13:af:e0:63:d4:0b:c5:
91:5d:e8:aa:e4:29:ff:43:a3:7d:62:6b:86:ac:ba:3c:2b:a2:
37:24:d8:10:45:74:b4:d3:7d:9a:47:14:df:4b:2a:22:1e:59:
07:c8:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org