Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zq9tCv5vSt-RhD6NSX8VM1KI_as.roa
File: Zq9tCv5vSt-RhD6NSX8VM1KI_as.roa (raw, json)
Hash identifier: u7Rz4CumONAMykmHqKA484eOd4bqRj/zs7hMiUlj5ko=
Subject key identifier: 66:AF:6D:0A:FE:6F:4A:DF:91:84:3E:8D:49:7F:15:33:52:88:FD:AB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1989
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zq9tCv5vSt-RhD6NSX8VM1KI_as.roa
Signing time: Sat 22 Oct 2022 06:06:39 +0000
ROA not before: Sat 22 Oct 2022 06:06:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6537 (0x1989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=66AF6D0AFE6F4ADF91843E8D497F15335288FDAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:1e:1a:e1:6e:e2:47:c1:ce:86:6e:c7:d5:
5a:04:3c:d9:92:20:45:fd:02:23:0d:8d:9a:ca:19:
ed:1e:e2:26:0b:e0:6c:6e:b8:2f:eb:07:d8:fb:06:
1b:74:39:cf:3c:3e:f3:b5:20:bc:75:5d:36:8d:e3:
e1:83:1d:6e:c7:f5:3a:37:66:15:a8:5d:74:c8:c4:
be:be:da:3c:17:99:aa:4f:e8:c7:0f:d7:9e:68:6e:
f8:93:42:3f:16:fb:ba:8a:be:9a:97:61:90:1f:b7:
09:b4:7e:99:16:eb:b4:bc:45:3e:12:82:28:14:33:
9b:df:f1:31:ad:53:9f:93:5a:e8:8a:e6:d3:c3:6c:
af:90:d2:e4:5a:d6:f2:b9:d5:46:a7:ed:46:66:e3:
69:40:1a:93:a5:60:4b:09:17:14:40:f8:d8:27:cc:
f2:c2:69:26:c3:8b:51:7b:65:f3:4f:99:2e:a2:99:
43:ef:60:31:34:ea:4b:c0:97:23:32:d4:87:42:c5:
7d:6e:10:46:aa:77:9f:3a:45:d7:8f:aa:d8:9b:b6:
fc:7c:a0:cf:dd:c2:e4:71:90:aa:89:9c:37:30:55:
8f:2e:00:3e:41:39:6e:cb:7c:7b:70:c3:3c:73:f2:
f2:43:47:bb:e1:c1:a5:8e:14:22:be:b7:22:64:42:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AF:6D:0A:FE:6F:4A:DF:91:84:3E:8D:49:7F:15:33:52:88:FD:AB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zq9tCv5vSt-RhD6NSX8VM1KI_as.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.124.0/22
Signature Algorithm: sha256WithRSAEncryption
16:fd:06:07:65:a3:75:64:7a:02:28:c4:d1:6e:f0:5a:ba:87:
19:26:17:a6:bd:a5:32:c9:9f:ab:1c:fe:e0:e7:45:5a:37:21:
8e:72:67:af:c8:63:d8:63:49:a6:3f:d9:42:b7:10:1f:18:a9:
79:bf:09:fa:0e:57:2c:9e:cd:2e:43:30:c0:f5:f0:c4:ac:77:
3b:22:24:71:b9:63:c2:ff:7c:51:76:ad:17:27:69:5c:7e:43:
62:f6:f9:84:fb:13:27:58:3e:90:48:58:e6:67:b5:0a:b0:dc:
15:a2:1a:72:8b:84:2f:21:40:3b:0a:9e:21:3d:00:e5:2f:b2:
43:4c:fc:e7:99:9e:84:91:e5:c6:fb:55:96:ac:09:9a:30:1c:
12:6d:c9:4a:66:71:43:5f:b1:77:e3:01:0a:0d:ec:f8:29:39:
c2:b7:9f:eb:39:ab:20:ed:b1:96:27:85:fc:c9:5e:93:6c:79:
f3:eb:9c:55:87:9d:a1:92:f8:9f:bb:08:08:b2:80:da:bd:15:
c9:cf:56:86:01:34:db:e4:7f:45:30:ff:fd:70:76:38:82:5d:
8a:ac:e0:59:fa:2c:1f:ef:a1:35:90:ab:c7:68:8a:c3:a5:93:
b5:20:20:f7:92:49:0c:57:6e:2b:7e:36:a1:42:af:e4:e9:b3:
25:8d:77:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org