Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_SAlLMp-fatlKEcnDfN5tcGmS78.roa
File: _SAlLMp-fatlKEcnDfN5tcGmS78.roa (raw, json)
Hash identifier: uCv0gSAEM+X16Ziprc+SJFxzL8MBWF6SGxbEtgeN23M=
Subject key identifier: FD:20:25:2C:CA:7E:7D:AB:65:28:47:27:0D:F3:79:B5:C1:A6:4B:BF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18EB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_SAlLMp-fatlKEcnDfN5tcGmS78.roa
Signing time: Sat 22 Oct 2022 06:05:52 +0000
ROA not before: Sat 22 Oct 2022 06:05:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6379 (0x18eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FD20252CCA7E7DAB652847270DF379B5C1A64BBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:f7:a0:cd:db:23:db:14:89:6d:ff:90:ab:
9e:b3:b7:46:c4:34:98:08:d6:1d:69:5d:8b:57:08:
96:51:5e:67:4f:22:9a:44:3b:5a:82:ac:9b:87:0c:
be:47:d3:13:8b:de:07:4c:72:99:97:6e:e9:9c:6f:
6c:dd:1c:ea:5d:fe:a6:a9:eb:bc:46:f0:2d:67:84:
2c:23:86:eb:cc:ad:8d:45:95:38:e9:57:4d:24:0a:
71:b4:ad:88:08:52:12:0f:1a:0f:42:4a:fa:86:4e:
f3:7a:06:1b:48:4b:20:18:1b:62:9f:8c:4c:c8:47:
98:73:90:b4:78:37:13:07:86:88:3a:32:d8:ba:82:
ea:88:a7:68:1e:d8:95:52:46:a4:58:53:92:8e:d8:
a1:85:7a:61:c4:e4:15:f6:83:17:1a:ba:0a:3c:f3:
51:61:b6:05:86:4a:5a:8c:51:a0:f0:6d:a7:34:59:
48:98:54:24:29:d1:a6:b9:2c:2d:7c:c6:6b:fe:03:
4a:eb:01:d4:91:c2:99:9d:ba:1f:0c:92:14:6e:d4:
c6:4f:7b:95:59:e9:b6:be:3e:d7:13:39:85:77:b1:
3a:12:c0:c6:d9:6b:6e:56:10:54:5a:14:6c:1f:08:
bc:7f:57:89:bf:58:80:a0:b3:50:87:04:c5:cb:84:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:20:25:2C:CA:7E:7D:AB:65:28:47:27:0D:F3:79:B5:C1:A6:4B:BF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_SAlLMp-fatlKEcnDfN5tcGmS78.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.156.0/22
Signature Algorithm: sha256WithRSAEncryption
59:4b:f7:e4:89:58:57:80:df:eb:66:7c:63:aa:51:63:46:d4:
ab:2f:68:c5:f9:5b:ca:2d:2b:1f:7d:a6:9e:11:45:dc:df:ca:
df:5d:c4:ff:09:cf:af:b0:cf:11:c9:3c:42:a7:a7:6b:89:df:
47:78:de:00:bd:e6:90:c2:53:78:b4:9c:35:8b:ae:eb:64:5a:
6b:36:2f:49:a4:ce:a7:95:92:5c:ee:bf:1f:fc:52:26:92:be:
d7:30:4a:f7:aa:ab:96:bf:be:49:4e:1e:57:9b:61:48:f5:8f:
32:9a:f8:53:c7:93:85:c6:cc:ec:21:1c:38:47:9c:c1:13:9a:
7f:4c:4a:87:8b:6e:90:49:fe:f7:b7:85:03:0a:d1:58:0a:c9:
da:19:6f:e9:42:0a:ee:2c:e0:bd:65:84:cb:01:a9:e2:06:b0:
65:8e:c6:4d:84:29:e1:87:43:a7:2b:b1:d8:ba:4d:77:07:86:
5e:2e:81:0f:7b:45:9f:21:b3:16:6f:8d:02:59:e2:74:0f:25:
94:87:b6:0d:bc:2f:db:26:9f:53:82:be:f4:66:fb:0d:ef:cc:
21:fe:77:24:d6:d6:7d:34:b3:2f:ca:00:9f:07:82:2e:e7:9e:
53:44:ec:1e:d1:34:87:1c:8d:78:f6:c0:7b:b5:d9:dc:1c:e4:
cc:a8:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org