Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBBs06U-AsejY3PT70L8egBTOZc.roa
File: dBBs06U-AsejY3PT70L8egBTOZc.roa (raw, json)
Hash identifier: mJE0QIh7jMf78b9Mgne7S+d0kZrGP/4JELXJSFMivSU=
Subject key identifier: 74:10:6C:D3:A5:3E:02:C7:A3:63:73:D3:EF:42:FC:7A:00:53:39:97
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1359
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBBs06U-AsejY3PT70L8egBTOZc.roa
Signing time: Wed 29 Sep 2021 02:55:40 +0000
ROA not before: Wed 29 Sep 2021 02:55:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 180.218.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4953 (0x1359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=74106CD3A53E02C7A36373D3EF42FC7A00533997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:38:3a:44:3c:3e:b3:79:ac:3d:b1:4c:ff:
43:71:44:2f:e6:fe:39:19:4b:a1:1f:68:20:4a:0c:
73:06:59:67:a4:42:3b:37:df:ae:07:b4:39:94:d5:
56:32:4d:16:19:20:30:45:a7:03:13:60:fe:6e:10:
a7:8b:2b:96:dd:a7:da:98:9d:d1:b9:a3:ae:7b:7c:
f4:89:b2:cb:74:43:77:0c:e4:32:a8:1a:13:2d:08:
3b:5b:7c:ed:2b:4a:08:59:e7:2e:53:45:78:dc:b1:
f7:94:49:c3:cc:bd:d0:0f:c6:bb:a8:0d:59:b2:69:
9a:62:41:fc:74:52:17:79:65:10:9a:b8:67:c1:19:
c5:00:7c:8d:a4:72:55:0d:ee:7b:05:e4:fc:c2:f4:
54:6a:b3:c2:b7:b6:ba:2b:9b:b1:03:ab:c9:16:18:
19:23:7f:42:76:f2:35:b9:0f:8a:52:52:00:ac:52:
3c:f3:f8:46:34:37:d7:48:32:34:38:07:aa:84:03:
4c:7d:29:9f:b8:d9:98:a8:92:cb:03:36:4f:5a:98:
23:16:76:a4:13:88:c6:6f:70:90:16:eb:5c:6b:9c:
9d:83:c5:f9:5c:c4:0c:b2:4a:6b:9d:4b:ed:3f:29:
00:b9:37:62:62:5c:62:cf:95:9f:fa:48:d1:8d:2c:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:10:6C:D3:A5:3E:02:C7:A3:63:73:D3:EF:42:FC:7A:00:53:39:97
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBBs06U-AsejY3PT70L8egBTOZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.124.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d7:41:21:3b:e6:21:c3:e7:28:48:53:70:2e:84:ea:38:c8:
ce:c1:83:05:be:d4:72:b9:04:ce:d0:72:6f:32:7f:ff:72:6f:
a2:0c:ab:71:26:f0:69:90:1a:d8:d1:66:87:5d:d6:c6:97:4c:
e0:42:07:2f:ff:ae:c8:48:12:5a:87:25:d7:9e:a6:91:2e:af:
eb:74:79:2c:c5:7e:d5:d5:3e:4a:db:fd:02:82:d6:76:7b:4e:
16:2a:63:22:ce:51:13:02:ba:7c:18:62:24:34:8e:77:de:93:
32:70:7a:4b:00:4b:8d:df:1a:2f:c7:3f:fc:38:b1:d6:3f:9f:
3d:84:b6:55:b2:49:fd:bf:e3:13:be:1f:68:60:35:e4:0a:e5:
b5:d2:1c:ca:04:29:6a:c5:6c:01:2c:7e:12:ca:0a:95:ea:f1:
71:c6:28:d0:4e:0b:24:f7:59:08:55:01:f4:ed:33:fe:17:b5:
cb:dc:b3:52:11:97:62:60:01:9a:31:35:47:d9:f5:1c:71:cb:
73:47:bb:80:fa:97:5c:2b:0a:05:b7:cf:bd:c6:1b:77:91:64:
17:39:07:12:6a:9e:ad:f5:c5:21:f1:c5:f7:a7:e6:99:23:af:
31:42:a2:96:77:76:7b:54:74:5b:81:f8:5d:54:34:69:14:94:
6f:b8:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org