Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpNdVvO6g1BKG1d854pq40cvwj0.roa
File: mpNdVvO6g1BKG1d854pq40cvwj0.roa (raw, json)
Hash identifier: 1U9zyX2w62lopRx8DJwZYKlA3JQU1OtGyMg2WIm1lu4=
Subject key identifier: 9A:93:5D:56:F3:BA:83:50:4A:1B:57:7C:E7:8A:6A:E3:47:2F:C2:3D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpNdVvO6g1BKG1d854pq40cvwj0.roa
Signing time: Thu 15 Sep 2022 02:36:44 +0000
ROA not before: Thu 15 Sep 2022 02:36:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9A935D56F3BA83504A1B577CE78A6AE3472FC23D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:dc:1b:6f:e6:62:94:fd:d6:8f:e7:07:e0:
68:d6:79:10:6c:ab:65:5b:94:14:0c:32:00:0d:d6:
5d:d3:3d:7e:07:4a:c0:f1:0c:ce:d5:ab:62:81:90:
6c:7a:19:f3:4d:f9:f2:0a:43:94:c3:d4:ad:22:b3:
b8:9b:01:fd:69:d8:a6:da:43:08:d9:56:2f:a3:a3:
d9:b5:73:21:d4:5c:b1:ed:5e:d6:ff:85:a7:e8:91:
75:2a:d7:16:40:1e:72:7d:f4:51:3e:f5:6e:cd:ff:
20:b1:78:6c:3c:ad:a5:33:38:44:22:1c:97:ab:a1:
09:c6:b4:7f:b1:af:eb:43:0b:eb:75:53:81:81:2c:
5a:ed:b8:a8:80:41:70:ab:73:af:bc:3e:fd:eb:5e:
fb:87:f0:28:1c:81:4e:a1:45:9e:ce:72:61:a6:03:
c1:de:20:37:af:f3:42:ff:60:02:da:8e:df:04:83:
1f:7e:82:b8:e8:ba:1f:33:8a:65:50:ad:e9:88:74:
71:81:35:f3:ef:a1:3f:fa:a3:43:ee:ba:45:cc:82:
80:8a:d9:6f:9a:9d:e7:60:c6:bd:27:af:29:f2:c1:
43:7d:c2:65:3e:23:80:f0:f0:0b:c3:9c:ea:ac:ad:
c4:bc:1b:45:69:80:a0:f6:0e:79:c7:9e:82:f4:91:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:93:5D:56:F3:BA:83:50:4A:1B:57:7C:E7:8A:6A:E3:47:2F:C2:3D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpNdVvO6g1BKG1d854pq40cvwj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.88.0/22
Signature Algorithm: sha256WithRSAEncryption
99:80:41:df:80:33:61:c7:6e:da:ca:d5:46:04:d2:d6:bd:66:
71:87:48:4c:26:d1:4f:53:a9:50:5c:a5:91:4e:ec:76:96:53:
0c:7d:89:ae:4b:d3:c5:94:08:a3:62:48:ea:04:37:56:d0:11:
20:e8:96:d3:0c:cf:5b:bd:13:fa:f0:9b:3d:57:d9:fc:e8:0c:
6d:ab:f6:e8:f5:65:2e:87:66:b2:21:3f:b5:e8:d4:e5:c9:23:
22:69:13:5a:e3:07:99:9a:a2:e0:34:5e:0f:7c:6c:6d:09:c6:
f3:30:87:f4:d7:4a:43:32:76:45:6e:6d:ee:0b:ce:b8:9b:3a:
29:c6:c6:b4:da:41:f8:9d:e7:34:4a:4c:9b:8c:9d:f2:6a:72:
bb:50:17:49:f8:0a:d3:c1:18:c9:77:7c:06:84:00:62:f4:74:
4a:97:d7:53:14:7f:f7:b8:19:9e:cf:c4:7d:2a:b6:f6:37:3a:
bc:4f:d0:75:09:a2:f5:79:52:c3:38:b9:11:b1:cc:69:6e:60:
ba:5d:3a:62:ee:f2:e5:d9:05:d3:c6:3b:bf:dc:b7:51:c4:18:
ae:9f:8e:75:98:0f:ea:1b:3d:07:17:54:d1:ee:af:68:30:18:
22:6e:28:6a:55:9c:39:73:33:49:14:02:8f:29:b2:ed:25:a7:
fc:e9:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org