Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ncPqLq3PZKLdDuT0KYmuknmI8IU.roa
File: ncPqLq3PZKLdDuT0KYmuknmI8IU.roa (raw, json)
Hash identifier: QfyjwhOut+m/aum+hD6eLVO5wUBr6DwISWpFn6K5EpA=
Subject key identifier: 9D:C3:EA:2E:AD:CF:64:A2:DD:0E:E4:F4:29:89:AE:92:79:88:F0:85
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1455
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ncPqLq3PZKLdDuT0KYmuknmI8IU.roa
Signing time: Wed 04 May 2022 02:35:02 +0000
ROA not before: Wed 04 May 2022 02:35:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.16.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5205 (0x1455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: May 4 02:35:02 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9DC3EA2EADCF64A2DD0EE4F42989AE927988F085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:d5:c8:84:ff:38:ee:0f:70:dd:ad:07:70:
99:2f:81:a0:e9:e1:5c:39:4c:c4:e4:59:8e:ef:2d:
00:24:81:e7:cf:18:31:e2:5e:c6:af:c5:fa:88:29:
0f:32:4d:90:8d:94:25:98:32:55:94:37:74:c3:72:
20:18:9e:9f:27:e7:c2:b0:ca:1d:c3:5b:21:a0:2a:
49:77:96:81:18:a9:06:0f:5f:4e:44:1b:d4:8e:f4:
99:5e:06:ce:49:db:bd:ec:33:2b:18:98:5e:99:86:
48:e9:db:ea:5a:d4:02:fb:46:d6:e5:7d:30:1a:f8:
9a:47:92:6f:6b:72:50:4b:ba:f2:8d:97:7f:6d:9f:
15:8a:55:74:c6:c3:db:a5:d4:66:c3:e5:48:3d:d9:
53:bc:c7:2a:66:9a:c2:80:dd:c8:bd:24:f1:e9:7c:
ec:3f:6f:36:92:80:97:a0:f3:4e:b3:34:d5:f9:85:
bf:82:77:7e:5f:46:54:09:0b:d8:09:d4:9a:1c:12:
43:c5:4e:23:59:ec:bb:7f:e4:0f:b7:64:80:bc:68:
35:2e:89:7a:0c:8d:8b:7e:37:19:5b:80:7c:9c:74:
00:a6:2f:a9:7c:4c:25:f5:66:3b:bd:60:16:ee:ea:
89:73:66:1b:34:0d:b4:47:d9:08:b8:7c:00:5c:ba:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:EA:2E:AD:CF:64:A2:DD:0E:E4:F4:29:89:AE:92:79:88:F0:85
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ncPqLq3PZKLdDuT0KYmuknmI8IU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.16.0/20
Signature Algorithm: sha256WithRSAEncryption
24:c8:08:a0:86:21:1e:ed:d9:9a:a0:34:fa:b5:69:b9:b8:e9:
e9:08:6c:eb:4e:6c:57:73:2a:db:cf:b3:30:ce:52:e1:a0:1b:
97:64:af:3f:0f:89:42:d5:b1:22:fe:43:69:3c:cf:ea:39:10:
82:83:ca:e9:06:ed:02:1c:78:de:fc:dd:a5:c6:f0:4f:d5:8c:
d0:b2:4a:27:8d:2d:1f:bb:2a:ee:22:be:7f:5a:df:3e:01:f5:
d7:b9:36:f7:a4:91:58:4c:a8:2d:d1:8a:8b:f5:c0:18:19:2f:
15:8b:8e:bf:33:b7:b8:2f:9a:27:e1:a0:5e:bf:5c:99:25:36:
32:5c:64:13:99:33:da:ca:24:df:33:52:0f:eb:40:c9:50:2e:
82:11:79:af:df:71:c4:4b:68:9f:bb:4f:13:24:2a:fc:e0:5d:
43:6a:11:44:3f:11:fd:52:65:6a:47:38:62:8a:4f:ee:90:7a:
6f:50:57:ec:67:b8:10:68:f5:e2:4f:d6:13:10:b3:e0:b3:59:
6d:a9:84:e3:9c:da:3c:2a:15:c5:6f:fa:87:47:91:8d:f1:69:
33:2d:ca:2d:22:3b:da:25:dd:93:98:60:69:77:ba:96:16:91:
19:b3:94:43:8c:bd:f4:62:81:45:af:25:c3:d7:f2:8d:e2:12:
ed:0c:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:01 2025 by rpki-client