Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sW3WnUUw-GHBLaGEatXlUL_dP7c.roa
File: sW3WnUUw-GHBLaGEatXlUL_dP7c.roa (raw, json)
Hash identifier: nUv3SDyev/kGy4NZaECESZqtDDGB+rZ/49kIjiTjdJc=
Subject key identifier: B1:6D:D6:9D:45:30:F8:61:C1:2D:A1:84:6A:D5:E5:50:BF:DD:3F:B7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 112F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sW3WnUUw-GHBLaGEatXlUL_dP7c.roa
Signing time: Sun 07 Feb 2021 13:14:11 +0000
ROA not before: Sun 07 Feb 2021 13:14:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 180.218.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4399 (0x112f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B16DD69D4530F861C12DA1846AD5E550BFDD3FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:c0:79:fc:58:85:3b:76:a7:d6:9e:13:bc:
47:2e:56:1b:7e:6b:f7:b6:87:4c:c5:39:c7:aa:e3:
83:8a:be:0e:a9:06:00:92:58:59:37:97:43:03:92:
c9:db:60:7c:6f:6c:c6:e4:e9:cc:d1:69:10:cb:7a:
09:0c:68:ff:5a:7e:53:45:46:a2:99:06:32:7f:ac:
af:71:74:12:d6:95:33:c9:8a:b8:a6:0a:e8:44:69:
d5:d4:3e:c7:b3:53:ed:85:be:7c:42:79:44:62:39:
ee:1d:ce:81:69:28:dc:f8:a1:28:21:9c:1d:4b:f1:
34:10:4c:05:fe:29:39:a2:88:7f:a0:16:8a:96:0a:
8e:cb:8b:25:48:1b:5a:86:b7:93:c5:d9:57:86:7f:
fa:7b:a2:9a:2c:45:b0:6e:89:50:44:ce:35:0d:4a:
43:2e:f2:2d:1f:f3:9f:be:f7:62:7e:89:94:0d:67:
eb:a0:4e:5d:37:af:9d:fd:7a:ca:51:21:39:27:63:
7f:e5:fa:f6:2e:07:a3:ed:ab:c2:45:3d:73:13:74:
a5:01:5b:12:c5:2a:ca:25:b8:bc:0c:d2:88:e0:55:
ee:9f:d7:d0:d3:8a:b6:b2:3c:ed:12:29:6d:16:c8:
e8:51:ea:cd:19:76:32:66:a9:0c:ee:28:7e:9c:b7:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:D6:9D:45:30:F8:61:C1:2D:A1:84:6A:D5:E5:50:BF:DD:3F:B7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sW3WnUUw-GHBLaGEatXlUL_dP7c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.112.0/22
Signature Algorithm: sha256WithRSAEncryption
00:dd:1b:41:52:0e:1f:00:f4:a8:98:10:76:95:7f:87:c7:9d:
b5:fe:52:4e:a8:f7:8a:9f:60:f8:37:f6:94:e2:2a:21:38:a9:
51:d8:dc:e5:38:23:ca:69:6c:39:f6:64:b5:10:24:5b:7d:6c:
40:62:dc:4a:25:ce:d1:ce:f5:d1:00:3c:58:11:e9:06:db:9c:
48:4c:f1:2c:b9:9e:ee:12:3c:90:19:d1:6b:b4:7b:9b:a9:83:
df:2f:86:04:9d:a4:46:36:97:17:41:c8:04:1e:e7:1f:c5:5c:
c2:5a:2a:49:81:a1:d7:1b:87:6d:91:48:94:fb:ef:6e:45:8b:
6f:f2:75:50:40:89:75:a3:58:e3:63:b2:a8:f2:e1:e2:cc:ac:
03:fe:63:db:58:17:af:12:36:50:66:e8:73:89:23:de:1a:b8:
df:8d:ee:19:55:f8:a5:d8:47:11:2f:69:c1:63:91:f2:a6:cb:
eb:26:85:0a:54:22:db:de:f3:48:b3:e1:a3:38:f9:0f:78:28:
45:bd:59:9c:61:51:70:fa:f7:23:cc:00:0d:cd:4d:25:4a:34:
a2:d3:17:25:c9:6d:2c:88:06:ac:bb:62:d6:2b:34:b3:d0:69:
8c:a1:4a:46:df:bb:d7:66:6f:2b:b3:1e:f3:9f:cc:26:5e:56:
16:4e:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org