Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t30DyKTP8oOliTvTFO6aEOJic7E.roa
File: t30DyKTP8oOliTvTFO6aEOJic7E.roa (raw, json)
Hash identifier: NI/afo/uMtgxFuLL+urml8lW0bx4PhYU50bUHO0zbpw=
Subject key identifier: B7:7D:03:C8:A4:CF:F2:83:A5:89:3B:D3:14:EE:9A:10:E2:62:73:B1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t30DyKTP8oOliTvTFO6aEOJic7E.roa
Signing time: Thu 15 Sep 2022 02:36:11 +0000
ROA not before: Thu 15 Sep 2022 02:36:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B77D03C8A4CFF283A5893BD314EE9A10E26273B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:30:32:d6:a8:de:7d:4b:84:94:61:fb:40:
a3:f2:63:02:4e:27:23:0d:2a:e6:7d:ca:70:04:df:
47:88:0a:35:99:fb:34:ab:f0:ea:62:1e:36:45:41:
7b:88:d5:dc:73:27:e9:33:40:d2:a7:93:9d:a6:45:
c2:a9:ae:5b:13:24:ca:87:4e:61:c4:eb:cc:2a:3a:
4e:aa:33:44:ed:91:a4:c2:49:67:64:64:7c:39:8d:
fa:5c:84:06:c4:9f:10:df:7c:40:89:94:a5:0c:66:
b3:5d:e5:3d:f1:c4:c8:bd:8e:77:de:79:ea:ce:0d:
1c:a5:6c:d2:45:d7:88:a2:c5:ce:77:7e:4c:94:29:
80:f5:1e:e4:8e:e5:72:82:40:73:2b:9c:c6:0a:46:
e5:36:a2:95:19:5d:20:97:d8:15:3f:a2:4b:f6:c7:
c0:cb:09:13:f4:85:f5:6f:e3:e5:33:d5:d9:95:8c:
c3:71:7b:32:80:c8:0f:b1:9f:05:99:76:e2:ea:a9:
04:e9:bd:e5:fa:25:39:af:5a:26:2b:67:32:03:78:
a1:93:13:76:73:0c:f0:10:18:b4:79:4c:3a:d8:80:
8c:a8:dd:1e:d1:f9:2d:c0:d4:40:99:46:07:02:5b:
c9:43:84:ee:65:54:91:1c:31:e8:0f:41:47:16:01:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:03:C8:A4:CF:F2:83:A5:89:3B:D3:14:EE:9A:10:E2:62:73:B1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t30DyKTP8oOliTvTFO6aEOJic7E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.112.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:1a:fe:3a:da:21:53:3a:80:ee:b8:6b:9e:55:bf:f0:d7:67:
2d:a8:6d:1c:48:d1:40:b5:a4:5c:3a:03:7a:e5:ed:c3:05:e5:
06:75:b4:cb:8b:05:4e:72:cb:9b:2e:59:19:d1:1b:be:38:c5:
a9:a9:dc:87:a8:18:cd:ef:0b:d5:b9:2a:3a:c2:60:14:5f:24:
43:b0:0c:fa:c6:c1:87:0f:66:92:35:3f:d6:14:c0:1d:7e:3b:
ba:71:58:68:4a:65:88:67:0f:e8:c0:03:01:6e:f1:ac:b5:ea:
5d:9d:15:7f:8d:73:45:c9:56:11:ca:65:f9:12:b2:11:6b:73:
f9:83:a2:32:47:fd:86:7f:07:19:46:d4:c1:a8:3c:01:89:3c:
95:91:3f:3d:c5:75:4b:a3:04:99:d9:b1:8e:fa:13:73:1d:0a:
28:0a:51:d0:6a:3a:cc:32:6c:22:69:31:db:79:a3:a7:6c:1d:
e4:78:0a:8f:6c:09:b2:0c:d0:b3:d9:0b:7a:2c:b3:d8:64:f6:
3a:5c:f8:b0:5e:59:e6:a4:b5:b4:3c:d6:44:d6:37:19:5b:ad:
e6:51:de:20:fb:27:00:7a:33:05:e6:b4:7c:77:68:98:b7:98:
6c:ea:1d:99:6c:41:3b:0a:2c:88:1e:dd:12:74:9c:b4:a2:b3:
62:5a:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org