Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u3RjG1nDe9DIosBnnNGp36ScRYk.roa
File: u3RjG1nDe9DIosBnnNGp36ScRYk.roa (raw, json)
Hash identifier: a4U+/ayPawMAMwrFL6gi/J4ccHKEwkUwGAdZJI04v9A=
Subject key identifier: BB:74:63:1B:59:C3:7B:D0:C8:A2:C0:67:9C:D1:A9:DF:A4:9C:45:89
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u3RjG1nDe9DIosBnnNGp36ScRYk.roa
Signing time: Thu 15 Sep 2022 02:36:44 +0000
ROA not before: Thu 15 Sep 2022 02:36:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 180.218.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BB74631B59C37BD0C8A2C0679CD1A9DFA49C4589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:27:5e:21:22:0b:dc:6d:79:e0:9a:ff:c2:
e0:29:27:80:ad:9a:7f:01:36:b9:59:1d:61:37:2e:
87:4b:26:3b:c4:fb:87:d7:7d:da:f5:1f:a7:d1:5a:
e1:8c:16:08:36:d5:53:4c:4f:61:78:1c:28:33:1c:
a5:d1:be:ee:19:21:e8:a4:d9:d1:c9:94:7b:8f:b4:
5d:b9:87:7e:81:af:3c:3c:03:8a:bb:59:6e:3b:b0:
9a:dc:1a:ba:66:67:c8:a4:f2:7e:b5:57:c7:a5:a3:
db:3c:0e:df:63:ec:b1:51:f7:c5:e8:ca:11:24:5c:
e8:2d:f6:f1:f4:eb:4a:df:8c:ba:49:ff:5b:27:e4:
83:12:1d:cc:8c:88:ea:d6:43:f5:07:09:af:17:9c:
35:fd:d9:bb:03:0c:98:b4:38:02:1b:76:59:4b:86:
46:90:31:e9:40:1e:1f:a3:74:28:bf:e7:58:62:59:
a4:1b:59:a8:be:a5:a5:e3:48:5e:40:c4:82:c0:50:
7e:c7:5d:b4:e5:d9:1f:fa:e8:7f:69:69:ee:1a:6e:
1e:d0:de:b0:6b:e5:58:81:2a:8d:60:9d:bb:fd:bf:
89:70:b4:89:67:c5:e6:4e:c5:2e:96:fe:68:10:62:
a0:a3:30:64:db:60:78:36:5c:21:1a:15:46:81:c0:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:74:63:1B:59:C3:7B:D0:C8:A2:C0:67:9C:D1:A9:DF:A4:9C:45:89
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u3RjG1nDe9DIosBnnNGp36ScRYk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
44:50:9a:05:f6:c7:68:f8:61:2a:e5:96:5e:06:36:b3:1e:42:
d4:e6:2f:4c:a9:91:b1:a6:28:01:e5:de:c3:80:0f:7a:20:ec:
a9:da:fd:84:17:02:69:d4:5d:bc:ab:0a:2a:ee:f6:26:b1:a9:
29:6f:e3:f4:66:95:d3:60:07:2f:6b:16:c1:26:8a:28:cd:db:
ba:d2:10:63:e2:84:bb:fc:4d:b2:95:eb:d7:29:b0:5c:c1:5c:
e1:df:70:03:15:2b:29:f6:23:6d:c1:79:4c:f6:33:2e:9e:35:
c2:4a:92:c2:35:d8:46:24:d7:32:03:7a:20:dc:3c:72:b8:50:
51:62:b9:20:59:e8:1b:ae:c0:04:45:eb:6c:e4:55:b4:58:30:
0f:db:54:ce:49:da:e9:1e:44:1f:10:3c:09:eb:99:5f:a6:3d:
af:f9:5d:bf:7b:41:ca:21:8f:40:f7:f4:f2:5f:74:8e:a5:9a:
62:ce:20:94:fc:72:3c:b7:ec:a1:89:95:3a:44:ff:11:7d:9c:
bc:9b:96:27:27:38:93:91:99:9d:a4:48:81:77:08:e1:f9:df:
8a:65:8a:b4:82:cf:4e:66:08:1b:a5:8d:e0:cc:78:06:e8:58:
e1:9f:bc:23:78:ac:b9:fc:6e:00:b3:10:f8:5d:6f:9d:2f:7a:
20:b1:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org