Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uEiOc80WrrIqZbFCJF-qKu77Dpw.roa
File: uEiOc80WrrIqZbFCJF-qKu77Dpw.roa (raw, json)
Hash identifier: DCDCmu6Kil1GQx8KcEqRVmE3RoPw85v3/sdq/rQFjWA=
Subject key identifier: B8:48:8E:73:CD:16:AE:B2:2A:65:B1:42:24:5F:AA:2A:EE:FB:0E:9C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12F9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uEiOc80WrrIqZbFCJF-qKu77Dpw.roa
Signing time: Wed 29 Sep 2021 02:55:12 +0000
ROA not before: Wed 29 Sep 2021 02:55:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4857 (0x12f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B8488E73CD16AEB22A65B142245FAA2AEEFB0E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:3b:77:96:f6:87:55:c7:c6:33:3a:ff:4b:
12:76:ce:de:46:16:98:2f:cd:4c:c4:44:96:17:a4:
8c:60:06:8a:90:d3:7c:27:51:a6:e8:93:5e:2a:6e:
f0:6f:d5:02:4b:9a:14:28:07:27:8a:2a:21:5a:93:
36:75:d6:f4:85:48:3c:f2:ca:df:76:b3:2c:3e:46:
7f:14:85:bb:8f:ab:de:4c:7a:0f:29:f0:4b:83:06:
d9:d4:b2:8c:64:35:46:a6:ad:c3:38:ca:12:d5:58:
9b:88:49:b3:f9:90:aa:eb:b4:ed:e5:12:29:fe:e2:
65:bd:92:d8:8d:c6:22:d4:90:e6:f7:48:f1:b8:fa:
e5:0d:5d:60:ba:d1:c4:ba:c9:f6:da:6d:a9:3c:9a:
8c:16:1a:fa:a4:f2:36:73:98:30:79:81:d5:ab:6b:
40:78:a5:d3:c1:91:a2:e7:8a:b9:d2:66:2a:fc:b2:
7c:43:37:e3:14:3e:6d:96:ff:c3:2d:26:85:c5:bc:
10:34:94:30:1a:44:3a:f2:f1:37:50:8e:65:3b:f4:
dd:9c:7c:a9:33:8d:31:b8:20:5c:95:14:73:79:e1:
1b:ef:78:73:9e:e7:88:13:4d:1c:0f:a4:33:17:78:
86:cd:9c:32:45:fd:05:2f:23:a7:f0:e8:8c:f0:c9:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:8E:73:CD:16:AE:B2:2A:65:B1:42:24:5F:AA:2A:EE:FB:0E:9C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uEiOc80WrrIqZbFCJF-qKu77Dpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.216.0/22
Signature Algorithm: sha256WithRSAEncryption
33:c9:6d:6a:d2:9a:92:f7:9e:13:72:c4:bf:24:e9:39:c2:ca:
3c:19:d9:9b:62:b7:5e:08:00:f7:c7:fb:69:24:5f:dd:77:dc:
48:8c:a4:74:b4:d7:1f:3a:3c:95:68:cf:3b:c0:97:d5:36:03:
6d:15:da:87:39:cf:30:3a:ef:69:93:f1:76:c9:3b:8c:f4:b3:
80:a5:20:86:68:5b:1e:c6:d4:a7:d3:8f:ff:76:76:6e:cf:bd:
2c:1f:b9:a8:96:8c:21:23:d7:15:91:82:61:a5:4f:fa:f2:2a:
51:92:3c:fa:54:a2:d7:a6:2b:78:2f:55:69:af:b4:f0:0f:7b:
59:8b:83:87:f1:90:eb:17:c1:63:17:2c:eb:28:0b:c4:9a:90:
80:8c:fd:a0:34:d0:3a:8a:e5:81:f2:bc:69:d9:13:ec:2b:8a:
e5:cf:ac:d0:d7:ea:4a:86:f9:d5:be:2c:ef:3d:5a:4e:02:30:
51:83:34:0c:c5:4a:f6:c9:47:35:44:93:96:e7:45:d2:f6:66:
1f:6a:2f:17:d3:05:d9:0e:ac:81:df:02:aa:5b:66:2b:c5:e8:
27:8a:2d:14:10:23:d2:89:83:09:56:df:2e:a3:f2:c0:e4:4e:
38:50:8f:bc:30:00:20:eb:bb:ff:b0:d7:7f:2a:bc:37:e0:20:
a7:cd:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org