Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/utVa0nnPSCfS22fg9MSBZXkRzv0.roa
File: utVa0nnPSCfS22fg9MSBZXkRzv0.roa (raw, json)
Hash identifier: gf9dE1Nl3r39iEgQYOa+JE2KbTJRpLVMCGd+d3q2mPE=
Subject key identifier: BA:D5:5A:D2:79:CF:48:27:D2:DB:67:E0:F4:C4:81:65:79:11:CE:FD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/utVa0nnPSCfS22fg9MSBZXkRzv0.roa
Signing time: Thu 15 Sep 2022 02:36:41 +0000
ROA not before: Thu 15 Sep 2022 02:36:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BAD55AD279CF4827D2DB67E0F4C481657911CEFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:a3:cf:15:37:ce:28:fc:ca:84:dd:b5:f3:
d7:ed:22:c4:f2:c9:3e:a3:74:48:d7:e2:95:db:92:
5b:c4:7b:ba:24:ea:4d:7d:c3:09:31:e5:94:be:98:
cd:69:cf:43:f1:eb:67:b8:09:98:43:4d:01:c7:9d:
82:a8:1b:a6:cc:b2:e3:e4:d4:1b:ca:cc:58:57:d6:
0f:94:da:e2:51:83:b7:ea:e3:ec:3f:b4:f4:6d:fa:
e9:2c:e6:2a:e9:fb:6b:6e:99:fb:d6:78:69:a2:aa:
c4:65:ba:90:f8:7e:37:e5:18:75:c7:f8:b0:20:02:
4f:1d:32:67:8d:51:29:c7:b8:f8:4a:ca:54:d0:3e:
8d:2f:ab:7c:2c:e2:35:0d:3c:1a:6d:85:66:87:18:
ca:2c:cc:b8:2a:5b:c0:51:b8:af:b9:90:24:30:18:
d1:2a:25:f4:c3:75:c8:00:11:5e:18:fe:cd:48:87:
e2:3f:b1:80:af:d3:f7:4a:d4:82:5a:29:07:0e:42:
fa:99:f8:b6:25:c5:9e:c3:58:aa:df:06:d7:4a:d8:
56:dd:28:81:e2:c6:c1:22:28:2e:08:2f:bb:72:ac:
15:dc:9b:22:eb:3e:6f:59:54:51:84:4c:36:a3:17:
74:18:a0:f1:27:62:2b:8a:a4:30:15:c1:a0:08:13:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:5A:D2:79:CF:48:27:D2:DB:67:E0:F4:C4:81:65:79:11:CE:FD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/utVa0nnPSCfS22fg9MSBZXkRzv0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
36:9c:1c:91:12:e7:57:a2:56:61:64:b6:4e:60:bd:e9:44:0d:
f6:b5:c3:bb:9f:b8:c2:67:d0:44:de:95:fc:86:59:53:d5:9f:
c0:38:9d:9b:ee:83:66:5d:26:03:fd:de:50:68:b6:e9:3d:81:
55:54:be:82:95:eb:6c:d9:de:31:f2:71:f5:45:08:44:35:29:
42:80:1d:5b:ad:40:4c:47:15:2d:18:ad:8d:2e:e0:60:fe:a8:
94:78:c8:fe:8c:84:c2:de:93:d2:d6:2f:64:c9:68:26:e2:85:
7a:19:22:a3:46:23:34:4f:0f:95:0c:e4:d3:30:53:19:f4:2a:
96:e4:4f:1e:b8:f5:33:0d:ae:05:3a:cc:74:53:da:ee:28:6a:
e8:48:8c:0a:e0:15:93:c6:bc:db:58:25:51:d7:8a:39:88:32:
44:18:62:3b:64:6e:ab:11:1a:79:4d:b0:c1:4e:e7:98:7a:c8:
f8:2d:61:85:41:3e:11:1f:51:b2:db:e7:5e:a8:dd:a3:09:35:
ea:db:bc:94:e8:1b:b1:6c:43:a9:d0:ba:8d:47:0f:d0:56:e0:
cc:1f:9a:b2:b8:b3:dd:5c:fe:a8:f7:2a:47:b6:15:5f:0d:0a:
fb:c2:1b:20:a5:2f:14:40:6e:3c:f2:e0:bd:ee:61:c8:ab:53:
ce:9f:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org