Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wa83zwRZaPDF7wFUC3Dw4IaRVLA.roa
File: wa83zwRZaPDF7wFUC3Dw4IaRVLA.roa (raw, json)
Hash identifier: at0pWRdtJYvw2HZbd6iM2CNC61O2nTj3XYMBWqJKcqM=
Subject key identifier: C1:AF:37:CF:04:59:68:F0:C5:EF:01:54:0B:70:F0:E0:86:91:54:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B49
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wa83zwRZaPDF7wFUC3Dw4IaRVLA.roa
Signing time: Tue 29 Sep 2020 10:08:14 +0000
ROA not before: Tue 29 Sep 2020 10:08:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.144.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2889 (0xb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C1AF37CF045968F0C5EF01540B70F0E0869154B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:fc:33:a0:8d:12:f8:69:10:bc:ab:56:97:
b5:66:67:cb:fc:3e:dd:1d:47:94:f3:d5:66:2d:65:
68:83:c0:19:1a:00:59:7d:bb:b8:df:e5:82:fc:26:
87:28:6a:43:84:6c:24:d0:8d:66:44:ff:ba:9b:9d:
8c:02:7c:b3:e2:1f:d8:78:21:f4:4d:03:e2:94:8a:
51:b0:54:bf:05:0e:a9:18:02:39:f6:bb:6a:8a:70:
2c:a6:c8:85:65:e3:95:f7:3f:c6:14:74:7f:e1:65:
f5:17:e5:cb:84:93:a5:6b:10:f9:81:7f:60:15:61:
50:a0:72:04:df:8b:12:86:48:b6:00:d7:2d:6d:12:
ed:d6:7f:c2:13:8e:5a:c9:f2:6c:2e:b7:37:ed:3a:
dd:0f:66:a0:89:89:9c:5b:69:b2:a4:03:54:d5:ff:
b7:da:7b:9d:34:2e:05:f5:5d:17:42:86:9c:5a:23:
09:75:33:ab:eb:11:7e:42:91:0d:ee:18:b3:60:39:
9f:4a:19:0b:40:27:57:41:fb:a1:c3:92:f8:ce:4c:
21:75:c2:6d:cf:db:89:94:51:1e:8a:60:bb:6d:ef:
a6:7c:b5:26:36:ae:b2:bb:47:21:dc:c8:8d:7f:ed:
1b:26:e4:c9:44:a6:42:15:53:3e:04:4c:5f:13:4e:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:37:CF:04:59:68:F0:C5:EF:01:54:0B:70:F0:E0:86:91:54:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wa83zwRZaPDF7wFUC3Dw4IaRVLA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:1c:c1:83:e5:30:41:bb:db:b6:4b:4b:ff:bd:b4:63:48:bf:
44:15:3f:f0:e2:58:f9:57:b3:6b:2e:bd:57:e9:47:77:47:c7:
ea:db:ed:28:37:1d:66:2e:e9:de:36:97:6b:76:d5:2c:f6:c9:
f9:a7:43:27:da:8a:2b:ea:0f:ae:2a:d4:37:2e:6a:77:2f:77:
36:4a:03:e1:54:f6:b0:26:2b:66:73:e3:be:53:92:81:2e:e4:
5b:33:d3:3e:6d:95:49:21:d5:ff:74:60:89:fa:2d:5a:9e:53:
50:55:fd:1a:4c:c0:ac:eb:16:f1:30:66:ab:35:c4:54:58:7d:
5d:78:4e:b8:e7:96:16:dc:ee:73:b6:90:5a:79:f5:c3:00:2b:
08:b8:c7:58:2f:2f:83:ef:fb:49:41:39:af:99:85:e7:01:12:
2c:8d:f7:3f:27:63:74:d6:b4:db:1a:34:6a:8a:3f:80:00:94:
23:02:99:5f:64:31:55:80:d9:fd:f3:0d:1f:11:e2:2e:67:a5:
22:21:b9:8a:4a:00:db:40:f3:04:58:4e:72:53:04:a1:5f:61:
fb:e4:be:f9:88:54:5e:41:48:a3:19:b4:95:94:41:74:e4:e3:
a4:58:2d:fc:0c:5e:3e:02:e5:16:fb:cc:f6:c2:8c:a7:d2:26:
fe:03:04:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org