Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xdXtzUpUgH2l8k2nRipURJBcv5k.roa
File: xdXtzUpUgH2l8k2nRipURJBcv5k.roa (raw, json)
Hash identifier: VJ8q3OBfXjsdy7yg21wYZdxCwBg2TxPgAcvW5H4C1NQ=
Subject key identifier: C5:D5:ED:CD:4A:54:80:7D:A5:F2:4D:A7:46:2A:54:44:90:5C:BF:99
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 105B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xdXtzUpUgH2l8k2nRipURJBcv5k.roa
Signing time: Sun 07 Feb 2021 12:44:22 +0000
ROA not before: Sun 07 Feb 2021 12:44:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4187 (0x105b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C5D5EDCD4A54807DA5F24DA7462A5444905CBF99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:0e:c8:77:16:40:36:5c:b7:7b:86:47:25:
c9:65:b5:b7:14:09:aa:6f:d5:56:6d:39:82:dd:0f:
85:d7:5d:a5:40:4b:aa:13:cc:57:cf:f6:82:99:d7:
c9:33:2e:1d:b0:2a:0b:18:b2:2a:06:53:1a:d5:87:
96:a6:bf:ea:1e:0d:73:85:e1:ef:70:42:7d:46:49:
72:04:45:0d:0c:f7:82:cc:8e:a0:d5:a4:89:5e:8d:
02:d5:c0:63:92:96:01:aa:10:4a:9e:28:71:48:4c:
e7:67:f9:ee:45:17:5b:74:66:cc:12:bc:c4:be:3a:
8d:ac:e8:da:48:7b:36:e3:03:d8:9f:54:be:ca:26:
e0:a1:9b:4a:4b:d9:df:01:fe:22:c4:95:a6:87:53:
70:a8:c9:43:2f:77:f9:d4:df:76:76:b4:05:51:bc:
a7:77:80:43:d3:0d:f0:9e:b7:a5:90:d6:b3:42:44:
e8:2b:7f:3b:7c:21:7b:92:6b:49:d7:0d:78:11:a5:
d6:a8:df:42:be:06:0e:78:fd:d8:45:86:0d:a3:c6:
c9:ba:4a:35:5f:13:e8:58:93:c7:73:8a:fa:6e:8c:
70:26:d3:d5:b2:b1:d8:da:03:7d:86:21:b9:14:96:
6c:4b:01:ae:b3:ca:4a:65:06:f7:c5:fb:32:ca:b3:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D5:ED:CD:4A:54:80:7D:A5:F2:4D:A7:46:2A:54:44:90:5C:BF:99
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xdXtzUpUgH2l8k2nRipURJBcv5k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:c1:66:1e:2e:ea:60:86:e1:5d:95:62:ba:8c:b7:c0:c7:95:
94:bb:9b:d9:58:9c:de:76:15:20:92:6d:92:53:2c:58:6b:d4:
d3:bc:da:b8:ba:9b:e8:c5:5e:de:b7:24:98:bb:e2:06:46:9f:
d1:e1:24:b7:0c:c2:29:c7:66:ec:ef:79:f7:40:39:b9:30:8e:
77:72:1a:a5:84:47:5e:04:a5:18:4c:1c:09:82:d5:66:42:60:
81:0f:24:47:5c:72:46:c4:ad:cc:2f:43:bd:9a:68:e6:ad:cd:
48:10:67:24:71:cc:10:28:bd:05:ec:74:e3:89:50:d5:31:0d:
0b:2d:c6:ab:16:47:45:6a:05:3f:b7:bc:02:fc:27:5c:9f:73:
b0:f3:9d:4d:a2:4e:e8:3e:f2:83:97:e6:29:16:6a:41:33:d5:
62:fd:fe:35:3d:2e:1f:78:ec:78:d0:fa:e4:20:84:d0:9e:e1:
ee:a5:3d:51:37:d5:1a:d0:b2:9c:7e:99:ba:51:25:da:ee:d3:
fb:b8:3e:ba:30:2b:34:1f:a1:e4:2a:20:6e:64:8e:28:15:4f:
4a:46:9c:0e:af:e3:61:6b:5a:b6:60:7e:17:28:9f:c3:51:75:
c4:9c:81:2f:5f:95:99:bb:89:d7:cd:bb:df:ff:15:aa:0f:c0:
19:a3:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org