Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xpXbo_JTxkz4BcjhQUZT4nGUv38.roa
File: xpXbo_JTxkz4BcjhQUZT4nGUv38.roa (raw, json)
Hash identifier: IYNsLE6BqE+nhlKt7kegAo3uUjaakXzkfrnxCK5zYvU=
Subject key identifier: C6:95:DB:A3:F2:53:C6:4C:F8:05:C8:E1:41:46:53:E2:71:94:BF:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 132F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xpXbo_JTxkz4BcjhQUZT4nGUv38.roa
Signing time: Wed 29 Sep 2021 02:55:27 +0000
ROA not before: Wed 29 Sep 2021 02:55:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4911 (0x132f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C695DBA3F253C64CF805C8E1414653E27194BF7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:2b:0c:cc:5b:92:ec:87:c8:39:02:78:26:
3f:4b:b2:74:ea:65:b1:6b:1d:85:42:ca:86:60:1b:
3e:c0:8d:7d:8f:c6:7b:13:a0:db:5c:6e:49:e5:12:
76:0f:d6:7f:69:32:3b:4e:0a:74:bd:c6:dc:40:a8:
72:17:07:bd:e7:ee:ab:f1:5d:13:17:90:d6:26:a3:
cb:ed:d4:a7:da:73:da:57:d5:bd:73:45:59:00:4e:
d3:89:e4:e2:76:1b:24:d6:67:d3:3b:0a:99:40:a0:
84:ee:d6:c1:6b:20:fc:70:be:19:41:4b:2c:97:ba:
94:cf:66:f7:a6:6b:71:f9:5b:e2:f1:b3:c8:6b:be:
71:56:cf:ae:ce:37:48:2a:b7:12:06:75:9c:9e:27:
b8:37:78:a2:4f:75:94:a1:97:60:3b:68:af:d7:c9:
61:85:55:05:39:d1:20:b6:59:8d:5e:39:41:9b:89:
c8:e7:e3:88:24:b3:c0:be:5a:fd:7a:e2:1b:b0:f5:
9c:a4:a1:89:b8:b8:92:20:23:b7:4a:b0:20:0f:a7:
44:1d:58:fc:6f:d0:eb:57:1a:f4:d3:e8:3e:ef:e8:
f7:b4:43:e7:51:26:fe:66:e3:e1:16:58:29:3f:34:
fa:61:3f:a5:6a:a8:7a:38:19:88:8c:9e:ad:b7:05:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:DB:A3:F2:53:C6:4C:F8:05:C8:E1:41:46:53:E2:71:94:BF:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xpXbo_JTxkz4BcjhQUZT4nGUv38.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/19
Signature Algorithm: sha256WithRSAEncryption
10:66:d2:48:ff:98:40:de:e4:ee:b0:d1:3b:69:26:27:a1:54:
d5:a1:0b:85:65:35:ca:36:bc:92:c1:62:38:22:7e:a4:e8:38:
48:7d:68:c0:08:20:19:88:a2:8d:02:be:78:e3:07:3b:23:ee:
61:be:97:10:68:dc:50:5e:14:20:76:d1:c6:09:66:ac:95:6e:
5d:51:71:32:a3:5a:30:d9:b9:94:07:79:07:0b:44:e0:c7:63:
0c:3e:96:40:1c:86:1d:b9:07:80:5b:86:80:09:f5:84:3b:06:
ea:d2:b0:20:d5:ae:aa:0f:82:25:6b:73:1b:c4:19:a6:c4:eb:
21:db:0c:1e:4a:cf:eb:a7:dd:88:04:02:64:60:17:6b:9f:e6:
bf:68:d2:f1:64:17:71:32:10:94:0b:96:f2:05:be:25:06:90:
66:7d:43:84:69:17:01:fb:c3:18:63:c0:68:db:20:80:df:92:
a3:38:43:6a:5f:b6:ff:80:7c:78:44:d3:b0:b4:2d:6a:33:0b:
3a:e4:55:da:63:93:14:ff:1d:ab:6d:ce:37:51:0e:d8:09:d6:
10:33:70:d1:5b:0a:57:d8:14:f1:c2:5e:60:60:85:b7:05:de:
ed:b6:4d:2a:4b:f4:79:23:69:91:90:79:0b:c1:b8:41:89:a4:
51:8c:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org