Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yeE7Br2hbT47d-zgxcWOvQPZToI.roa
File: yeE7Br2hbT47d-zgxcWOvQPZToI.roa (raw, json)
Hash identifier: FCJo/oJdvZ2GRy+rOdojcXcAJpGS21t5UNE+FL5rJyI=
Subject key identifier: C9:E1:3B:06:BD:A1:6D:3E:3B:77:EC:E0:C5:C5:8E:BD:03:D9:4E:82
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1210
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yeE7Br2hbT47d-zgxcWOvQPZToI.roa
Signing time: Wed 29 Sep 2021 02:54:10 +0000
ROA not before: Wed 29 Sep 2021 02:54:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4624 (0x1210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C9E13B06BDA16D3E3B77ECE0C5C58EBD03D94E82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:7c:45:25:0a:a8:4a:61:9f:5b:5c:a1:14:
ec:66:51:7d:9d:26:42:60:5a:be:b8:17:c1:3a:db:
14:3f:5d:6d:41:b5:88:45:df:c9:9a:2d:32:3c:46:
28:b3:95:1f:f6:b2:ca:45:7f:92:e4:42:ed:fa:55:
a2:74:c9:6a:60:11:8d:50:c0:55:1d:07:19:92:80:
89:d7:e2:fd:aa:c7:20:7c:fb:8b:06:14:01:bb:bb:
02:71:ad:91:97:8a:21:9f:7c:6a:ce:0f:b5:88:0f:
57:00:72:5a:13:3d:76:fb:ac:70:d6:5b:bf:c7:b0:
f9:46:d8:98:5c:d9:5e:23:ad:21:e4:79:70:46:82:
9d:24:a6:c5:26:e0:d4:a4:f5:81:c3:ee:e4:e0:93:
41:ba:2e:b2:2e:b7:e9:9d:c7:81:02:a7:e5:db:52:
61:69:48:5b:11:9a:e1:05:ef:a8:25:9e:5a:f8:54:
b3:20:46:e4:08:f8:3b:b5:7d:c9:4d:2f:32:91:f2:
31:74:ca:bb:f5:b5:1a:7f:ee:b5:b3:1b:55:6e:73:
eb:5a:98:1f:80:a8:5c:76:ea:5e:07:ee:8c:04:60:
51:79:0b:26:5a:aa:49:18:d8:11:06:50:7c:7b:f0:
13:5f:93:f8:87:47:1c:e9:32:b5:db:3f:9c:10:dc:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:3B:06:BD:A1:6D:3E:3B:77:EC:E0:C5:C5:8E:BD:03:D9:4E:82
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yeE7Br2hbT47d-zgxcWOvQPZToI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/22
Signature Algorithm: sha256WithRSAEncryption
32:71:65:b2:15:29:4b:f7:a3:74:69:3e:70:ca:f5:bb:6c:e8:
3b:0e:c8:18:62:cc:fe:8d:94:47:0c:2d:0f:0c:90:4b:4f:7e:
94:a0:30:58:2e:bb:cf:f2:93:4f:9b:ae:3e:02:3a:e6:fe:ca:
70:70:4a:23:77:b1:06:c5:7e:84:96:86:d6:da:9d:cc:65:2d:
46:a5:f5:c1:76:c8:9b:94:a9:90:b0:2d:1c:97:35:13:10:87:
e1:4f:a0:05:01:a3:63:ee:43:23:17:d0:19:00:81:ce:93:ca:
cb:7a:72:03:8c:6b:3c:39:e6:02:a8:c8:f5:79:d2:24:d9:54:
89:64:c7:ea:5e:de:a1:78:4a:48:e8:c9:83:03:7e:af:76:aa:
4a:11:db:36:e3:ee:c5:b3:e4:c9:0b:49:9d:a7:da:46:12:49:
00:95:f3:68:65:67:22:c7:e4:81:11:e1:f9:d6:40:f9:55:04:
f7:47:84:34:ea:02:da:5d:fd:47:92:eb:5f:71:c1:4c:23:21:
4a:b7:41:d1:9b:73:6f:4c:cd:a3:9e:25:70:76:ab:d2:21:63:
b8:be:82:ce:be:e8:60:d6:2d:a9:ee:d4:36:df:1b:f7:f4:6c:
4d:3e:80:6f:93:53:51:82:f3:6c:80:b8:43:7d:35:56:80:a8:
b5:1f:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org