Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BCaeOtPnTAnC4Suq5OiiQHgm5R8.roa
File: BCaeOtPnTAnC4Suq5OiiQHgm5R8.roa (raw, json)
Hash identifier: ByGcwVgzVnQiNIErmOwyihAhxMT0x6DJxSllYQPyNRs=
Subject key identifier: 04:26:9E:3A:D3:E7:4C:09:C2:E1:2B:AA:E4:E8:A2:40:78:26:E5:1F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10B9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BCaeOtPnTAnC4Suq5OiiQHgm5R8.roa
Signing time: Sun 07 Feb 2021 12:47:14 +0000
ROA not before: Sun 07 Feb 2021 12:47:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 180.218.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4281 (0x10b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:47:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=04269E3AD3E74C09C2E12BAAE4E8A2407826E51F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:56:81:76:ba:eb:15:b6:6b:b9:3d:63:64:41:
4a:cb:b8:29:1b:b5:c9:ba:eb:7e:2b:4f:bf:cb:50:
81:3d:47:6f:ef:99:83:d2:65:7f:64:f3:0f:42:a0:
b1:45:bb:77:b3:5e:9d:cc:06:62:4b:2f:b4:85:1d:
83:c1:bc:46:99:4a:9e:cd:4f:b4:ca:84:62:71:26:
cb:8a:30:91:79:34:0f:84:e6:f4:86:d4:66:dc:39:
84:07:a4:3b:35:e3:cb:fb:66:87:2f:67:ce:12:47:
4a:29:5d:58:cc:a9:ad:a6:1b:28:c2:9b:78:3c:43:
c8:24:fa:c5:69:41:d3:58:c5:a9:9a:87:fb:34:6d:
c6:02:f1:db:73:e0:6a:e5:4e:ef:8e:3e:42:e4:ad:
b6:67:b7:18:d5:93:34:75:eb:d8:73:2c:33:9a:4a:
5d:c5:c4:79:57:3a:cb:98:d8:19:fa:83:f6:93:d1:
b7:1e:f3:71:15:43:d4:7f:04:8c:f3:09:d1:a7:0d:
3f:14:cd:7c:99:26:50:65:6e:b2:80:81:af:69:ba:
60:47:27:76:0d:ea:f8:11:f8:74:55:c2:24:a8:3e:
36:8f:3c:92:63:45:8d:34:d9:cb:c2:53:87:74:5a:
d8:e1:d2:69:a8:8f:36:57:58:9f:37:de:40:9f:7a:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:26:9E:3A:D3:E7:4C:09:C2:E1:2B:AA:E4:E8:A2:40:78:26:E5:1F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BCaeOtPnTAnC4Suq5OiiQHgm5R8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.88.0/22
Signature Algorithm: sha256WithRSAEncryption
28:d4:71:2e:36:d0:73:00:17:aa:f2:f5:43:3b:d3:ad:1d:2e:
fc:82:4d:37:1f:47:30:9b:48:d2:83:dd:d6:c8:4b:57:85:9d:
6e:7e:0c:d3:2f:5e:45:48:c1:2c:af:f5:ae:0c:a0:06:cb:6b:
c7:0c:cf:8f:73:0d:ee:e1:ca:3e:81:00:35:07:ec:1e:7b:38:
a0:92:42:3e:2a:99:e5:3f:42:36:b1:53:83:2b:76:8d:ca:2b:
6e:d1:a0:58:73:3b:7a:32:63:57:df:3b:05:53:94:40:1e:58:
4f:b7:a3:6e:c2:14:c7:a4:dd:de:07:0c:56:5d:ab:fc:18:b8:
2d:aa:e5:7c:8e:d8:26:e4:32:b0:91:c6:f3:28:fd:57:a8:34:
7a:45:f3:e2:8d:20:4a:c5:ec:1a:e3:a2:99:a6:d6:e6:0e:5f:
72:47:87:85:ae:fd:3f:16:dc:1b:d6:93:71:07:93:bc:e3:23:
3c:d8:bf:7c:c2:6c:31:47:65:90:c2:ae:0e:db:7d:d1:6e:95:
52:83:8d:00:36:c2:24:20:72:26:c9:3d:2f:dd:b9:c6:84:b8:
2f:c7:d2:14:e2:53:93:2c:04:59:2f:7c:c0:4b:d8:cf:4e:c0:
95:3d:2d:84:2c:ec:b8:4b:84:37:ec:46:f8:6c:33:5c:bb:6b:
57:58:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org