Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CuUFSiuHQSy_LkV3OQjC9PuZqLQ.roa
File: CuUFSiuHQSy_LkV3OQjC9PuZqLQ.roa (raw, json)
Hash identifier: atXhNZhIEc1D5ITqHN+fFkjV1Tmy6ISJq5zCkmuHcsM=
Subject key identifier: 0A:E5:05:4A:2B:87:41:2C:BF:2E:45:77:39:08:C2:F4:FB:99:A8:B4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1051
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CuUFSiuHQSy_LkV3OQjC9PuZqLQ.roa
Signing time: Sun 07 Feb 2021 12:44:10 +0000
ROA not before: Sun 07 Feb 2021 12:44:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4177 (0x1051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0AE5054A2B87412CBF2E45773908C2F4FB99A8B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:7e:d0:04:72:69:56:36:b8:ac:ee:8b:2e:
da:0f:a8:55:e1:ea:ec:8c:b8:99:cd:7d:15:ce:de:
67:ee:ef:f4:d1:6c:9d:ba:5f:84:88:c9:a8:cf:37:
62:ea:a3:0e:44:ef:8a:74:b9:c4:c8:64:d1:a0:99:
f7:49:15:00:fc:d0:c3:d6:12:48:a9:66:5d:83:9a:
41:24:bc:78:71:96:02:77:ea:a4:41:1a:d1:03:69:
4c:b9:43:95:6b:08:4f:00:98:ac:d8:0c:fa:81:44:
30:d3:13:b1:c7:b1:55:00:34:5d:05:e0:dc:c3:d8:
30:fe:aa:12:db:9f:8f:d2:6d:b1:cf:18:c0:5c:13:
e5:ff:b5:83:13:7c:63:e8:a4:cc:48:a0:2c:56:6d:
c7:4f:51:e6:a0:01:13:b6:73:11:d7:e5:8f:50:37:
64:d7:3e:7f:59:1d:22:41:69:6a:22:19:62:54:90:
c4:22:d3:fe:f2:10:f5:fe:6a:ee:ac:a9:fa:61:cd:
65:43:4f:a8:15:24:a0:6c:4b:8e:09:3d:0c:41:ed:
e2:a5:9c:fd:98:8f:95:7a:90:38:d5:cf:05:ee:5f:
cd:fd:99:1b:cd:a1:0b:8a:e2:50:fc:d7:60:29:79:
ec:9b:40:b5:13:fd:b9:12:3f:58:ee:8e:e6:6d:fb:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E5:05:4A:2B:87:41:2C:BF:2E:45:77:39:08:C2:F4:FB:99:A8:B4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CuUFSiuHQSy_LkV3OQjC9PuZqLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:d2:8e:1a:1f:5c:57:3a:fa:78:75:35:2a:2d:66:a1:bd:9a:
fe:c8:9c:1d:0a:a0:d4:e1:d8:a1:ee:eb:9b:1d:88:51:5e:c2:
f2:17:91:d7:12:a0:b0:83:c6:84:5f:c4:33:0f:13:f0:96:cd:
53:02:07:54:3e:c8:07:d1:1e:9a:bd:6d:b2:84:0f:26:6b:a6:
89:37:da:5e:6a:69:8a:9c:ca:29:88:38:89:06:b3:7d:2f:42:
42:3f:b7:b6:a3:2d:4b:61:6b:4d:5d:24:03:00:3b:b1:67:d5:
06:82:e7:3f:f4:d3:53:39:0d:f6:58:ae:f5:9a:4d:70:f4:23:
ae:7c:f4:d2:ab:8f:08:54:05:7f:aa:45:19:32:22:f7:e8:d2:
f4:f3:d4:dd:bd:68:c7:78:30:d5:d6:39:cb:c4:e2:1d:2e:fa:
65:57:1e:89:5a:f1:ec:e4:29:6b:32:e2:37:27:ac:78:3d:59:
1f:f7:a1:24:5a:d2:ec:00:83:16:d5:67:85:58:0a:b0:b7:04:
9d:7b:e9:f7:64:0d:45:e2:1a:ef:b2:43:e7:0b:fb:5e:ad:b4:
87:15:26:cd:8f:d4:57:0a:04:68:9f:21:d8:23:3a:ea:06:e9:
0f:29:2e:6a:d3:08:9b:3b:8b:a9:0e:21:d2:1d:81:fd:22:00:
d7:56:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org