Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CwjRDIrg0S4UBRqSdqKjwj3IR1w.roa
File: CwjRDIrg0S4UBRqSdqKjwj3IR1w.roa (raw, json)
Hash identifier: ekEUk5Ke6pQL2ARvJs4peT8QcL3d+tHvS/uRTtJFnVg=
Subject key identifier: 0B:08:D1:0C:8A:E0:D1:2E:14:05:1A:92:76:A2:A3:C2:3D:C8:47:5C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BAE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CwjRDIrg0S4UBRqSdqKjwj3IR1w.roa
Signing time: Tue 29 Sep 2020 10:08:42 +0000
ROA not before: Tue 29 Sep 2020 10:08:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0B08D10C8AE0D12E14051A9276A2A3C23DC8475C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:b8:8b:3c:59:a5:92:3b:2e:38:7e:8d:ae:
28:2a:41:09:0a:26:93:fa:21:b1:f9:88:75:a3:72:
17:a9:37:f4:cd:42:5a:dd:cd:3b:25:ae:a4:0c:8a:
ad:ad:e0:1f:98:fe:4a:21:58:c1:30:16:a9:7f:72:
c6:2c:42:55:76:bd:35:8c:e6:6a:e2:57:5a:85:e8:
29:6c:e9:c3:80:9c:91:45:1e:46:87:20:b3:66:0f:
98:d7:98:f4:03:96:a0:87:fe:21:d3:c6:76:69:75:
e1:83:62:a0:6f:0f:7c:78:5c:ff:62:ff:e3:8f:e4:
73:06:15:fc:41:a0:b6:04:9c:31:d5:36:33:d2:c2:
b7:f2:54:de:0e:37:32:5f:d5:d5:6c:f1:fc:1f:aa:
4c:0e:30:80:5c:e6:75:a0:58:98:a5:3c:f4:f0:9c:
f6:7f:3b:82:79:6d:c2:0b:b5:90:45:3f:56:b0:62:
76:75:b4:f0:f6:76:ab:2f:58:5b:12:c5:2a:ca:43:
4c:07:54:7b:74:d0:4c:03:3d:fa:08:50:ed:c8:7d:
6c:92:11:62:46:54:41:0d:5e:3b:7d:57:a6:49:2f:
c3:68:6c:d0:3d:d7:09:c1:92:23:7f:a5:27:fc:ce:
27:3a:99:df:35:f3:67:91:99:76:5d:8c:ec:50:6b:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:08:D1:0C:8A:E0:D1:2E:14:05:1A:92:76:A2:A3:C2:3D:C8:47:5C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CwjRDIrg0S4UBRqSdqKjwj3IR1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:58:0f:98:a8:7d:87:05:54:c8:1c:ec:90:22:1a:eb:dd:2c:
48:4e:79:3f:f2:b8:32:7e:e8:2b:35:2b:7b:44:dd:44:09:7e:
dd:e2:b7:c7:06:98:74:55:8f:a7:54:13:ba:c8:d4:dc:c0:9d:
f6:c0:db:1c:41:ff:07:85:9e:58:88:94:af:3f:1b:72:19:f0:
ff:81:78:8f:80:4d:12:2c:0a:57:21:0d:fe:2f:36:8b:55:94:
7e:b0:98:64:ab:a7:18:75:9d:0e:d1:e9:19:5c:02:03:bd:55:
30:4a:bb:9e:97:3f:1e:dd:3b:f1:e1:7c:d1:55:e9:78:04:f7:
a2:97:e5:fe:9a:94:5b:09:33:de:59:62:54:9c:b1:67:3a:7b:
ec:db:05:68:b1:9a:d8:03:49:79:8c:f6:f1:0f:1d:e2:05:5f:
3e:f8:da:35:30:1e:26:30:9c:19:49:7f:a3:86:bd:f6:96:86:
59:fa:e6:fc:2d:54:22:7d:a1:77:ed:59:64:99:e4:56:ce:f6:
39:e0:89:9c:47:a4:9b:97:c5:b0:56:98:12:48:76:de:77:a4:
9e:eb:45:7c:71:24:38:e4:29:f2:ea:62:8d:13:bc:7a:ad:6a:
1c:ce:5a:b3:0e:bc:bf:a5:86:4b:d4:b8:ca:59:bb:a0:70:59:
71:e8:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org