Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GRUGjBVrBiu24q4OP6AmYdq_eXE.roa
File: GRUGjBVrBiu24q4OP6AmYdq_eXE.roa (raw, json)
Hash identifier: 7iU3kXsKbbu611Cjs7FYSydT3x+Hony0vyz8LTFLPbY=
Subject key identifier: 19:15:06:8C:15:6B:06:2B:B6:E2:AE:0E:3F:A0:26:61:DA:BF:79:71
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 131A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GRUGjBVrBiu24q4OP6AmYdq_eXE.roa
Signing time: Wed 29 Sep 2021 02:55:22 +0000
ROA not before: Wed 29 Sep 2021 02:55:22 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 180.218.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4890 (0x131a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:22 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1915068C156B062BB6E2AE0E3FA02661DABF7971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:76:a0:00:2c:a2:20:d7:e1:d3:fa:95:c3:
36:14:8c:8b:dc:27:3b:b3:75:f5:35:80:c5:a3:4d:
d2:a6:aa:41:40:3d:3b:6a:88:c2:cb:d9:5b:27:36:
19:27:26:a2:6d:b8:8f:7e:a5:c9:18:ca:e7:e2:41:
63:65:85:6a:4b:02:82:ea:0e:fc:29:fd:1f:7c:7a:
f5:73:47:30:c3:43:9d:8b:0e:0a:ce:34:c0:09:69:
e9:61:9f:ec:aa:b3:ea:80:5b:7d:9a:92:fd:9b:03:
00:4e:58:57:22:11:3a:02:1c:30:16:13:2d:23:c8:
5a:60:5d:61:a1:6b:ea:52:c7:b2:1d:4a:ca:ed:04:
69:bd:d6:51:ff:74:10:34:95:99:ee:b2:ce:8e:48:
ff:eb:cd:69:00:ef:47:e8:05:1a:d5:0f:e3:2b:e0:
72:67:b6:69:00:b0:23:36:71:80:d7:13:99:ad:d2:
7a:28:c2:92:48:5d:1f:04:cb:92:98:68:b5:18:a8:
ba:47:8a:9f:7b:83:c5:a0:b8:ed:b6:af:30:c2:d3:
3e:5c:66:2a:2b:23:60:3f:72:50:87:34:7d:80:3f:
08:6e:e4:bd:33:77:d5:9d:92:26:b6:54:fa:20:0b:
13:71:da:82:3d:d2:a6:b4:f6:de:bb:63:d1:0b:82:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:06:8C:15:6B:06:2B:B6:E2:AE:0E:3F:A0:26:61:DA:BF:79:71
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GRUGjBVrBiu24q4OP6AmYdq_eXE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.240.0/20
Signature Algorithm: sha256WithRSAEncryption
07:4c:78:a3:0a:46:05:b2:b2:03:69:80:32:ae:45:54:aa:50:
ac:b5:11:c6:76:ed:98:63:e9:8c:84:99:42:ed:9b:36:49:65:
5f:89:ed:d8:ce:64:9f:dc:66:0f:df:1a:90:ef:05:84:48:cc:
33:c5:88:70:34:85:34:fc:c3:14:8c:a6:01:8b:a8:b9:89:a2:
31:92:bd:37:9b:37:e6:89:93:d7:ed:37:47:a7:40:ac:4b:19:
90:4f:b3:60:31:4e:f2:f4:f2:10:36:53:f9:57:fd:fa:da:25:
40:e9:d8:d9:1c:7a:27:eb:e6:d1:14:33:72:7e:e5:58:98:0b:
1a:3c:75:c2:c0:30:2e:d8:c1:4d:70:81:1b:7e:4d:72:24:87:
dd:77:fc:14:85:0c:7f:0d:51:ed:22:a9:9b:43:4d:f2:fc:e9:
f7:db:5b:4c:10:59:ff:2a:e6:e0:0c:86:3d:46:22:ad:95:a7:
a4:bb:dd:3f:e1:6d:95:54:c4:9c:1b:84:55:83:42:6f:f2:59:
2f:7e:47:7f:8a:4c:a7:03:04:6b:0a:07:18:32:52:74:fb:49:
9c:7c:b9:24:51:80:fa:d5:7c:74:c9:d8:9f:dd:7c:28:4d:61:
72:7c:74:b6:42:87:7f:b5:0a:ff:61:0a:0c:3d:15:01:c1:05:
70:52:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org