Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SvsWSGNapdQhyUFmhbZf2Am4tWM.roa
File: SvsWSGNapdQhyUFmhbZf2Am4tWM.roa (raw, json)
Hash identifier: ygHe5x1FbL6Fk59wejSRwMB9XJ3I0YMrpjeJUCdbMa0=
Subject key identifier: 4A:FB:16:48:63:5A:A5:D4:21:C9:41:66:85:B6:5F:D8:09:B8:B5:63
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 106F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SvsWSGNapdQhyUFmhbZf2Am4tWM.roa
Signing time: Sun 07 Feb 2021 12:44:47 +0000
ROA not before: Sun 07 Feb 2021 12:44:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4207 (0x106f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4AFB1648635AA5D421C9416685B65FD809B8B563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:eb:2b:74:19:5e:c6:f3:9c:29:57:66:89:32:
07:d0:53:9b:dd:b0:58:a3:40:87:9f:d7:be:f6:10:
2d:da:b6:b3:37:53:4a:59:b2:00:9d:94:8c:7c:3b:
33:50:0e:d5:60:1c:31:11:45:0a:86:5a:14:87:30:
91:4c:c3:da:16:ba:a7:ad:a4:c4:7c:5f:61:77:8e:
f3:49:38:b4:ea:33:a7:1d:ba:b1:04:b1:4a:ce:b2:
b8:7a:d3:be:97:ba:e3:b9:2b:57:4c:2c:dc:ae:fe:
bc:b8:b2:d3:56:a0:71:86:41:40:f5:5c:cc:20:99:
f3:75:ae:98:2b:fa:5d:fa:4a:0c:38:63:f6:1a:5d:
88:0a:a4:2d:15:df:1f:58:ae:13:dd:68:d6:84:ea:
95:f7:65:91:e6:1b:8b:e9:af:d9:f2:e7:c7:c4:93:
38:e3:4c:4c:22:00:c9:09:b0:de:a8:16:9d:77:ae:
36:60:c3:dc:00:4a:69:de:25:80:89:6f:31:47:92:
6c:74:c1:d1:95:22:b7:62:cf:a8:61:20:2a:7b:96:
51:c7:39:b9:8c:4f:18:a2:b4:2b:a0:9b:88:32:79:
fe:0e:80:71:95:8e:2a:55:49:8c:72:04:e7:f5:e5:
82:04:02:b8:9e:37:3d:cb:db:0a:99:0e:43:4c:4e:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FB:16:48:63:5A:A5:D4:21:C9:41:66:85:B6:5F:D8:09:B8:B5:63
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SvsWSGNapdQhyUFmhbZf2Am4tWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.220.0/23
Signature Algorithm: sha256WithRSAEncryption
25:f9:8e:1a:d1:7a:22:58:8c:b9:72:92:40:bd:7c:19:db:82:
a7:e7:c5:46:07:67:6f:b6:74:7a:2d:ba:90:66:46:73:93:68:
74:75:eb:1e:0a:a6:1e:23:80:1b:fd:0a:b2:3c:44:fb:76:9f:
51:21:32:5d:89:03:17:ce:e0:04:07:14:e3:3d:3f:72:e1:61:
7c:42:22:a2:d7:e6:76:f6:10:44:1e:12:ea:25:87:ff:18:b6:
ba:78:10:c4:a4:8e:f6:a7:23:a6:a9:41:51:12:51:01:7a:f9:
b9:14:d6:07:dc:c8:de:90:9e:b4:06:69:48:59:a7:cb:e3:06:
1d:fa:20:5a:1d:24:e4:ba:75:f3:b3:d6:75:a8:f4:39:44:bc:
e1:c4:d9:3b:6f:ce:0a:43:ad:40:a7:f2:33:7b:b2:c6:78:de:
bc:92:fe:a4:f6:6f:63:d4:7d:5d:d7:2b:16:d4:75:b5:ac:8a:
f5:fc:c9:61:d3:48:eb:c8:a7:3b:fb:59:c8:7e:29:0a:38:a1:
a5:2c:cd:84:2c:cd:06:d2:47:3f:64:8d:6c:63:cc:9e:48:03:
9a:cf:c0:54:9f:62:6f:bc:fd:03:50:5a:80:c2:89:f1:0f:a0:
64:d4:e7:f3:57:f0:f6:65:3a:e2:5a:ad:c7:c6:b8:bf:03:6e:
be:c9:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org