Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTiF93EVDaC3U_0EDTyq65cdCK0.roa
File: WTiF93EVDaC3U_0EDTyq65cdCK0.roa (raw, json)
Hash identifier: Is24eBOvN1ka+lmqTHUBOuD8WLM32i8UTh3USVO/G/k=
Subject key identifier: 59:38:85:F7:71:15:0D:A0:B7:53:FD:04:0D:3C:AA:EB:97:1D:08:AD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B1D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTiF93EVDaC3U_0EDTyq65cdCK0.roa
Signing time: Tue 29 Sep 2020 10:08:02 +0000
ROA not before: Tue 29 Sep 2020 10:08:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2845 (0xb1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:02 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=593885F771150DA0B753FD040D3CAAEB971D08AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:8e:fc:64:21:67:92:d1:6e:71:c3:17:f3:
9b:01:48:5c:22:2a:d0:71:00:7a:c7:8a:96:0a:44:
f6:3d:89:a9:cf:f3:10:19:31:35:48:19:86:16:3b:
24:b4:67:45:79:05:59:cd:dc:81:ef:87:1a:7b:7c:
37:d7:52:20:0a:10:97:d8:87:8c:07:5e:e5:fd:16:
64:b5:45:83:b2:51:97:2c:43:18:98:1d:a0:e1:de:
a3:4c:cd:15:fb:dd:dd:c2:53:1e:6e:8b:93:ac:98:
6e:db:9e:8e:44:43:f8:b0:bf:fc:61:8a:7b:cb:11:
c1:9a:e7:b8:35:3a:80:0f:52:4f:05:3b:38:8a:e7:
c4:8c:c4:0c:cd:51:0f:16:e4:37:cc:6d:2b:2a:4c:
ff:92:ed:b3:34:85:dc:bf:0c:5e:76:33:5e:2d:c7:
7f:65:b1:b1:ff:b6:d1:03:02:10:f1:a4:fc:46:ec:
da:1b:fb:b7:75:ee:5f:15:f1:fa:75:9b:bf:66:e6:
73:48:c5:e3:a7:d3:0f:d8:53:6e:33:7b:52:87:86:
0a:e9:2b:7c:df:48:24:9f:8e:7c:4b:bf:5a:f5:f2:
ef:1b:93:67:49:7c:85:8e:fd:65:45:4e:34:f7:8a:
28:fb:0b:cb:84:d0:a9:a2:96:07:c4:4a:d5:b9:89:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:38:85:F7:71:15:0D:A0:B7:53:FD:04:0D:3C:AA:EB:97:1D:08:AD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTiF93EVDaC3U_0EDTyq65cdCK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.220.0/23
Signature Algorithm: sha256WithRSAEncryption
95:29:36:63:3d:f6:6a:e0:b6:f5:99:54:7a:56:b6:1a:8f:bd:
09:4c:ab:da:3b:bf:e2:33:db:52:a4:b9:42:3b:cc:14:a6:f8:
4a:94:59:4d:bb:fc:bc:e1:9b:8f:0a:47:b7:cf:a9:78:77:3a:
9b:12:44:6d:91:65:5e:a9:20:52:ca:45:7a:40:6f:12:48:89:
ea:1c:c3:f0:68:8a:6a:9f:ef:a1:64:6c:87:6f:4c:49:f6:6f:
2a:c6:f1:c4:86:89:32:2b:e6:67:33:21:29:83:6f:a0:b5:35:
ee:6a:dd:dc:30:96:cf:68:ae:d7:ff:49:28:8d:2e:5c:88:4c:
45:d8:13:f9:f7:d8:48:30:e7:fc:2c:ed:62:69:31:04:e2:8b:
36:2f:f9:50:7e:c6:ee:9f:62:52:89:f7:ae:3e:6f:48:fc:75:
68:dd:04:85:4a:fc:f9:5f:16:4e:e1:95:f0:ac:66:0f:ee:c4:
5a:5f:37:b4:ff:16:5e:bf:7c:43:fd:9a:35:7d:c5:cc:a0:50:
35:71:0a:16:4c:29:8f:0e:f2:54:aa:4e:7a:f6:b1:af:06:8a:
c4:fc:dd:f9:54:63:4c:7f:ad:44:d8:f0:ac:37:0e:dd:38:6f:
7b:bd:87:b1:69:87:67:ae:28:50:fa:c5:29:f1:08:84:e3:35:
e5:ee:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org