Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WyZu9JWvpufwgfVVZLeGHniyrOs.roa
File: WyZu9JWvpufwgfVVZLeGHniyrOs.roa (raw, json)
Hash identifier: 42Whylk6yAvSIHkgdoWceFHrVHsIfF4uEMhiaUrgPIA=
Subject key identifier: 5B:26:6E:F4:95:AF:A6:E7:F0:81:F5:55:64:B7:86:1E:78:B2:AC:EB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12E8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WyZu9JWvpufwgfVVZLeGHniyrOs.roa
Signing time: Wed 29 Sep 2021 02:55:07 +0000
ROA not before: Wed 29 Sep 2021 02:55:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4840 (0x12e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5B266EF495AFA6E7F081F55564B7861E78B2ACEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:7f:83:26:27:52:fa:96:dc:56:0a:7e:a6:
80:62:1a:16:f9:40:66:1f:46:a5:11:d2:5a:30:d3:
fd:9d:28:40:d3:05:52:33:6c:0e:d1:6f:50:5f:e4:
54:2d:9e:cb:c9:d5:aa:7f:23:27:ee:71:02:07:c8:
61:b9:fd:c0:58:87:5a:2b:29:9f:ff:e7:ed:f8:06:
a1:c2:81:58:af:03:ad:c3:6b:d2:61:a7:65:86:ac:
28:83:bb:ef:ef:07:14:45:1e:fa:d0:7d:d3:43:f4:
66:1e:98:0e:a2:5a:1a:04:ee:56:3b:d4:65:2a:bb:
24:57:4a:fe:20:65:b8:05:ef:39:49:e3:d3:f5:c0:
df:b2:d4:00:35:de:c9:e8:a8:17:94:a5:3e:70:a9:
14:c4:42:df:42:12:4e:b3:ae:0d:bd:9b:a6:d8:6d:
38:25:e0:9c:a0:ff:96:39:79:ae:54:f5:ab:e3:e7:
10:01:30:9e:41:a7:d6:32:bf:d8:ac:64:91:7b:e9:
7e:5c:1e:a5:72:3c:fe:a5:fe:ee:ca:a6:cf:10:d3:
c9:e0:79:f1:e4:0c:8e:68:ee:af:ab:be:ca:f8:5a:
05:e6:a6:46:a6:86:90:03:d7:d3:ea:c8:b8:c5:28:
ad:9b:c5:f3:f2:39:c0:b7:13:0f:33:18:e3:ad:f9:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:26:6E:F4:95:AF:A6:E7:F0:81:F5:55:64:B7:86:1E:78:B2:AC:EB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WyZu9JWvpufwgfVVZLeGHniyrOs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:98:00:8c:8d:ce:02:d7:30:80:5f:99:2d:a4:a2:f6:00:de:
f4:58:70:13:99:46:3c:f1:17:14:49:6a:8e:91:c0:92:03:5c:
0b:ab:cf:71:9e:6c:c2:e2:09:73:6e:ad:e5:e3:40:c2:7e:95:
12:6f:3d:98:31:3d:18:e4:57:6a:26:59:a1:75:b4:83:3a:6f:
c9:04:83:6c:67:42:7e:be:cf:48:c4:dc:53:c9:e5:93:6d:bb:
f8:88:2b:d7:ed:b6:32:cc:74:ed:02:d8:b3:f7:78:dc:fa:09:
6c:ea:16:cb:28:76:12:8a:8b:ed:fa:8e:db:07:05:53:df:82:
72:f0:39:cf:4d:4f:0c:e2:d8:5b:6a:4e:82:85:e3:4e:5a:a0:
86:f2:3c:30:36:6f:a1:1d:63:3e:09:95:df:1d:fb:ff:61:86:
f1:39:05:1f:76:47:ff:1b:e0:78:c4:b4:c4:44:a2:a9:03:c3:
50:30:c5:ff:3a:48:26:d8:76:fa:1d:48:a5:dd:ee:68:0c:9e:
ae:ea:5b:18:1f:89:0b:54:4e:af:57:b8:c5:49:c0:55:2c:52:
ff:b7:66:b3:a4:4f:b1:a0:f8:96:b5:b9:79:b5:96:56:40:02:
6f:78:d9:46:fe:29:fd:4d:9b:9a:7a:e1:23:22:98:39:d0:4e:
b3:29:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org