Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h27AV6cabn8V7IQvipIE6uAhSG8.roa
File: h27AV6cabn8V7IQvipIE6uAhSG8.roa (raw, json)
Hash identifier: TR42ZU13b/QD62ir12c/+nenucl6n8r2M8V5g2Q3W0k=
Subject key identifier: 87:6E:C0:57:A7:1A:6E:7F:15:EC:84:2F:8A:92:04:EA:E0:21:48:6F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BA7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h27AV6cabn8V7IQvipIE6uAhSG8.roa
Signing time: Tue 29 Sep 2020 10:08:40 +0000
ROA not before: Tue 29 Sep 2020 10:08:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=876EC057A71A6E7F15EC842F8A9204EAE021486F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:15:36:39:a9:0d:56:ff:a9:e2:f2:e8:e2:bb:
9b:0a:38:4f:5a:cc:53:6e:1e:bb:64:d8:67:a9:d9:
76:24:48:2e:3c:ac:d6:33:c4:3c:93:fc:c4:55:2b:
b5:dd:07:12:5a:f0:4c:c7:84:a8:2f:d8:5e:cf:47:
63:40:26:1f:ef:7a:d7:90:e7:f7:57:76:fb:a0:ff:
5a:25:f7:5f:ea:fc:51:1b:59:58:95:48:4e:39:3b:
72:54:c1:18:e4:21:34:f7:d2:1f:42:4f:aa:0d:5b:
0b:5d:03:6e:0f:12:c7:c0:90:db:0f:12:91:3e:14:
82:73:d6:bc:43:67:14:ae:de:97:b0:3f:0a:3b:71:
77:6c:e9:af:0e:36:dd:88:0c:9a:41:31:66:35:3e:
ae:42:62:53:2e:12:0c:ec:aa:43:64:49:95:b7:eb:
12:f0:80:4e:5e:75:64:df:db:78:8a:e4:bb:c5:e1:
5b:d3:1a:e6:dd:83:05:0e:48:c3:dc:d9:2b:00:93:
57:a9:a6:7d:69:1e:3f:50:41:de:53:4a:d6:13:72:
91:89:6b:e9:fa:91:a3:ea:bb:80:55:fe:c5:24:f9:
85:6a:3b:b2:1c:f9:39:79:56:68:75:38:ce:5b:e8:
e5:b9:ed:dd:d5:fe:be:8e:eb:57:18:b0:e9:85:33:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:C0:57:A7:1A:6E:7F:15:EC:84:2F:8A:92:04:EA:E0:21:48:6F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h27AV6cabn8V7IQvipIE6uAhSG8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:1e:8d:fe:f1:6b:da:3a:dd:f7:13:d8:6e:e1:ef:87:3c:5a:
91:0c:9b:15:6d:11:88:77:f0:71:21:f6:8e:3c:cb:2f:0d:8c:
d3:67:4f:ee:54:34:09:c7:bc:17:14:32:7b:a3:93:1e:a7:ea:
57:98:0c:18:72:49:d6:70:0b:85:4a:21:d2:73:ba:3e:e7:ad:
92:5b:8e:f2:55:5b:ac:ad:7f:97:96:7a:6a:38:d0:b1:c7:6c:
b8:09:46:8c:6e:13:47:b7:62:e7:ba:75:62:7c:99:33:61:30:
d5:05:47:83:94:9c:18:c3:b4:af:2c:06:7f:b3:92:41:67:19:
bb:31:ce:fe:0f:48:8b:e9:37:cd:10:09:18:53:ac:3a:d8:4f:
e3:a5:41:86:90:d9:8d:71:3f:82:c6:89:70:53:78:8e:d7:56:
01:16:7c:ec:d3:69:58:00:ab:0c:cd:69:f1:17:3b:10:44:55:
d0:47:b0:e2:b8:e7:1e:5a:6f:e5:64:d5:48:7c:94:72:67:c5:
4b:63:67:f3:ee:f2:f5:69:20:c1:89:73:11:a7:59:e5:f4:73:
6c:3b:7b:64:3b:54:4c:15:b7:85:45:ac:12:83:18:0d:3b:ff:
5a:09:a5:36:43:19:78:50:f5:1f:19:1b:d4:92:36:03:49:d0:
42:7e:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org