Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ixsN43YSsw-Rnzy6ZA5kM7tlJDI.roa
File: ixsN43YSsw-Rnzy6ZA5kM7tlJDI.roa (raw, json)
Hash identifier: JBkOXlKdey7ISbn9Nqx6DRofXkxUJGKk4Bv5NfpkPR8=
Subject key identifier: 8B:1B:0D:E3:76:12:B3:0F:91:9F:3C:BA:64:0E:64:33:BB:65:24:32
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 107B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ixsN43YSsw-Rnzy6ZA5kM7tlJDI.roa
Signing time: Sun 07 Feb 2021 12:45:47 +0000
ROA not before: Sun 07 Feb 2021 12:45:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4219 (0x107b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:45:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8B1B0DE37612B30F919F3CBA640E6433BB652432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:60:db:8f:5d:c0:30:75:9b:6a:ab:35:fa:
41:c6:fa:97:73:16:a2:2e:e0:53:e0:e2:fb:48:37:
c6:59:7e:ab:18:83:dd:a5:c3:a2:a0:51:e7:14:47:
0c:ba:bf:37:b5:d0:f7:32:7f:a7:1a:29:9a:09:37:
c1:c1:d9:e4:7d:bf:f5:65:25:32:58:e0:3d:d8:8d:
64:73:ab:8c:05:5b:db:12:03:e9:ac:d1:e0:89:98:
9f:a0:67:d8:73:79:9a:53:99:05:e1:ff:43:9d:82:
75:b2:99:fe:09:ba:50:c4:0e:fe:50:3f:36:c3:a9:
a8:8a:b7:56:88:e7:dd:7b:9c:4c:2b:ee:e5:68:8f:
52:67:6f:b1:cf:bb:0f:9c:73:0d:7e:bf:3b:ef:ab:
b3:60:fa:62:9f:93:61:42:28:da:19:2a:c9:76:6d:
d0:f5:e4:66:29:51:9d:4f:8f:5b:30:50:b5:75:88:
92:29:ad:51:9e:9e:28:ca:c6:a0:27:42:bd:de:85:
dd:dd:b9:97:18:2e:1b:a8:76:c3:a3:fd:38:c0:55:
a7:a1:47:c1:fd:a1:be:c1:51:74:b9:eb:bd:03:e7:
eb:c8:da:cf:01:a6:dd:a3:dc:fd:6f:d3:83:0e:11:
ff:c3:ac:af:c4:5d:57:67:c1:78:4b:5e:0d:65:fd:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:0D:E3:76:12:B3:0F:91:9F:3C:BA:64:0E:64:33:BB:65:24:32
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ixsN43YSsw-Rnzy6ZA5kM7tlJDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.132.0/24
Signature Algorithm: sha256WithRSAEncryption
52:74:ab:a8:1f:30:96:32:f5:46:43:42:d0:40:b4:51:70:21:
50:7e:2f:1d:dd:30:23:28:fb:44:bc:7a:09:28:d7:8c:ee:60:
25:a0:17:a5:83:00:0c:1f:18:1a:8f:b7:cd:96:0d:c7:25:69:
e6:06:b0:f4:6b:62:50:59:21:8f:dd:58:57:3e:20:79:dc:a6:
bd:99:fc:f2:3c:f9:4c:89:3f:63:cc:6c:a6:03:f2:20:06:fd:
7f:d2:b4:cf:c0:60:e9:3d:bc:b7:1b:b8:d6:35:cb:c8:b2:9f:
c3:57:74:f2:74:a4:5b:49:b2:43:25:62:10:2b:46:a3:2b:ee:
65:e0:eb:4b:e9:10:58:5b:91:68:75:a2:9d:84:51:f1:ba:be:
f2:43:db:90:04:8c:0e:bb:79:72:79:6a:b1:f1:17:5c:e9:c9:
d2:f8:99:32:69:8e:17:98:f9:54:74:84:4c:66:a6:4f:5c:d9:
2d:32:0e:ea:dc:f3:a5:49:29:23:a6:94:8a:70:fa:7e:06:10:
e9:4d:06:51:68:29:80:bf:92:54:ad:c7:6d:ab:e5:d5:0d:7b:
14:d0:0e:68:9e:48:ff:4f:8d:f1:68:29:c7:d3:bc:e2:52:8a:
1f:14:66:5a:f3:48:b8:86:f3:18:1a:29:bc:36:d0:56:ed:5e:
8a:a4:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org