Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j_g1T5dO7HKUcNL4OTt5yF4bDSs.roa
File: j_g1T5dO7HKUcNL4OTt5yF4bDSs.roa (raw, json)
Hash identifier: tlBq4cIDnbtDnFVmi5Hxdwzwuaha2r9CB7dUjh7fDAU=
Subject key identifier: 8F:F8:35:4F:97:4E:EC:72:94:70:D2:F8:39:3B:79:C8:5E:1B:0D:2B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B51
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j_g1T5dO7HKUcNL4OTt5yF4bDSs.roa
Signing time: Tue 29 Sep 2020 10:08:17 +0000
ROA not before: Tue 29 Sep 2020 10:08:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2897 (0xb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8FF8354F974EEC729470D2F8393B79C85E1B0D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:ea:d5:43:bc:18:11:d6:a1:ef:26:e2:ba:
57:aa:4b:27:d5:57:ac:9c:96:98:b9:5d:61:d8:24:
4a:69:de:e5:88:83:99:3d:55:7a:e4:d0:45:9b:8e:
a4:0c:8a:64:9d:93:36:41:f4:52:f8:fa:86:e6:19:
39:b8:52:85:72:26:69:d8:d5:c3:92:5a:ea:5d:0d:
38:d0:f1:0b:04:35:ae:a2:12:56:61:a3:fb:0d:0e:
a8:14:10:0d:93:3e:f3:49:96:a7:30:96:49:9e:c9:
2b:3b:7e:74:2a:05:71:ca:1a:78:56:e2:ad:8c:4e:
f2:61:cb:ff:46:b1:04:18:44:0a:aa:f3:88:39:b0:
e8:c2:06:27:e4:3e:79:a9:de:c9:9d:1f:78:81:bc:
fc:9c:ef:94:10:6e:46:2e:c7:75:5a:f6:cd:b3:d3:
fc:86:e5:e3:27:d5:f4:53:38:8e:87:90:f7:1e:d0:
d7:a0:d7:6f:be:30:c7:7f:52:f2:e2:d7:ea:2c:eb:
36:e3:39:ec:82:6f:7e:8b:b0:2c:72:ca:61:08:87:
50:7b:a0:f6:a1:9c:f5:2f:f6:36:c1:ce:af:0b:50:
ad:68:37:a0:77:1e:47:50:1e:84:0b:dc:5d:b1:ef:
8c:a6:6c:df:13:3e:c7:0b:0f:a8:b3:55:e5:c0:8e:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:35:4F:97:4E:EC:72:94:70:D2:F8:39:3B:79:C8:5E:1B:0D:2B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j_g1T5dO7HKUcNL4OTt5yF4bDSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.206.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:c4:4f:42:87:73:e5:4a:8b:7f:f8:43:d3:58:c3:46:53:52:
79:d0:00:c2:19:9b:4d:28:59:1a:41:fe:24:de:b9:be:41:df:
99:11:e1:63:bb:9b:5f:2a:d5:8d:5d:0d:37:c3:a2:77:8b:23:
62:c7:91:5b:bc:72:aa:95:40:c2:00:a8:c2:87:fb:ea:4c:20:
40:35:72:78:b4:54:8b:41:22:c7:05:c6:79:37:e3:31:64:2a:
4b:d6:77:b5:05:08:dc:f5:02:fe:e3:28:82:52:62:bc:1e:4f:
1d:04:25:75:72:b6:03:a1:c7:21:29:84:f7:73:2f:36:5a:d2:
61:8d:8c:96:49:c6:c8:fb:71:6f:fb:4b:29:23:54:d2:a8:7e:
68:8a:75:28:18:86:cf:a0:90:da:c2:1e:cd:ad:80:75:07:e4:
91:3c:b8:b8:12:ab:12:df:c0:13:9d:fc:56:c3:7a:c2:3e:9d:
00:51:13:e8:13:00:fa:7e:6f:ac:b5:50:fb:55:29:21:03:6b:
37:46:2a:1e:aa:a4:a4:27:d4:8c:a9:92:46:1c:e7:79:2a:8c:
6c:ec:c4:91:f2:cd:40:b7:2b:41:13:68:42:af:09:d6:73:95:
6c:af:c1:8d:d4:47:a7:05:d1:08:b6:4c:65:64:03:61:19:cc:
4e:5f:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org