Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oEC9CcD8uU5XhzSROvh8FqtbeVA.roa
File: oEC9CcD8uU5XhzSROvh8FqtbeVA.roa (raw, json)
Hash identifier: tuxk+5m3+XvS16t5B5Dz3yCimvpHi3UIbS91ZDzNqxY=
Subject key identifier: A0:40:BD:09:C0:FC:B9:4E:57:87:34:91:3A:F8:7C:16:AB:5B:79:50
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B0D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oEC9CcD8uU5XhzSROvh8FqtbeVA.roa
Signing time: Tue 29 Sep 2020 10:07:56 +0000
ROA not before: Tue 29 Sep 2020 10:07:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2829 (0xb0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A040BD09C0FCB94E578734913AF87C16AB5B7950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:43:24:0c:1f:75:63:3d:b1:d7:3f:49:15:
e9:ad:68:21:76:50:74:7c:ec:26:17:9d:b2:af:bb:
9e:f1:10:34:6b:3c:60:f0:ed:9b:b0:5f:8c:d9:10:
45:6e:b6:76:b7:ed:6d:a9:9e:64:80:4d:60:09:1b:
2d:73:26:a2:cd:4e:b7:d5:99:c6:d7:2d:33:4b:61:
e6:08:59:e8:50:0f:85:3c:72:bf:66:a6:3a:d3:42:
6a:c0:e7:e3:c5:a1:5e:76:64:9a:2c:7b:7f:af:d3:
57:7e:dd:9f:fe:5c:45:31:5f:86:5f:bc:1c:ea:da:
1f:9a:70:c7:1a:33:a3:b3:8b:31:34:cc:00:96:84:
63:1c:2b:79:94:34:ef:a2:7f:a2:28:e8:53:ac:2b:
f1:93:1f:4b:55:27:76:59:3b:7b:bf:84:63:ae:75:
75:72:d8:c7:3b:69:15:4f:11:f2:7a:95:f7:2f:1c:
ee:bd:5d:dc:00:82:6e:34:cf:3c:8f:a5:c0:81:8b:
49:ea:78:11:90:32:57:22:2b:cf:54:e5:3f:16:ea:
f9:14:db:f7:48:8a:60:dd:96:ad:93:e1:a0:f8:d2:
38:a8:99:10:ad:07:d8:d1:18:96:b4:c1:d4:1d:f4:
24:fe:12:77:29:dd:74:97:ea:15:38:80:69:fa:ba:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:BD:09:C0:FC:B9:4E:57:87:34:91:3A:F8:7C:16:AB:5B:79:50
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oEC9CcD8uU5XhzSROvh8FqtbeVA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.141.0/24
Signature Algorithm: sha256WithRSAEncryption
04:89:1c:eb:bf:17:13:a4:4e:d7:b2:bb:65:b6:5f:4e:53:ea:
df:15:24:77:6f:82:20:bf:a4:0a:9b:3e:de:86:b7:ca:41:10:
c9:23:df:5f:0c:ef:4e:1c:b2:95:e0:93:29:91:4a:0f:9f:ad:
0c:31:a3:b1:83:86:12:b5:34:c2:f6:0f:94:38:19:88:07:39:
78:7a:10:b0:74:80:83:60:1b:42:c5:71:e8:6a:fc:45:ce:85:
4b:8e:ad:8e:24:44:c5:6d:20:44:73:9a:c5:ef:db:4f:d2:6a:
9d:4d:81:b1:96:b6:94:e5:4c:67:08:b2:92:ba:a2:29:84:1e:
54:a3:ee:7c:bf:59:14:17:24:2b:ae:72:bf:52:9f:6d:97:f7:
f4:d5:db:d1:bf:09:1a:d0:16:72:6a:a2:a4:f5:a7:0e:92:d8:
66:6e:1e:fc:b3:aa:07:07:08:9a:87:10:49:74:0b:02:95:f0:
d6:21:33:95:dd:0d:49:79:e2:e8:c8:2e:79:b8:df:76:4f:e7:
24:73:a3:3a:6d:fa:73:31:54:0a:fd:8a:0e:11:55:05:bd:4b:
91:cc:d2:d2:cf:85:53:0c:cc:2d:a6:b0:49:fa:ab:d2:95:63:
7f:bb:7a:49:15:41:3f:17:55:79:78:20:53:47:59:d6:cf:63:
0d:01:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org