Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uVQABJqZfx2ybzPpHpxUIR8XPh0.roa
File: uVQABJqZfx2ybzPpHpxUIR8XPh0.roa (raw, json)
Hash identifier: lOF6sYPS9ng6N7O6FUfpkK2Gke1zQcKyhqU7flQCjww=
Subject key identifier: B9:54:00:04:9A:99:7F:1D:B2:6F:33:E9:1E:9C:54:21:1F:17:3E:1D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1079
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uVQABJqZfx2ybzPpHpxUIR8XPh0.roa
Signing time: Sun 07 Feb 2021 12:45:44 +0000
ROA not before: Sun 07 Feb 2021 12:45:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4217 (0x1079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:45:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B95400049A997F1DB26F33E91E9C54211F173E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:75:4a:7c:a7:30:35:6b:25:07:ed:b1:b6:d9:
23:50:21:d9:7c:52:94:2a:d2:7e:12:51:ab:81:58:
b6:c0:8b:3d:0f:32:11:7f:a7:12:b0:69:35:8d:f6:
f4:f1:a2:c2:29:85:e9:56:87:e6:e8:72:68:bb:b2:
28:46:4a:45:2b:45:9c:b3:53:d8:0d:89:86:99:8e:
88:5d:7d:84:2c:36:45:f5:fe:2e:b6:5f:a3:1b:f2:
a6:cd:05:01:38:a1:67:12:34:13:48:15:37:14:76:
0a:61:c4:10:9d:4b:ed:d7:12:81:b2:ee:78:de:b3:
ac:79:16:80:e9:68:fd:bf:bd:7a:6a:b9:59:a1:42:
9e:0e:75:0c:1c:d6:3e:b3:1c:f5:0f:4d:ad:18:78:
00:8e:dd:fd:55:ea:66:ba:33:d4:5f:70:8d:8a:5b:
96:a6:a2:8b:5e:e6:37:75:34:26:b1:af:8a:1d:6d:
7f:93:4c:ef:fa:b6:8f:a1:9a:9d:8e:7b:3b:fc:66:
2e:7f:33:ba:33:24:11:af:b9:d1:2d:45:d3:f0:1b:
6d:33:22:67:ce:f0:4f:36:07:02:b2:85:c3:be:19:
36:df:49:aa:28:87:a9:32:79:d4:3d:0b:9c:ce:c2:
78:8f:7f:6e:76:f7:12:6b:27:73:1e:df:d4:ac:b3:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:00:04:9A:99:7F:1D:B2:6F:33:E9:1E:9C:54:21:1F:17:3E:1D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uVQABJqZfx2ybzPpHpxUIR8XPh0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.56.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6e:4c:fd:6a:75:33:da:b4:83:83:e8:76:91:f0:bc:98:45:
47:2b:89:21:45:6a:ea:4b:0a:9f:fe:6a:77:4f:5e:5e:c8:45:
fd:33:16:33:f2:4c:31:0c:cf:3c:41:f5:72:3a:b7:65:99:ca:
a8:4a:d6:49:2d:79:17:5a:3c:e5:00:57:b8:ce:6c:89:be:a6:
70:76:b5:28:61:49:08:a0:c8:de:c2:8b:79:e9:a7:25:d6:d9:
47:80:a1:6d:71:86:87:87:55:72:54:7d:36:2d:22:c5:df:c9:
9c:3d:14:04:b3:cd:a1:4c:eb:6e:a5:da:bc:ac:7d:ef:4d:02:
7d:33:1b:74:13:4c:6b:ee:a1:73:c2:d1:91:a3:57:08:3e:d6:
8d:a0:6e:b4:2b:85:6b:40:5e:37:2f:20:d4:3d:3b:74:93:3c:
94:71:98:e8:78:c3:a2:78:ff:6f:34:8f:29:d1:e1:72:73:ba:
0e:8b:66:07:f4:b8:28:e8:93:d1:7e:1e:47:a7:50:e5:69:d9:
08:b1:78:34:a6:d1:89:c7:2b:a9:b5:e5:76:e4:ae:5e:4a:4b:
f0:75:69:23:87:7a:da:ec:97:8f:d0:01:64:83:c6:1e:d5:9e:
d3:55:0c:3a:b0:eb:74:4e:a0:bc:1b:c3:7a:e2:32:6d:80:6b:
0d:b1:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org