Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x51HDzTrDXiFuyO26lGVaMC5rzg.roa
File: x51HDzTrDXiFuyO26lGVaMC5rzg.roa (raw, json)
Hash identifier: OnW/JKw1FsjWbiQHQA1szSH4iBwXJPK1l2kXF7jh7/4=
Subject key identifier: C7:9D:47:0F:34:EB:0D:78:85:BB:23:B6:EA:51:95:68:C0:B9:AF:38
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B04
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x51HDzTrDXiFuyO26lGVaMC5rzg.roa
Signing time: Tue 29 Sep 2020 10:07:54 +0000
ROA not before: Tue 29 Sep 2020 10:07:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2820 (0xb04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C79D470F34EB0D7885BB23B6EA519568C0B9AF38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:53:36:3d:ec:19:bc:c4:69:9e:ef:a6:5b:
2b:c9:92:f5:d0:08:d2:03:2c:85:13:d1:c2:fc:2a:
33:c7:2d:59:4f:11:bf:81:ca:40:30:83:23:f2:06:
46:f0:03:ad:fa:c7:a5:bb:ba:4b:f1:89:fd:8b:91:
22:d6:e3:28:78:ca:27:d7:98:2c:52:50:91:2d:2e:
72:02:8c:d5:80:b8:35:4d:d2:df:75:d2:fe:ab:a2:
b9:f8:e8:cb:d0:1c:b0:56:bd:98:0e:fb:b4:d7:ac:
0d:03:84:09:9d:5a:7a:9b:12:2b:1b:b1:76:85:e5:
4d:9c:81:61:5b:ba:a9:39:1f:db:4e:5b:59:13:14:
6a:83:a1:50:d7:18:48:9c:a6:4c:c7:1c:cb:18:9a:
5f:8e:96:df:6f:6e:a6:f4:c9:76:3f:a6:cd:c0:79:
9b:bc:ef:2a:0e:fe:3d:93:f5:a3:c7:ac:37:d2:a3:
d4:34:ac:d8:21:28:45:99:86:4f:8d:71:be:ea:0d:
6f:d1:7d:d1:bc:eb:94:be:b1:14:50:08:65:0f:3d:
45:4a:c4:be:73:09:83:9d:fd:dc:d5:65:60:18:57:
43:f6:30:b9:bb:c1:14:09:34:a2:25:7f:2e:4a:ce:
25:00:2e:a6:56:5c:21:5e:3e:a5:6b:44:e3:04:d7:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9D:47:0F:34:EB:0D:78:85:BB:23:B6:EA:51:95:68:C0:B9:AF:38
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x51HDzTrDXiFuyO26lGVaMC5rzg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.56.0/21
Signature Algorithm: sha256WithRSAEncryption
78:e7:03:82:0b:33:50:e3:6f:8e:fe:d9:6e:47:8d:00:d2:33:
e3:40:4f:88:44:cd:5c:e2:15:94:c1:a4:f3:ca:42:7a:7f:f1:
15:c9:18:cd:c5:0d:90:21:a2:bc:d1:db:5a:12:40:ad:c2:9a:
96:74:d4:01:36:5b:7a:81:df:08:be:54:29:92:1a:93:85:37:
31:8a:1f:cf:9c:2e:8e:81:12:5a:26:24:8d:85:2c:f5:0e:d1:
95:e5:6a:55:00:80:ca:be:81:66:69:1d:dc:d0:89:a5:25:04:
db:18:f3:86:dc:0a:a0:99:34:43:0b:dc:a8:2f:bc:80:44:7c:
04:a8:88:2f:76:b4:22:f7:23:b8:70:6a:90:62:7b:cc:28:e0:
ff:89:d4:d2:2f:44:4e:0a:a5:d4:32:a7:76:73:66:f6:13:92:
ed:00:d9:d6:ee:a6:97:c6:b6:a8:52:0d:26:97:37:52:1e:40:
17:75:b9:7b:d2:71:7a:a8:fd:14:cc:6c:a0:e8:ea:36:be:53:
a5:18:87:2b:93:f1:19:7f:0c:af:ab:af:ce:48:b6:35:76:8e:
82:31:29:a8:b2:22:a9:2b:1e:1c:9e:c3:74:e1:2a:b7:96:30:
34:47:64:11:65:03:54:85:75:53:7d:6a:63:c3:5e:a0:85:99:
e7:85:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org