Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3LX1joN3U51ermdqudw18X-KUUE.roa
File: 3LX1joN3U51ermdqudw18X-KUUE.roa (raw, json)
Hash identifier: rvVbhw4LEeQChGxNfH4GneCTJTqVZSWhPhGIOzbvQYY=
Subject key identifier: DC:B5:F5:8E:83:77:53:9D:5E:AE:67:6A:B9:DC:35:F1:7F:8A:51:41
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B74
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3LX1joN3U51ermdqudw18X-KUUE.roa
Signing time: Tue 29 Sep 2020 10:08:26 +0000
ROA not before: Tue 29 Sep 2020 10:08:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 180.218.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2932 (0xb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:26 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DCB5F58E8377539D5EAE676AB9DC35F17F8A5141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:44:f6:0d:05:28:d2:c7:d7:26:37:c5:92:
9f:11:f8:1f:da:8e:57:17:82:d5:e8:ce:55:f1:d9:
dc:08:b1:71:f5:bc:41:73:7e:9e:ad:89:9c:c9:ca:
66:8d:d2:da:9f:96:5e:9c:85:3f:78:2d:c4:6f:24:
41:a2:f0:6b:95:66:06:d3:bb:46:be:f2:11:97:2b:
71:05:2d:c1:3a:a9:52:db:45:d6:57:d7:96:4d:b1:
2f:68:74:53:34:04:ef:21:35:56:4a:f5:70:8f:fc:
c3:bd:f4:a9:c5:a8:9e:eb:ab:30:97:4d:26:3b:3c:
c9:b5:26:33:d8:9b:d7:91:91:6d:3c:5f:f6:c3:e4:
ee:4b:4b:9b:47:8d:bc:ad:ea:01:a1:5e:03:f1:38:
15:50:34:a5:be:38:93:5c:01:d5:dd:cf:65:8e:fc:
cf:e6:04:3f:1c:44:b3:0a:6f:33:da:f9:54:35:04:
bd:1a:82:3e:4a:55:b1:13:a0:bd:c7:2d:31:4b:17:
5a:2b:c8:2f:bc:73:dd:fb:f2:41:2c:d9:8f:25:bd:
68:2d:10:b4:cb:2c:85:a5:bc:c9:61:87:67:ac:6d:
e6:19:99:77:90:b5:87:90:96:4a:13:b6:38:79:9e:
6e:65:4a:56:c9:16:e3:22:4c:66:56:8a:2f:7b:ca:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B5:F5:8E:83:77:53:9D:5E:AE:67:6A:B9:DC:35:F1:7F:8A:51:41
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3LX1joN3U51ermdqudw18X-KUUE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.120.0/21
Signature Algorithm: sha256WithRSAEncryption
40:c9:76:8f:22:1d:95:84:f2:52:b7:1a:7b:3f:3c:cb:93:8d:
24:ff:0c:76:c1:c4:ae:a3:4b:8e:59:23:b2:b3:a0:e9:88:c3:
5d:0c:18:dd:64:9b:f2:87:84:c0:36:fc:12:49:34:8e:23:1f:
68:6c:8d:26:9a:fd:e4:1f:75:0f:0a:6e:60:45:8d:0a:dd:8c:
d9:18:45:b7:5d:ea:10:dd:f2:28:2b:5a:8e:99:5c:18:1b:f5:
9a:8d:13:c2:ae:8b:6b:0c:10:93:2c:68:c6:13:c8:d8:19:11:
80:8e:56:b9:96:c8:04:2b:cd:5d:26:4c:5f:2d:a0:ae:4e:57:
44:37:99:9e:82:f4:03:b4:b4:81:f5:d9:62:7d:26:3d:1f:8e:
12:02:2e:20:27:cf:8f:5d:07:d9:e8:2a:81:34:5f:38:18:db:
45:3b:42:e4:d6:67:1e:2d:07:1f:b1:b5:f2:85:63:21:42:ba:
01:72:c3:03:7c:80:04:16:11:5b:7b:e4:89:01:39:fd:4b:d4:
6e:f7:fa:5a:03:fb:43:43:6f:68:f0:06:ea:e9:bb:85:98:ee:
10:40:84:79:f8:04:ab:e6:ca:49:4f:5a:95:c2:4d:5c:78:b7:
e0:c2:9d:ca:1d:0f:95:c3:03:7a:24:a9:15:c2:4b:45:3c:c0:
e8:73:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org