Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4k9yCzr5CpGrUdkQTKKxJNUXIYY.roa
File: 4k9yCzr5CpGrUdkQTKKxJNUXIYY.roa (raw, json)
Hash identifier: 9iEr52knYm+Ln96JW9e5c9hZmHSvOh4MUl/QHdR4htk=
Subject key identifier: E2:4F:72:0B:3A:F9:0A:91:AB:51:D9:10:4C:A2:B1:24:D5:17:21:86
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12F5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4k9yCzr5CpGrUdkQTKKxJNUXIYY.roa
Signing time: Wed 29 Sep 2021 02:55:11 +0000
ROA not before: Wed 29 Sep 2021 02:55:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4853 (0x12f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E24F720B3AF90A91AB51D9104CA2B124D5172186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:31:a9:8a:3c:b4:6b:9f:64:15:c1:d8:99:
44:12:84:4d:85:c0:70:f2:6c:8e:34:c1:e4:8f:74:
24:b2:43:ac:0a:c7:f0:fc:bb:7d:49:3a:0e:5b:f2:
03:19:f2:9c:ab:71:7e:d2:2b:56:de:93:cc:68:bd:
2e:d9:1f:4a:a3:28:5b:df:1c:12:58:55:ca:a4:00:
82:e2:e6:83:ea:ea:16:3f:1d:a6:96:05:6c:d5:20:
40:b7:e2:46:82:5a:14:16:f7:c8:42:c6:c4:4d:66:
d8:f2:16:31:c9:e9:a9:69:34:0a:c5:aa:a4:60:52:
05:5f:27:e1:f8:06:a5:67:2c:93:f7:ed:d0:73:37:
ed:60:ca:49:9e:2d:46:56:0d:af:a7:f5:e7:e3:8a:
35:c7:84:33:c7:65:d3:73:a0:fe:38:24:7c:68:af:
d5:47:be:aa:2d:5a:59:a2:a8:22:61:35:7d:6f:bf:
8a:1a:0e:7a:07:ef:29:e3:f8:71:1b:cf:d7:5a:33:
bd:3a:76:73:94:f3:0a:59:3b:52:10:2e:de:42:5c:
5f:5f:35:b9:a6:77:2b:ba:07:ec:ea:6f:74:12:fa:
53:52:e1:16:52:8b:65:fb:6e:37:85:29:b1:f1:79:
14:39:eb:76:08:d3:1c:8b:17:46:56:33:20:78:15:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:72:0B:3A:F9:0A:91:AB:51:D9:10:4C:A2:B1:24:D5:17:21:86
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4k9yCzr5CpGrUdkQTKKxJNUXIYY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.184.0/21
Signature Algorithm: sha256WithRSAEncryption
14:3c:e1:09:5e:1d:3d:0c:db:6a:a7:09:d9:1f:9d:01:ba:f6:
0b:20:ea:6c:04:45:5f:8f:51:c7:af:8a:15:e5:bc:6c:84:e4:
bc:8c:af:83:8f:ef:80:7b:62:00:f3:87:85:9d:fe:b1:76:7e:
0e:07:12:a8:1b:47:48:b3:c6:42:b2:02:93:32:4c:97:84:29:
af:14:3d:80:82:29:2f:02:ab:e8:9d:d1:04:8a:08:9d:28:1b:
34:b3:41:e7:67:74:e9:be:a6:25:de:32:ec:49:02:c8:af:70:
c7:f1:af:1f:cb:77:dd:61:d2:bf:63:1e:c1:d1:68:3e:88:47:
3d:d0:20:23:52:91:64:a1:e0:d9:34:ab:f1:c2:d3:b8:28:2f:
72:5d:ca:00:f9:54:c7:82:d6:23:0b:28:a2:5e:41:dc:d3:96:
ad:66:4c:a3:ad:d9:e1:d2:3d:24:54:52:cf:a9:23:fb:4d:67:
c6:ba:5b:71:23:fb:a1:58:fd:6e:cd:13:fc:d1:b1:0d:31:e0:
56:9a:0a:35:60:a5:e0:a9:55:8e:dd:7d:6a:a7:cd:b7:68:bb:
04:3d:6e:32:db:e8:00:98:f9:32:1f:a7:2d:ba:37:eb:1b:9a:
8a:11:91:cc:18:55:d8:79:6c:be:4b:ec:dc:bb:ff:39:f8:a9:
29:0e:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org