Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5PLBCfNLUZNRgYsCUEsnqAd2djA.roa
File: 5PLBCfNLUZNRgYsCUEsnqAd2djA.roa (raw, json)
Hash identifier: jxTQIKbH/Dq+iz6OoL9nuilM0a2q1ndIXdaNO9wZWTY=
Subject key identifier: E4:F2:C1:09:F3:4B:51:93:51:81:8B:02:50:4B:27:A8:07:76:76:30
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10A7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5PLBCfNLUZNRgYsCUEsnqAd2djA.roa
Signing time: Sun 07 Feb 2021 12:46:50 +0000
ROA not before: Sun 07 Feb 2021 12:46:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4263 (0x10a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E4F2C109F34B519351818B02504B27A807767630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4c:cd:ae:f7:92:ca:7b:88:51:ee:85:91:8c:
25:d5:21:bc:48:f8:cc:c5:28:61:4b:00:67:0f:db:
f3:3f:db:22:5c:f9:21:de:84:bd:59:dd:62:49:00:
25:7b:d7:b8:11:fe:48:75:c3:fa:a5:a6:62:95:48:
c1:49:39:e5:bb:12:d8:77:ae:b2:40:65:12:68:7a:
cd:75:0f:54:6e:3f:fc:57:ca:9a:e8:1b:95:78:66:
65:b1:3f:a9:92:9f:7b:1d:2d:03:79:94:38:fe:af:
4e:8c:3a:d7:bf:49:ef:f7:92:b1:49:61:14:a9:f0:
dc:98:25:ff:94:67:07:a5:aa:f8:56:0c:7e:93:8b:
9f:b2:2b:b8:4b:39:20:60:1e:41:91:de:70:1f:f6:
d3:57:04:f8:bd:a7:5c:64:ce:ef:04:f0:e4:17:05:
24:c0:4a:e4:05:c8:c2:5e:21:89:da:d9:a6:96:cd:
11:7a:2c:21:b9:e5:2d:ea:76:7c:b0:9a:19:ac:2f:
3b:52:96:fa:17:56:62:83:67:81:45:52:d4:a3:62:
dc:ed:84:b6:bc:37:f3:51:40:1e:3b:e6:62:70:32:
6e:4d:10:69:e7:3b:77:c0:53:66:bd:c8:7c:e6:d4:
ed:65:54:56:30:67:46:1b:89:54:06:9c:80:85:cf:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F2:C1:09:F3:4B:51:93:51:81:8B:02:50:4B:27:A8:07:76:76:30
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5PLBCfNLUZNRgYsCUEsnqAd2djA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e7:88:01:ae:91:a3:1c:96:52:a5:7c:51:46:fb:9a:60:f6:
d0:66:f5:be:08:49:ad:9e:73:93:d5:17:6b:01:bf:b5:3c:fc:
5d:66:f3:8b:91:e5:e0:8c:97:64:e4:d4:09:21:f8:ba:6e:1d:
00:49:4c:69:ea:ab:84:fd:7f:12:e9:af:38:00:1a:c7:6a:f0:
05:94:35:bd:f2:c6:28:9f:31:17:69:16:02:84:22:81:11:9e:
62:6b:37:df:35:90:38:08:44:a2:4f:d8:94:f6:54:d9:c3:c6:
e4:48:94:f4:e1:c0:39:5b:15:a8:fb:60:98:09:80:be:60:ca:
30:c7:80:94:30:fe:cc:47:14:2c:75:c5:4a:03:31:8d:a3:46:
aa:e9:44:96:bf:f4:1c:1c:0d:6c:a1:68:6b:17:df:3b:b8:c0:
fd:d7:ae:de:3f:41:03:b7:4c:66:df:c4:93:22:68:5b:35:f2:
8d:8a:d6:3c:fe:28:c6:30:df:a0:1a:ea:fc:67:2f:f5:79:7e:
64:34:a0:b3:79:3e:78:85:f2:1d:28:e3:7a:7f:0e:5d:3b:42:
9c:ef:02:20:fa:24:9a:a4:ae:38:78:19:7e:7e:92:dc:16:39:
1d:64:d5:5c:63:19:31:bd:64:92:69:84:28:ce:c5:ab:12:da:
4f:39:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org