Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CsO_P5WgDJW7RrFJrSIXbsBa20.roa
File: 6CsO_P5WgDJW7RrFJrSIXbsBa20.roa (raw, json)
Hash identifier: jx4+u36LY49V6xRISwy4wgEFRnkYLqY3tZge5nZMFgo=
Subject key identifier: E8:2B:0E:FC:FE:56:80:32:56:ED:1A:C5:26:B4:88:5D:BB:01:6B:6D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B07
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CsO_P5WgDJW7RrFJrSIXbsBa20.roa
Signing time: Tue 29 Sep 2020 10:07:55 +0000
ROA not before: Tue 29 Sep 2020 10:07:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2823 (0xb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E82B0EFCFE56803256ED1AC526B4885DBB016B6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:71:73:70:9b:0d:83:3f:49:8a:15:aa:c3:
6c:75:01:b2:bd:3a:d3:d5:77:e1:d9:96:48:44:3c:
99:a3:b3:e1:bc:89:15:27:97:b9:d5:64:7c:a8:19:
9c:c1:05:db:4e:45:81:cb:bc:84:79:8d:20:24:f5:
55:39:01:b1:50:af:e5:2f:0b:8a:31:c6:d4:e0:99:
36:05:92:78:c2:5a:98:2d:13:fa:c4:e4:68:e5:dc:
31:f6:41:16:8f:60:ab:81:9a:3a:ed:55:27:35:54:
5e:af:f9:6c:2d:37:97:1c:61:84:d2:6b:c3:9b:4e:
f9:bf:39:35:c3:6f:f6:61:ac:3d:86:06:8c:b2:ad:
53:e2:6a:b7:0a:e1:b8:43:a0:13:5d:9e:50:4e:d0:
13:ef:1f:8d:a2:c1:08:ba:cf:b3:ae:18:75:95:c4:
75:e9:e1:aa:f5:d4:02:f1:2f:d9:a9:93:a5:d0:c3:
35:12:2d:1a:63:86:f0:7f:af:cc:e4:88:34:de:26:
f3:c0:af:3f:76:0e:57:fc:65:05:43:65:67:a9:d6:
ca:42:a7:fa:cb:20:07:f6:71:70:09:e0:70:5b:91:
ed:90:ae:3f:f6:c9:3b:96:46:8e:58:d7:97:08:70:
c9:96:a2:20:31:d5:3f:eb:f9:d8:51:08:e0:f2:1c:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:0E:FC:FE:56:80:32:56:ED:1A:C5:26:B4:88:5D:BB:01:6B:6D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CsO_P5WgDJW7RrFJrSIXbsBa20.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:31:ce:39:bd:f6:37:40:b8:9a:2f:a1:af:71:2d:45:58:6c:
f2:0a:42:45:e7:8b:47:a1:27:fa:1e:5f:b8:21:f0:ff:e6:2a:
1e:5a:3e:3f:c4:98:22:62:b5:db:d9:fb:46:ea:73:5d:86:e2:
0b:86:13:39:4a:d6:f9:be:78:28:24:ee:33:de:33:e0:50:4f:
b7:b7:78:37:12:c5:38:00:e9:e6:a6:d9:a8:e5:8f:59:ef:20:
c4:7f:35:27:8a:89:28:7a:35:26:ca:ab:cb:96:60:c3:07:c8:
66:4f:92:c5:15:82:d2:53:ea:8a:30:eb:1d:f8:35:5e:76:d1:
9e:62:5e:b5:ab:38:a4:3a:4b:96:59:4f:d0:f7:0b:d4:b8:c6:
c5:44:9d:7a:0d:71:5e:2c:50:f7:01:4e:4b:ea:29:cf:ce:c0:
b5:e0:e9:e7:e1:67:3d:ca:1c:5c:82:dd:01:c1:9c:35:00:8d:
9c:08:d7:6d:ee:b7:d9:d9:d7:9a:a5:ff:5e:c3:c2:5d:38:3b:
13:3d:29:e0:0d:8b:cf:25:3f:15:af:88:f6:d5:86:b1:93:57:
da:e8:0f:02:50:ed:92:d8:42:d7:0e:6b:ee:5d:a0:95:0c:25:
a6:d6:7c:d2:6c:49:e3:92:72:33:19:d9:06:8b:b1:bb:d6:82:
63:39:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org