Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/97hT00rBpIOAhBLcF9K9ltrnCQ0.roa
File: 97hT00rBpIOAhBLcF9K9ltrnCQ0.roa (raw, json)
Hash identifier: LtDjHG8lHa/kdGrDHXepMvFzIHXXvcBokJ+hb31QKC4=
Subject key identifier: F7:B8:53:D3:4A:C1:A4:83:80:84:12:DC:17:D2:BD:96:DA:E7:09:0D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BAA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/97hT00rBpIOAhBLcF9K9ltrnCQ0.roa
Signing time: Tue 29 Sep 2020 10:08:41 +0000
ROA not before: Tue 29 Sep 2020 10:08:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F7B853D34AC1A483808412DC17D2BD96DAE7090D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:87:75:0b:3c:8c:5b:db:80:be:21:ca:18:
f9:55:6c:78:05:c6:1a:30:a6:5e:40:17:d3:8e:e2:
0c:97:01:ea:e7:7a:d2:44:65:a0:57:21:bc:cc:dd:
1a:48:c1:4f:cf:ee:96:1f:78:49:93:3d:17:73:d8:
d2:5d:58:2f:06:31:26:b2:79:1d:b8:89:ce:9f:ab:
37:45:31:a3:9b:43:f2:c6:4e:dc:18:9f:ac:e9:90:
08:32:1c:ba:43:32:24:9b:0e:d4:f7:d1:a8:5e:31:
55:e0:60:cd:e6:90:38:30:a8:46:3b:62:38:54:7e:
68:c6:7d:58:25:3b:aa:f8:15:ee:42:85:e2:55:17:
6f:2a:91:44:0f:64:1f:6c:e6:f1:2a:b8:a5:6f:81:
62:aa:96:70:81:5f:13:f5:55:93:5c:02:64:d4:88:
e9:98:8d:87:50:b9:51:fb:14:a2:b5:3e:1a:90:20:
0b:47:ef:04:df:b5:a7:f0:b9:d2:a6:0a:17:c1:69:
85:1f:be:a0:97:ae:c3:20:85:1b:71:09:da:4c:07:
e6:b7:0e:a3:a8:de:09:1b:55:d2:48:3c:9d:e1:70:
c5:70:56:56:1f:f9:7b:d2:2d:66:e7:8f:1a:15:4b:
6f:84:68:12:0e:cb:a5:7c:dc:49:fd:1a:61:9b:89:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B8:53:D3:4A:C1:A4:83:80:84:12:DC:17:D2:BD:96:DA:E7:09:0D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/97hT00rBpIOAhBLcF9K9ltrnCQ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.160.0/20
Signature Algorithm: sha256WithRSAEncryption
13:8d:3e:e4:be:c2:0b:f6:c0:51:e5:fd:50:43:48:38:5e:7b:
5a:5b:e1:83:f2:84:f3:0f:2c:7e:33:37:64:a5:df:00:7f:59:
af:01:14:5f:12:0e:12:9a:fc:61:46:0c:fa:11:67:8d:f3:9f:
df:53:e1:24:68:c2:0a:cd:10:ac:d3:f7:ab:9a:f3:30:6f:b9:
96:d8:67:f5:73:e8:4d:7a:e2:f3:3e:aa:1d:f6:58:d2:7b:82:
54:d9:b3:0c:9c:2e:f4:57:55:e8:b9:87:8d:68:7a:fd:d4:11:
1a:43:7c:1b:79:2f:98:29:f4:d7:9b:32:cb:bb:3f:66:e9:d0:
aa:40:b9:db:96:bc:be:f0:76:4c:8d:49:5a:f5:ed:69:69:b7:
57:8a:9b:53:86:71:67:fe:fe:39:cb:87:11:50:b5:fa:20:ae:
e1:dd:7a:5a:5b:75:4e:01:9e:be:4d:eb:61:1e:96:f5:9d:cf:
06:9f:ff:8e:e5:91:da:b3:a3:e0:50:c2:22:91:f8:ca:90:f5:
1a:88:1a:41:51:df:07:66:15:aa:3c:c0:5a:58:3e:68:1e:ec:
5a:4d:14:df:af:80:eb:6c:15:80:07:e9:9a:d1:b6:57:51:04:
2a:7e:26:8e:ea:49:40:1f:0d:94:2c:28:17:35:3f:78:4b:5f:
b9:66:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:23 2025 by rpki-client