Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BctjF_LZumVjJ91iwUN5_sE-w6g.roa
File: BctjF_LZumVjJ91iwUN5_sE-w6g.roa (raw, json)
Hash identifier: UByFlz0KRgt07nCJiMmFAXIU4z2422kfnqj0n1zvn54=
Subject key identifier: 05:CB:63:17:F2:D9:BA:65:63:27:DD:62:C1:43:79:FE:C1:3E:C3:A8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B0A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BctjF_LZumVjJ91iwUN5_sE-w6g.roa
Signing time: Tue 29 Sep 2020 10:07:56 +0000
ROA not before: Tue 29 Sep 2020 10:07:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2826 (0xb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=05CB6317F2D9BA656327DD62C14379FEC13EC3A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:a3:48:c1:06:a9:2f:f1:9a:a8:be:50:04:
7d:d5:97:3b:80:ff:e8:ed:b0:be:8a:59:c0:bc:e1:
dc:f7:c7:ba:4b:d5:84:76:70:e8:94:d5:28:50:40:
ee:84:04:c1:56:b1:19:d7:18:fa:e4:0c:54:c5:07:
af:0e:5a:3d:19:70:c3:ad:b3:75:9a:1f:d5:ca:00:
b5:9d:c8:f6:11:55:56:ff:4f:18:77:0a:6b:f5:ec:
1f:52:74:b8:69:01:b8:d5:b9:38:23:f1:04:4e:76:
18:04:cd:2b:11:fe:0e:46:52:b7:59:21:8c:af:88:
b9:08:e9:a5:a2:fa:e8:2f:31:c8:1d:49:34:1e:75:
99:d8:01:c7:ef:f7:ad:c5:b5:1b:6e:64:db:f1:65:
0c:0c:e1:81:0e:bd:d3:81:59:7a:ca:84:91:0b:53:
c1:82:8c:c7:3e:f3:af:79:67:0c:a6:af:aa:2e:fe:
2e:aa:13:04:29:44:65:d8:4e:4f:be:d6:f2:1c:cb:
78:be:90:72:06:93:0c:b5:df:64:0e:3f:28:3a:49:
fc:03:ce:5c:28:6b:f8:1a:92:e2:8f:43:a5:d7:7e:
44:e6:b6:fc:f8:df:b9:53:ec:5a:e4:70:33:2e:44:
c0:38:56:5d:b4:f7:a7:dc:30:88:fb:57:9a:46:46:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:63:17:F2:D9:BA:65:63:27:DD:62:C1:43:79:FE:C1:3E:C3:A8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BctjF_LZumVjJ91iwUN5_sE-w6g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:53:4f:02:21:9d:0f:52:19:33:6b:2b:20:da:48:a2:c0:e4:
be:d8:c4:cd:1b:f1:01:55:7b:b2:19:94:d0:7f:03:c0:9a:ea:
6e:27:0f:30:0f:fa:fc:3f:6a:4f:47:5c:61:7a:98:9c:3a:1b:
78:32:ce:c2:1f:86:4f:a6:85:08:ed:44:0c:a8:22:06:d5:e9:
c5:0c:de:94:f2:e9:f5:fb:1f:d3:73:6e:9b:79:04:0a:4a:a5:
6d:6c:70:3e:44:d8:b8:25:41:13:d9:83:0c:bd:47:d7:a7:ca:
d7:a7:0e:d3:7d:72:ba:17:13:ba:67:bd:d4:2d:d5:44:8d:54:
58:4a:10:6a:6f:57:dd:78:7c:90:c0:f6:07:bf:b7:a6:50:bb:
6d:1e:9b:5b:08:d2:f4:71:33:be:f2:03:f1:70:11:c2:d5:ac:
7e:1d:a8:90:1d:b0:6b:fe:2a:cb:fe:d1:a7:38:13:80:87:c3:
a1:9e:bf:70:ca:0f:a8:9e:7e:d4:c3:21:86:b8:81:dd:8b:5b:
93:12:70:48:fd:38:57:cb:49:86:b0:f6:a3:24:f4:f1:18:ae:
e5:dc:6e:bf:57:2c:e8:b5:cc:28:93:96:98:fa:fa:2c:a1:9a:
f3:a9:54:80:68:fd:6f:66:26:80:76:0b:57:5c:6f:6f:f9:ee:
f2:cc:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org