Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmKhYCjZe-2a6wrDGHCmzHm_5EM.roa
File: FmKhYCjZe-2a6wrDGHCmzHm_5EM.roa (raw, json)
Hash identifier: HspJCnUK17ZIqYfBka+HcGA8dLMgJ70Ym+lgyC/wVIQ=
Subject key identifier: 16:62:A1:60:28:D9:7B:ED:9A:EB:0A:C3:18:70:A6:CC:79:BF:E4:43
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BD7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmKhYCjZe-2a6wrDGHCmzHm_5EM.roa
Signing time: Tue 29 Sep 2020 10:08:53 +0000
ROA not before: Tue 29 Sep 2020 10:08:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 180.218.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3031 (0xbd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1662A16028D97BED9AEB0AC31870A6CC79BFE443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:fa:c4:5f:2e:d1:3d:29:e9:49:77:5c:d5:
0e:a9:82:ee:d2:bf:3b:a4:bf:bd:99:de:38:59:e0:
b7:af:e0:57:9a:93:0b:52:2c:0c:35:46:dd:71:51:
29:4a:3a:99:34:7e:84:b6:13:ae:a6:ad:be:56:2c:
14:74:12:d1:f6:fe:ac:ca:95:c9:55:d8:10:87:54:
d2:11:24:41:37:e7:e8:49:df:61:f1:a7:dc:2c:46:
5f:c1:40:bc:b3:15:3e:df:94:c6:e4:68:ca:63:f8:
77:38:85:f8:5a:a4:c8:1a:38:e0:82:e6:69:2c:ed:
01:04:51:06:37:54:7a:ea:0c:83:22:58:e6:3a:b9:
60:91:50:f1:23:47:a3:91:55:68:a8:ee:36:3d:31:
00:b4:74:00:4e:d5:69:3b:18:d0:3a:16:53:9f:1b:
ce:86:93:f7:00:02:23:2c:6b:c6:e5:1a:57:7b:d6:
df:b0:97:02:1f:1f:87:f8:55:4c:da:8d:0c:71:3b:
35:9c:37:1c:ca:4c:22:e9:c6:cd:97:f8:22:ae:7f:
41:bf:f1:90:a7:31:87:9d:e2:8d:ea:88:f2:66:58:
7e:7e:60:f2:30:af:24:56:8e:a3:4c:0b:57:a5:d6:
99:b5:39:66:d3:9f:33:8f:74:9f:23:55:dc:2f:aa:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:62:A1:60:28:D9:7B:ED:9A:EB:0A:C3:18:70:A6:CC:79:BF:E4:43
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmKhYCjZe-2a6wrDGHCmzHm_5EM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.246.0/23
Signature Algorithm: sha256WithRSAEncryption
08:f0:4a:4d:f3:ef:cc:c4:1d:ea:52:7e:c9:2b:0f:5b:ca:03:
4b:c0:2b:cf:9d:aa:2d:f2:da:0e:19:4c:fd:64:1a:51:f5:cb:
4b:fe:99:a1:37:9c:b9:4e:8f:56:0c:24:ee:0c:d2:1e:75:08:
30:7c:43:07:eb:27:aa:93:99:89:1e:fd:4c:10:ab:63:0c:f0:
c7:fb:25:06:c1:3b:7d:af:2b:34:2b:09:3e:0c:c9:1c:6f:0c:
83:ed:79:7c:42:ce:75:dd:ff:f8:e1:5f:b8:7e:28:6c:21:1d:
25:03:cd:40:12:a9:10:40:69:f4:30:67:6f:85:30:20:15:51:
f7:56:1f:89:1f:0d:31:65:e6:d4:e4:b1:70:8d:d6:6b:f0:72:
75:f4:a1:43:55:66:85:8c:71:fb:3c:ff:5d:fc:59:f1:49:66:
c3:45:f2:23:eb:8c:39:02:a1:6c:d0:c7:ae:10:ae:94:ae:0b:
bb:70:4d:42:df:83:5b:ad:8e:4a:25:2f:fb:0b:4a:a3:c7:4c:
6e:fb:c5:e5:7c:b7:87:b9:1e:ee:0d:b1:c0:7a:0d:e1:9a:87:
e5:a7:2c:41:a1:08:49:8c:77:59:3f:4d:12:9c:74:19:02:06:
af:53:16:a9:c3:0b:b2:ca:d7:4c:73:fc:fb:98:e2:32:38:66:
b3:6e:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org