Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L1xEmci4jErye1TEgMVcJ0z4UDo.roa
File: L1xEmci4jErye1TEgMVcJ0z4UDo.roa (raw, json)
Hash identifier: soZnXSuvEJ8WJIKBs+3LlFwzGbBgpPdhHjDlQ4ygfu8=
Subject key identifier: 2F:5C:44:99:C8:B8:8C:4A:F2:7B:54:C4:80:C5:5C:27:4C:F8:50:3A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B68
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L1xEmci4jErye1TEgMVcJ0z4UDo.roa
Signing time: Tue 29 Sep 2020 10:08:22 +0000
ROA not before: Tue 29 Sep 2020 10:08:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2920 (0xb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2F5C4499C8B88C4AF27B54C480C55C274CF8503A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:c8:6e:b3:38:62:f9:5a:f3:9c:1f:ed:70:
d8:67:c3:92:15:ed:0b:ff:26:31:db:37:1e:f2:23:
3e:c0:18:6d:04:0b:27:f4:e9:cf:38:9f:6e:45:78:
d9:94:4a:c5:ef:fd:e9:5b:9a:a7:d7:12:f4:c9:60:
16:99:f3:5a:81:35:40:3e:3b:26:b2:64:9e:af:3c:
12:26:af:d9:b8:3e:aa:62:b9:32:e7:fb:2f:dd:3b:
ee:02:d5:fe:1b:a8:73:63:b6:0a:b4:c9:88:56:f3:
3b:55:77:6e:09:d3:fc:d4:e9:dc:e1:33:ad:95:66:
70:3d:a0:57:91:ea:72:c8:e7:7e:b7:2b:d1:a7:7a:
2f:f9:8c:80:b3:ec:c7:90:a3:e0:1e:9f:2e:27:ea:
fb:f1:34:5a:f5:00:6b:f9:75:4a:c6:c1:b7:94:5e:
9a:e4:7d:e0:61:4b:f9:19:e9:b2:d3:44:69:0b:67:
e0:7e:aa:66:b3:76:43:2a:0d:ea:2e:76:3e:3e:f3:
1c:33:32:f4:8f:ca:c2:65:d6:f7:a9:d9:db:31:72:
af:1d:fc:33:00:5f:e5:62:e3:e0:cf:a2:d2:fc:16:
92:dc:c7:bd:23:55:39:96:54:85:f4:0f:f5:57:2d:
2e:32:e6:68:45:1d:46:60:a0:ed:eb:14:43:fe:d3:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5C:44:99:C8:B8:8C:4A:F2:7B:54:C4:80:C5:5C:27:4C:F8:50:3A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L1xEmci4jErye1TEgMVcJ0z4UDo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
93:93:48:18:33:06:87:db:fb:36:05:91:53:c8:43:e8:58:3a:
93:a8:fe:93:27:17:34:c5:28:05:91:de:3d:3e:8d:88:58:9c:
82:3e:e7:63:44:d6:db:f4:b7:fd:d5:0d:4b:37:1e:2e:44:f5:
a3:a9:a2:87:96:e4:84:7a:d7:6e:81:0b:7b:6f:5b:7e:01:bb:
bc:92:5f:75:2c:14:6d:64:d5:e4:26:a3:28:8e:3b:7d:f9:f8:
93:19:70:cb:33:c3:35:cc:f0:6e:b0:91:de:d6:5b:43:c8:b4:
e7:0a:a9:ad:66:86:dc:14:21:fb:f0:98:b6:fa:92:84:8d:2e:
f6:34:5b:93:f5:9f:fd:a4:18:53:53:52:3c:a5:b0:02:89:d0:
00:7e:5c:f7:47:49:9a:26:ef:07:3f:2c:8c:19:58:87:80:9a:
54:2c:7e:f5:3b:09:6f:ec:51:fc:45:33:87:3e:0c:05:f1:94:
a5:16:f0:ea:ad:0e:bc:dc:87:c6:d8:08:7c:c2:5b:ce:19:52:
f9:14:b8:ee:d3:3d:a8:12:16:d8:e2:71:7e:97:f7:28:cf:50:
79:0f:b6:60:e7:77:a6:0f:b2:b8:64:0a:e3:4a:03:5f:8c:b9:
59:7b:a7:60:1e:b8:63:50:4b:4a:69:b4:d7:26:19:03:f7:c1:
68:f9:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org