Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MhJd5svxnjKpo9mwNC-ILDym5ps.roa
File: MhJd5svxnjKpo9mwNC-ILDym5ps.roa (raw, json)
Hash identifier: eIB+BMm/ZK7cJdP1SoFZSebpVjUEVZN16oWphSEkU18=
Subject key identifier: 32:12:5D:E6:CB:F1:9E:32:A9:A3:D9:B0:34:2F:88:2C:3C:A6:E6:9B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B10
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MhJd5svxnjKpo9mwNC-ILDym5ps.roa
Signing time: Tue 29 Sep 2020 10:07:58 +0000
ROA not before: Tue 29 Sep 2020 10:07:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:58 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=32125DE6CBF19E32A9A3D9B0342F882C3CA6E69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:bf:54:a8:d9:c7:f3:26:c6:7c:3d:51:37:
9f:f9:a3:89:b6:81:50:06:8b:30:0d:e3:bf:3a:29:
22:01:5a:20:e2:f5:9a:01:cb:10:8a:a3:6e:f6:82:
69:75:3d:3a:99:6b:56:79:15:6c:37:a0:5d:f0:ce:
94:94:ee:25:c4:b0:e1:3c:e9:e8:76:02:4f:ae:05:
64:9b:2a:fd:e5:08:da:f1:b7:fc:a1:4a:0d:ca:e6:
b8:40:56:8f:4e:90:04:82:38:d1:9e:72:f6:d2:60:
18:0d:9b:92:cf:46:2b:ff:33:ab:b0:b9:a4:27:09:
ec:d3:4e:9e:35:a2:09:0a:e5:18:b6:d7:c5:7f:89:
a7:e0:00:67:26:8f:03:f2:56:97:03:dc:7b:26:a1:
d3:d7:71:e7:e9:e2:e8:7b:f7:07:c8:6e:11:15:52:
cd:2f:e0:53:57:24:49:b6:8e:a3:6a:b3:ff:97:53:
c3:4e:d4:45:f5:bc:84:7c:fb:7b:df:47:99:11:45:
cf:5d:eb:54:6e:c9:41:b9:db:b5:49:e4:e3:5a:9f:
2c:b5:27:6f:b4:b4:08:b3:5f:ae:31:9d:c3:f4:5f:
b8:2e:20:6c:78:b8:79:13:79:59:b7:bc:e9:7e:0b:
eb:81:ed:38:f7:87:0a:ec:a5:ef:5d:0c:4d:69:29:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:12:5D:E6:CB:F1:9E:32:A9:A3:D9:B0:34:2F:88:2C:3C:A6:E6:9B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MhJd5svxnjKpo9mwNC-ILDym5ps.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:17:8b:c5:aa:f1:ca:9c:ad:dd:56:e5:9c:ce:a4:98:31:02:
00:fd:93:14:b3:61:d2:a3:e3:ba:48:9f:84:cc:44:92:6b:4e:
65:ad:5e:de:5d:30:8f:66:8e:9a:b0:bf:36:46:ef:07:d7:29:
0a:62:46:fb:b5:06:be:ab:27:18:c1:d1:d8:c7:ee:c1:09:56:
4c:29:6a:88:58:44:42:31:63:b4:17:4b:fa:45:01:3b:a7:02:
bd:ed:d1:99:6d:63:91:d6:bc:b1:e5:b4:69:d0:56:ae:f6:6a:
31:89:ce:47:91:48:31:6a:aa:1c:f8:c3:df:fb:2b:c9:df:cd:
d3:1c:01:51:7b:c5:3a:12:44:70:63:06:1b:14:25:1a:73:ff:
de:d9:e3:8e:34:f2:db:68:91:85:96:83:d7:76:05:83:c4:43:
12:b1:27:65:6f:39:5d:c1:2e:b6:2e:54:b3:56:43:a9:cf:15:
85:79:2e:2c:c8:4e:53:45:2e:bf:93:4f:ce:64:92:21:80:4a:
3d:3f:89:48:50:f1:2a:31:47:e5:02:92:43:43:1f:a9:5c:9d:
82:59:64:2d:6c:8b:36:2f:18:6d:8b:72:85:e2:75:22:dc:bc:
2c:de:d3:87:37:fc:6b:55:75:8d:f4:64:9c:f2:e1:4f:bb:7e:
c8:41:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:20 2025 by rpki-client