Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NugKbWLA3bSTWngNOwKfCMY3N4g.roa
File: NugKbWLA3bSTWngNOwKfCMY3N4g.roa (raw, json)
Hash identifier: Xn/+h5xQ504SEKZU/Pb+nhoQVk+WGgtzeZkIYnSJNCY=
Subject key identifier: 36:E8:0A:6D:62:C0:DD:B4:93:5A:78:0D:3B:02:9F:08:C6:37:37:88
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B4F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NugKbWLA3bSTWngNOwKfCMY3N4g.roa
Signing time: Tue 29 Sep 2020 10:08:15 +0000
ROA not before: Tue 29 Sep 2020 10:08:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2895 (0xb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=36E80A6D62C0DDB4935A780D3B029F08C6373788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:f1:74:20:fe:0f:e1:aa:4b:57:90:4a:47:
93:80:27:e7:8d:32:75:48:63:5c:55:14:a7:48:2b:
58:b0:38:c2:f8:ac:f6:2b:59:0f:7d:9b:27:2f:b3:
20:0f:e6:9b:bd:c1:96:a1:93:b3:01:4a:0c:3c:33:
db:91:10:1c:31:9a:10:9f:92:c3:37:05:a4:ed:1a:
1f:31:e5:65:a4:40:03:65:46:81:32:82:61:11:4f:
a1:3d:37:7b:d3:ff:9d:3f:eb:e5:95:ee:20:79:1b:
ba:92:04:3b:2e:53:ab:22:8c:7a:38:81:59:3c:28:
6d:d2:a2:05:e2:8f:e8:6c:4a:dc:e7:61:13:a2:6d:
6a:06:6d:07:45:fc:9a:5f:85:37:bf:88:2c:04:be:
72:e2:12:1e:a7:c2:6d:4e:6d:88:aa:7a:aa:12:0a:
07:7c:34:f2:4a:75:28:a5:20:0f:e4:fc:cc:81:7f:
2f:c8:d3:a1:a1:78:80:2d:27:6d:45:87:e8:43:4d:
67:89:65:e1:79:9e:26:65:30:18:c9:56:27:0a:27:
e5:b5:85:43:d4:c3:02:7b:a9:6e:9b:28:8b:86:72:
ec:bc:f7:50:b7:1a:3d:63:0e:be:46:10:3f:b2:15:
c0:06:42:a6:9c:b0:e3:66:ab:2a:26:9c:e1:99:ad:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:0A:6D:62:C0:DD:B4:93:5A:78:0D:3B:02:9F:08:C6:37:37:88
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NugKbWLA3bSTWngNOwKfCMY3N4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cc:f3:92:44:19:92:8f:e4:60:3c:bc:f3:28:7d:be:04:df:
bd:3a:b6:d8:c9:18:70:ae:1c:bf:a2:3a:92:69:54:6e:69:ff:
c2:5a:1b:4c:44:4a:2a:a7:66:3e:be:97:76:bb:2a:c1:2f:ad:
9b:af:41:0e:e7:8e:79:93:59:1a:18:c6:88:6b:02:67:bb:4d:
94:52:9b:b1:34:e0:1d:2c:52:a3:a3:64:d8:33:f8:76:79:56:
00:ca:ae:1b:b5:58:9e:70:45:db:b6:19:de:8f:9f:ca:9b:07:
01:a9:2f:80:1f:04:54:a2:fd:b4:1e:3a:30:56:14:36:f5:ff:
78:31:eb:9c:92:92:14:d2:75:a0:bc:5a:c7:d4:f5:e4:2b:ce:
8d:f4:88:d1:0a:c2:be:17:56:27:58:bd:4a:ef:b0:e1:20:46:
4e:51:a0:43:cb:d4:ed:8c:90:06:ab:ac:30:98:cf:57:7a:ec:
9a:73:7d:74:27:b4:c5:89:8b:5f:7c:c8:c1:8a:78:1c:7e:4e:
32:97:4f:3f:fd:3b:48:15:e6:fd:4e:a1:fb:8b:ab:14:f6:6a:
b2:ba:84:25:88:0a:37:79:e8:a0:01:2a:29:6c:90:47:9e:61:
50:b7:f4:0d:9e:19:11:e5:a7:7a:cd:8d:e5:3a:9e:e1:a9:c0:
82:93:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org