Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q6t5muD14TylO0Oyw46XRuL4xFg.roa
File: Q6t5muD14TylO0Oyw46XRuL4xFg.roa (raw, json)
Hash identifier: x+abiTNAYPkU2/insPfXUbo4isLXfO+VYJp5NUyjjgs=
Subject key identifier: 43:AB:79:9A:E0:F5:E1:3C:A5:3B:43:B2:C3:8E:97:46:E2:F8:C4:58
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12E0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q6t5muD14TylO0Oyw46XRuL4xFg.roa
Signing time: Wed 29 Sep 2021 02:55:06 +0000
ROA not before: Wed 29 Sep 2021 02:55:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4832 (0x12e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=43AB799AE0F5E13CA53B43B2C38E9746E2F8C458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ed:a6:7f:8a:f3:24:97:80:97:82:1b:ce:92:
22:02:56:6e:6e:2f:bd:6d:75:10:74:64:2a:41:52:
8f:ae:61:d4:35:39:c2:7a:8f:6b:4b:62:a2:b3:b3:
21:c5:e4:60:1e:fe:22:99:58:42:50:99:97:aa:56:
a3:1f:ea:1d:0e:90:27:a6:15:9d:e0:3d:f6:58:6d:
41:de:39:ab:65:26:e7:43:d5:aa:73:99:05:de:28:
ef:90:74:3b:b6:58:6a:81:c6:a8:44:3d:a3:69:80:
e1:9f:ff:69:8b:8f:32:28:bf:db:07:cb:6d:64:7d:
5e:62:a2:90:87:03:83:d6:f0:ab:9c:39:75:86:3c:
ad:09:0b:a8:78:f8:f1:16:00:b4:1b:6d:1e:9f:92:
5e:9a:f1:05:70:40:b6:4d:87:b7:90:12:5d:7e:b5:
43:4e:b6:22:b2:03:b2:6d:f0:25:b7:9d:c9:af:8b:
42:09:d7:54:0d:6b:9c:69:f8:98:59:14:f2:43:0b:
03:10:6d:7a:54:c5:36:1b:8f:38:e0:6e:d0:b2:28:
64:2f:63:3b:05:07:8a:3a:37:2a:3b:d8:81:3f:8d:
55:ce:e4:8b:11:fb:a4:ea:9d:05:0e:ec:97:41:47:
87:69:1e:c9:15:d7:47:d5:91:ca:ab:55:e0:28:54:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:79:9A:E0:F5:E1:3C:A5:3B:43:B2:C3:8E:97:46:E2:F8:C4:58
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q6t5muD14TylO0Oyw46XRuL4xFg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.32.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:5e:09:be:29:d8:7c:33:52:2e:e4:47:e2:78:c4:78:37:6c:
61:14:c6:7c:58:73:14:3b:22:14:eb:75:bf:ea:4e:5b:d4:2f:
bf:22:ae:c3:25:fc:c2:7e:34:ef:5f:88:d2:ec:78:2c:7c:5d:
44:bc:68:36:20:42:85:dc:8c:57:ef:4e:c8:90:1a:b8:42:46:
3f:f3:20:a6:da:01:26:92:7b:1b:53:6a:d0:f6:19:4d:56:9e:
a9:69:78:46:fc:67:7c:df:db:be:fd:17:f0:e7:3e:e6:66:58:
49:ff:0b:43:4f:5d:b3:4c:ee:8a:14:f7:c6:67:b2:77:ac:8d:
2f:d0:cc:d9:84:a4:d2:2c:d0:a8:14:97:ec:a7:8d:df:69:2e:
9e:b8:b2:1a:63:2f:49:a9:f9:70:4b:e4:d5:ed:52:85:be:64:
fd:99:6b:a8:7d:28:e7:95:f9:c7:39:a4:3f:d0:f4:09:17:cc:
f2:88:3f:c7:7e:b1:1f:43:13:1f:e7:30:cb:97:8e:d8:ee:eb:
dc:db:86:1c:70:c3:c5:78:5b:46:2f:ce:c6:2b:07:47:8f:2b:
16:64:13:40:e6:29:19:c5:e4:4d:dd:ee:9c:fb:18:4c:84:81:
cc:49:5c:e7:87:73:4e:2d:a3:32:6e:c5:e8:1b:85:2e:3f:e7:
94:8b:9e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org