Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S-HUh8TJCz4UGz2o97t3vWfEX_s.roa
File: S-HUh8TJCz4UGz2o97t3vWfEX_s.roa (raw, json)
Hash identifier: /TWbAxKLXQnr52Nrox/uZ3KmlXmgNf2ypZNf/JWRDUs=
Subject key identifier: 4B:E1:D4:87:C4:C9:0B:3E:14:1B:3D:A8:F7:BB:77:BD:67:C4:5F:FB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 104F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S-HUh8TJCz4UGz2o97t3vWfEX_s.roa
Signing time: Sun 07 Feb 2021 12:44:07 +0000
ROA not before: Sun 07 Feb 2021 12:44:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4175 (0x104f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4BE1D487C4C90B3E141B3DA8F7BB77BD67C45FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:a6:a2:d5:b1:3c:65:d9:50:5d:32:93:8c:
08:f4:fb:e0:14:6e:bb:98:0b:0b:ff:87:8a:0b:d7:
9f:39:bc:6d:3a:3a:32:2e:c9:f5:b6:3a:c8:42:a5:
8a:ad:83:07:d4:0e:9d:61:95:b1:c5:86:5f:f2:da:
d4:dd:08:81:90:f5:f7:70:46:47:cb:92:46:9a:32:
93:8c:d9:81:ba:9b:30:bf:34:cf:3a:da:b2:56:fa:
dc:79:be:76:58:1d:0f:70:56:2e:b3:bd:ad:e9:83:
ab:63:17:de:42:2c:96:62:dc:01:ab:13:02:d0:2e:
b4:37:c8:de:76:9c:78:cc:7e:f6:1c:65:c4:0a:44:
48:c7:c2:cd:04:33:9e:71:98:2d:46:be:b9:ee:96:
f1:3a:ee:8b:55:46:32:9d:f2:3f:46:7e:c0:8b:b3:
87:ed:4a:0e:a8:c0:8e:de:d3:da:3c:95:f3:2c:0e:
95:66:a0:4c:ba:a7:f7:d3:11:70:47:b6:3c:20:de:
d6:bf:c2:78:e2:de:81:cd:47:d6:6d:bc:ad:8a:e0:
61:ba:af:cb:c6:f1:ee:52:4d:6a:75:a4:0c:58:a0:
de:2b:73:a5:6e:5e:fa:1c:8e:99:68:09:be:23:df:
86:3a:4c:a9:18:b1:6d:22:06:ed:ea:fa:07:50:53:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:D4:87:C4:C9:0B:3E:14:1B:3D:A8:F7:BB:77:BD:67:C4:5F:FB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S-HUh8TJCz4UGz2o97t3vWfEX_s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.141.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bc:da:04:ba:56:c9:e9:76:8a:d1:4d:4b:e4:a3:15:de:eb:
91:6b:65:73:b4:e1:42:50:dd:96:65:4a:2e:bf:f2:4e:f3:0a:
5e:fe:01:06:81:60:f0:68:12:83:eb:85:98:f9:7f:78:51:a3:
ca:69:3b:35:51:d1:45:aa:8e:42:da:a8:44:dd:06:b0:b4:fa:
ee:72:1c:cb:26:ff:25:0b:89:6e:9c:1e:5e:f0:1f:8f:54:77:
ca:e9:36:a2:8d:bf:db:e3:b7:46:57:79:ad:90:4c:c2:7a:07:
c2:c3:22:59:b4:70:c6:7c:f4:83:dc:08:e6:b1:e6:0d:7b:45:
82:4f:c5:09:a6:ff:fb:d5:73:76:5e:f9:a6:7f:03:06:aa:66:
13:c5:65:da:27:5f:65:51:6e:62:ab:83:52:bc:37:18:fd:8a:
c2:6c:24:b7:8b:e2:71:1c:ec:15:65:bb:e6:c8:27:2a:65:2c:
f9:e6:9f:ce:df:42:ca:6d:f7:fc:cb:76:f5:e3:df:8b:88:a6:
70:8a:6f:d3:69:c2:35:b4:99:af:65:0c:1c:27:1e:41:be:5c:
c6:fc:7b:d7:73:40:d8:57:6c:af:98:19:95:73:81:45:9d:09:
67:85:31:89:2d:7a:56:08:9b:55:c0:f3:dd:37:6b:38:68:08:
2e:e5:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org