Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X-9aRaYXxFPfWnW-iqWYKk3rT6w.roa
File: X-9aRaYXxFPfWnW-iqWYKk3rT6w.roa (raw, json)
Hash identifier: g0rLrIdriOJ2/AvotuNpW4gN0VWBj3p4mMJXFgWkLhU=
Subject key identifier: 5F:EF:5A:45:A6:17:C4:53:DF:5A:75:BE:8A:A5:98:2A:4D:EB:4F:AC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10B1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X-9aRaYXxFPfWnW-iqWYKk3rT6w.roa
Signing time: Sun 07 Feb 2021 12:47:03 +0000
ROA not before: Sun 07 Feb 2021 12:47:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 180.218.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4273 (0x10b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:47:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5FEF5A45A617C453DF5A75BE8AA5982A4DEB4FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:b6:fd:4b:ac:4f:37:74:4f:97:05:5f:4f:
79:7c:4a:f0:d6:5f:b5:21:40:51:37:f8:0c:e3:f1:
df:22:1c:a8:c2:86:b4:7a:c3:a6:94:b6:f2:f8:1d:
b3:8a:5d:eb:20:56:37:61:87:b8:6f:c1:fb:27:95:
07:85:bd:6d:eb:ca:9d:b0:34:80:cb:76:df:98:c1:
e4:86:a4:9e:aa:e7:cb:6b:ac:7c:de:14:f1:bd:c5:
d6:cd:3a:d8:6c:f1:60:49:8b:40:2e:8d:8f:31:a8:
35:d9:47:7b:ec:11:4e:b7:fc:6d:0c:af:9a:f3:cd:
e7:f5:5d:bc:5e:ef:23:dc:41:c1:e1:88:e8:80:a5:
72:8d:24:62:b1:a6:cf:d3:dc:90:bf:f3:da:24:df:
77:86:e8:59:35:b3:53:de:b0:2f:60:6b:c0:7c:71:
aa:ce:4c:c0:4b:fc:25:1e:4c:50:ed:ef:dd:a2:87:
da:af:14:c9:85:45:59:91:02:00:2f:b7:54:a9:31:
9c:17:82:a1:13:5b:ea:81:bb:b5:a6:c5:22:6c:37:
d5:3a:c1:06:7a:d5:d7:36:95:fe:42:b5:d3:56:fe:
0c:27:c3:d3:8b:dc:e6:73:54:4b:cd:4f:7e:54:ce:
9c:7e:22:e1:27:b7:98:e4:60:af:3e:d7:be:60:f2:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:5A:45:A6:17:C4:53:DF:5A:75:BE:8A:A5:98:2A:4D:EB:4F:AC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X-9aRaYXxFPfWnW-iqWYKk3rT6w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:e2:8f:59:e3:ae:38:02:24:77:c7:af:37:9a:3e:8a:35:e1:
2c:f7:c5:a3:0c:fc:a5:73:99:46:4f:dd:d4:dd:42:a7:ef:22:
97:97:48:de:89:ed:33:a4:37:6f:da:b7:c1:e0:a5:ac:9c:11:
7c:aa:75:41:c0:57:32:1b:80:15:df:a4:19:d0:bd:68:76:fe:
95:75:87:9d:fd:79:03:8d:3b:13:8d:fe:fc:14:c3:c4:63:e6:
c2:d0:42:ba:12:aa:49:7d:e0:6a:18:9b:dd:de:76:79:4d:65:
7b:1b:61:14:ed:d4:fa:9b:ba:0f:d2:d1:a9:c5:01:de:65:32:
c1:87:99:33:3d:44:32:07:91:2a:4f:55:19:ff:7a:ee:89:89:
ba:7e:c8:89:d4:50:f7:7b:5e:54:ef:62:f8:57:03:90:1a:f9:
0a:40:ae:62:62:1c:94:6b:11:cc:57:b3:f8:1e:32:a4:39:2b:
69:3e:26:7b:9d:33:68:8d:5d:ed:72:6d:0b:34:32:34:00:74:
50:cb:6e:f0:7e:8e:2c:40:07:46:5d:c9:77:37:b0:a5:d8:8c:
82:b9:c2:b2:21:c2:c1:ad:1e:7e:b1:c2:24:9b:c5:a2:77:01:
ee:14:9b:ce:da:17:bc:76:c6:82:fd:63:c4:25:d6:55:80:3b:
8a:0f:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org