Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_I_GuHT4u6eNhzPfdUtoerL_wzI.roa
File: _I_GuHT4u6eNhzPfdUtoerL_wzI.roa (raw, json)
Hash identifier: +m+FOI2pAVbAPeRhbjT1r9bXgTqwMiu9NcuWBP039o4=
Subject key identifier: FC:8F:C6:B8:74:F8:BB:A7:8D:87:33:DF:75:4B:68:7A:B2:FF:C3:32
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B19
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_I_GuHT4u6eNhzPfdUtoerL_wzI.roa
Signing time: Tue 29 Sep 2020 10:08:01 +0000
ROA not before: Tue 29 Sep 2020 10:08:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2841 (0xb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FC8FC6B874F8BBA78D8733DF754B687AB2FFC332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:53:56:34:62:f3:0e:7b:68:09:27:55:00:
ea:f7:65:aa:9c:4c:d4:51:bd:10:58:2a:08:9e:6b:
0f:c8:ed:85:e7:8e:31:15:90:27:10:46:77:e9:d8:
41:f3:38:c3:cc:46:7d:c3:48:34:b0:81:80:0a:18:
5c:2e:56:ce:0e:9d:a2:7a:92:e9:fa:8b:7d:71:a9:
03:a6:a6:85:95:49:60:47:75:06:d7:b2:11:6c:5c:
cd:8e:60:ea:8a:6e:37:2c:02:73:e9:05:e8:de:d8:
d0:f2:b6:b3:8f:94:b9:47:8a:d6:f3:94:61:77:a3:
02:6d:d6:b8:e3:85:7a:64:06:a0:2b:c9:1f:9b:85:
c9:ee:eb:1e:a5:01:f7:2e:e6:38:51:b4:c5:0f:0a:
f7:1d:07:02:90:9c:9f:3e:84:e9:00:95:33:ca:ae:
3e:8c:9a:94:ab:56:37:42:92:cb:41:fe:1b:ed:fc:
4e:43:74:68:02:2f:0e:3f:e7:d9:0a:74:4c:1f:6e:
91:9a:72:ef:94:bb:9c:a3:c1:6f:e4:41:9c:f1:9b:
70:00:40:4c:46:ee:34:e4:9d:bb:25:cf:97:9c:cf:
85:33:91:79:e5:24:43:20:60:5f:5c:74:88:47:fb:
aa:7b:66:1d:5a:3d:69:47:bc:90:25:c4:53:04:67:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:C6:B8:74:F8:BB:A7:8D:87:33:DF:75:4B:68:7A:B2:FF:C3:32
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_I_GuHT4u6eNhzPfdUtoerL_wzI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:85:b8:8f:12:c3:1d:f9:8c:7a:39:48:1e:ec:84:84:8e:ef:
cd:6b:4b:c9:45:53:10:8e:3e:d8:f1:5e:f5:cf:b3:5a:ae:96:
ce:79:c7:81:85:af:b1:39:52:3d:43:5a:dd:99:ac:dc:f0:77:
49:fe:15:31:4d:a1:81:0f:c9:ac:a6:64:c2:c7:52:84:e6:1b:
01:13:91:fd:88:8a:bd:71:aa:25:13:89:75:00:4b:39:6c:3a:
48:aa:e2:c4:fb:57:3a:26:7c:58:8e:d5:f7:bc:2f:14:5e:5c:
2f:5d:7d:6b:0f:90:23:c4:93:97:fb:f0:8b:52:cc:41:45:8d:
0e:74:ed:9c:a0:f8:38:27:e7:55:49:94:3a:1c:5a:0f:41:52:
2e:df:20:53:ab:8b:48:7d:e0:0e:ad:4e:05:06:c2:18:05:ea:
92:8c:02:49:69:fe:b8:35:8b:2e:bf:f7:68:10:1c:63:cb:4f:
df:e1:b2:4c:19:9f:49:41:81:c1:05:2b:af:f6:72:8e:b0:35:
2c:70:9f:3f:95:84:e2:38:51:c4:5f:d8:7f:3f:0d:96:36:70:
8b:4c:86:d1:0a:95:49:33:3b:33:d6:18:a8:29:42:0d:1f:b8:
9f:f5:b8:d4:2c:01:55:f6:b1:20:38:b4:32:2a:38:9b:62:b1:
d5:c1:13:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org