Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PV0G6PYstgvidxKLHL0NhoFhpA.roa
File: _PV0G6PYstgvidxKLHL0NhoFhpA.roa (raw, json)
Hash identifier: 9DtUIJJjAyS8BYTHOCZEqa8GTD4FsFG9OcGhPTN18pc=
Subject key identifier: FC:F5:74:1B:A3:D8:B2:D8:2F:89:DC:4A:2C:72:F4:36:1A:05:86:90
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10CD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PV0G6PYstgvidxKLHL0NhoFhpA.roa
Signing time: Sun 07 Feb 2021 12:48:58 +0000
ROA not before: Sun 07 Feb 2021 12:48:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4301 (0x10cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:48:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FCF5741BA3D8B2D82F89DC4A2C72F4361A058690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:a6:1c:c9:74:6f:75:39:7b:d8:bf:31:3b:
b7:0b:38:ca:62:53:da:73:fd:7e:a3:4d:1d:b2:92:
91:eb:89:63:1a:13:9c:70:66:f6:fb:38:c6:9e:a9:
d5:63:8c:21:a2:f8:dc:1e:f9:f2:72:98:2f:6d:05:
bf:aa:db:83:d6:09:f5:96:df:ed:36:2c:7f:c8:2e:
49:60:94:49:56:db:29:01:4f:e6:bd:ef:6d:5c:0b:
e4:01:22:ac:bd:2f:01:87:51:aa:b8:c0:a4:6b:49:
3d:e1:64:f9:d6:7f:bd:3b:46:60:b2:c0:1c:f8:de:
74:94:f3:b8:60:30:45:f2:81:6a:46:bb:d4:40:ea:
8e:c8:a6:fc:46:0e:29:17:73:92:cd:bb:2c:46:59:
97:b6:aa:06:f3:01:c7:d8:90:32:96:19:41:e7:d1:
79:a4:c0:f2:12:8c:11:4b:6b:50:57:25:0f:b5:43:
c6:04:a8:5c:6c:74:75:d9:95:e3:ac:cf:1a:36:7c:
85:43:57:ac:20:f5:8b:a1:0b:b0:17:ab:45:27:47:
0f:66:db:44:3c:9f:44:77:de:c6:21:48:4b:2f:3e:
7f:fb:ed:aa:c1:99:e2:2c:37:a6:24:08:c4:06:74:
00:fe:87:10:e5:6e:2c:79:93:20:2f:4c:be:b2:07:
e4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:74:1B:A3:D8:B2:D8:2F:89:DC:4A:2C:72:F4:36:1A:05:86:90
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PV0G6PYstgvidxKLHL0NhoFhpA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/20
Signature Algorithm: sha256WithRSAEncryption
25:60:6c:f0:ed:7f:5b:2a:57:4e:e1:74:35:3e:61:8a:70:c3:
ad:fb:86:7e:1f:af:86:ea:92:a5:0a:9d:3e:ec:5f:f8:70:3f:
38:b1:2c:73:8d:33:a7:a0:97:90:f6:b3:a4:ab:78:f1:78:ad:
9e:7d:c9:ef:d3:ef:0d:cb:ea:71:d7:e5:f2:26:43:bd:77:c0:
ef:3a:3d:7b:25:4e:d6:a3:fb:e6:de:e6:22:09:4c:6f:5d:1d:
f3:0c:56:70:2a:16:a0:af:22:f9:8f:2c:66:0c:77:02:44:55:
6c:42:8a:4a:a7:d1:e9:8a:66:3f:2e:2c:d7:44:96:4f:db:8f:
37:e9:48:07:45:25:0b:07:16:f3:40:f0:74:d4:8f:d1:b9:a1:
bc:29:93:e2:d3:3c:dc:41:d0:f7:7f:c0:52:4c:54:21:dc:cd:
18:cb:c8:53:c2:03:88:53:14:d3:56:9b:53:aa:82:d8:9a:56:
2e:71:c5:a7:bf:08:3c:f6:c1:87:56:22:9f:a7:41:e9:17:cf:
e4:4a:56:5d:2b:07:d7:b3:22:ec:4f:a7:c8:56:f6:68:cc:7d:
ea:e5:ac:21:38:30:fd:38:4c:49:b4:56:66:d0:ca:0d:16:32:
67:0d:2c:53:6c:46:55:44:b7:0e:57:41:8e:52:41:c8:e2:32:
46:90:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:38 2023 by rpki-client on console-ams.rpki-client.org