Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gEe-5JXxdF45OkcNIDJqi8fceGc.roa
File: gEe-5JXxdF45OkcNIDJqi8fceGc.roa (raw, json)
Hash identifier: LFigFVRVw7XiyZPm4cBTdp9xbOrEjVjDCNAbt1SuZyk=
Subject key identifier: 80:47:BE:E4:95:F1:74:5E:39:3A:47:0D:20:32:6A:8B:C7:DC:78:67
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1041
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gEe-5JXxdF45OkcNIDJqi8fceGc.roa
Signing time: Sun 07 Feb 2021 12:43:50 +0000
ROA not before: Sun 07 Feb 2021 12:43:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4161 (0x1041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:43:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8047BEE495F1745E393A470D20326A8BC7DC7867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:c6:13:58:54:2c:67:ca:ad:a5:d6:bd:c9:
b9:7d:73:a6:eb:22:71:f0:11:03:e3:4b:ab:50:cb:
84:4d:93:cf:32:5d:98:83:d2:c7:27:09:b1:3c:5b:
c8:c8:60:c9:ab:9e:81:a1:ab:69:96:72:1e:a2:85:
6c:7d:56:71:2e:e1:7a:02:90:a0:50:e3:d5:9e:4c:
c7:f5:71:7f:ca:46:fd:6b:cf:61:22:a9:d6:b6:7b:
62:1b:4c:a2:67:6f:d2:b4:7c:a1:b4:54:0b:06:b5:
9b:3d:a7:38:78:21:63:94:61:38:2a:5b:00:a4:1c:
b2:07:a6:ee:69:7b:2e:3d:e4:80:58:fb:49:f4:2b:
80:e5:ad:06:b6:92:35:1c:69:c7:03:9f:8d:0e:5f:
6e:2c:c7:ba:0d:32:bf:02:dc:ca:b2:08:60:b4:cf:
23:90:dc:f3:a6:56:34:57:ef:0b:ae:77:3d:93:12:
17:dd:8a:99:78:81:57:8f:f3:23:a8:b4:f6:3e:52:
c3:0a:73:47:a3:df:39:a7:b0:5f:24:50:95:dc:91:
d0:d3:53:0c:b0:12:50:58:8e:33:ec:70:53:f6:ff:
2f:54:cf:71:d5:dc:4e:52:01:df:65:25:43:74:e8:
f6:60:fc:be:69:5b:c8:0c:91:10:e6:0e:63:0a:78:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:47:BE:E4:95:F1:74:5E:39:3A:47:0D:20:32:6A:8B:C7:DC:78:67
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gEe-5JXxdF45OkcNIDJqi8fceGc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.64.0/20
Signature Algorithm: sha256WithRSAEncryption
42:3c:0b:f8:79:32:1b:7a:ef:ca:89:b1:b8:7f:f3:2c:56:8b:
1f:84:2a:2f:f8:8e:4c:ea:37:4a:c5:52:91:b0:46:66:a5:a2:
0f:56:6c:10:a9:28:81:db:58:92:d9:c9:20:93:d5:83:34:2d:
b1:34:b6:d0:ed:cb:bf:9a:99:15:5c:e3:6a:8d:75:49:96:48:
27:60:eb:19:ca:1f:6f:3a:be:ff:5d:d4:77:c2:e8:ea:b8:da:
80:c7:91:93:87:df:4d:91:6a:37:a0:19:fb:de:e2:09:41:17:
b6:a3:29:06:ee:cc:6e:e8:b3:5b:51:d7:7d:f9:71:4c:f0:c6:
48:61:36:4d:2a:6e:68:ff:1a:f2:95:6e:ce:df:8e:c2:01:3f:
02:d0:7f:f3:cb:97:90:e8:d3:c0:b6:76:19:88:03:7e:09:2d:
85:37:51:6a:04:7f:45:20:27:2e:06:e4:03:61:22:0c:8b:96:
aa:74:49:4a:ec:c5:e1:ab:1b:a0:a5:b0:a9:34:4e:2f:9b:14:
d8:7f:71:f8:58:85:a3:71:99:20:c1:04:75:43:45:10:eb:29:
b6:70:6c:97:24:93:83:07:57:9f:22:5e:f8:7b:a0:db:0c:6e:
6c:ba:8e:da:cf:b9:a0:ce:67:5a:2d:d0:53:d8:c0:83:4b:44:
83:a6:bc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org