Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1e07A_3JRyXhN2mWQhz7j_PhYo.roa
File: l1e07A_3JRyXhN2mWQhz7j_PhYo.roa (raw, json)
Hash identifier: 2B6PxAIneA6YIuukl5jVzr86ko1X+YxCIbIl4FZ/T7w=
Subject key identifier: 97:57:B4:EC:0F:F7:25:1C:97:84:DD:A6:59:08:73:EE:3F:CF:85:8A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 132E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1e07A_3JRyXhN2mWQhz7j_PhYo.roa
Signing time: Wed 29 Sep 2021 02:55:27 +0000
ROA not before: Wed 29 Sep 2021 02:55:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4910 (0x132e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9757B4EC0FF7251C9784DDA6590873EE3FCF858A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:2c:1d:dc:54:4b:5a:d5:0e:75:9f:cc:26:
58:c4:24:0a:fc:ed:e0:2b:19:7d:65:4d:6c:a7:c6:
8f:01:1b:de:e2:15:72:bf:7f:bd:e5:44:9a:1d:d7:
dc:03:6b:20:a0:b5:3c:0e:d4:7d:da:c6:67:a0:4f:
d6:b7:e0:01:15:38:56:b2:17:98:06:c4:86:13:51:
fa:ff:85:e5:95:bc:63:de:f1:83:1d:fe:d1:59:30:
64:93:51:63:6b:b7:ed:47:52:3e:cf:5f:8f:00:e2:
dc:25:1e:95:bb:b3:14:ea:d5:05:61:16:c5:72:55:
10:f7:ff:cd:aa:76:c1:3b:2d:1b:87:75:34:e2:cd:
90:90:6e:65:d3:19:67:cc:bc:7f:68:71:dd:f1:25:
f1:49:fa:3b:3c:b0:09:99:81:3e:4d:35:93:01:00:
8c:5b:ea:37:a4:bb:47:23:16:cf:e3:fe:74:cf:f5:
e3:54:ca:51:3d:26:59:7f:b3:28:ec:5a:e3:25:65:
b1:bf:e2:f8:98:5d:27:9d:fc:54:10:3b:43:45:11:
da:81:42:6d:70:d7:0a:93:c3:ae:b4:d4:a6:75:88:
fb:e6:0d:16:61:7f:07:c6:5f:fc:a8:3b:aa:4f:92:
1b:a9:2b:86:41:05:c5:26:5d:17:51:7f:61:8c:d0:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:57:B4:EC:0F:F7:25:1C:97:84:DD:A6:59:08:73:EE:3F:CF:85:8A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1e07A_3JRyXhN2mWQhz7j_PhYo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:b0:3d:ef:0f:a7:49:8f:1c:d5:a4:de:38:c4:e3:c5:52:fd:
9b:19:41:b9:57:0e:49:e1:4b:2b:f0:d9:4b:e1:13:46:36:78:
39:b5:94:9e:27:31:76:1e:ad:c1:ab:04:ed:1d:a1:81:94:e6:
5f:7b:6f:b6:0d:01:7f:fa:47:26:39:1e:d2:fa:8b:d7:30:c2:
4e:45:d7:72:1c:22:80:7b:64:68:d8:8e:f6:71:20:4a:d2:2d:
6a:85:a3:da:3f:80:e5:6f:02:b3:7b:d6:00:f5:7e:c8:4f:63:
1c:09:2f:60:1c:32:51:75:31:c7:b5:9d:8a:88:0f:e5:77:79:
e0:9a:95:2c:60:05:57:d8:fc:ac:6b:9d:c5:bf:73:fd:60:03:
08:b8:c3:0d:ce:15:d8:9e:69:cf:bd:36:a7:94:d0:89:ed:49:
dd:d7:f4:6b:95:38:4c:2d:8d:1e:4e:b7:96:19:8e:4e:87:5a:
3c:11:4a:98:9e:5e:d2:39:88:7a:fe:e8:ee:9d:42:2e:2a:ca:
93:72:34:87:00:07:09:4b:0e:e3:60:2f:ce:03:32:5b:35:b5:
72:ea:ca:64:3f:75:df:13:64:50:4c:9f:06:cc:b8:e8:9d:f7:
a8:73:51:0c:63:41:0b:73:57:a2:89:3e:c0:09:a1:cf:fa:d9:
25:87:06:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org