Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lhdvS-TPJU-rSRlvmSdqTdEvuYg.roa
File: lhdvS-TPJU-rSRlvmSdqTdEvuYg.roa (raw, json)
Hash identifier: ln22PO0D6S6I1J6R2GhqtCOVtpBvfRKo1kkzaYef8O4=
Subject key identifier: 96:17:6F:4B:E4:CF:25:4F:AB:49:19:6F:99:27:6A:4D:D1:2F:B9:88
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 135D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lhdvS-TPJU-rSRlvmSdqTdEvuYg.roa
Signing time: Wed 29 Sep 2021 02:55:41 +0000
ROA not before: Wed 29 Sep 2021 02:55:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 180.218.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4957 (0x135d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=96176F4BE4CF254FAB49196F99276A4DD12FB988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:e6:8a:50:92:8b:f7:7c:80:bb:23:22:52:
72:18:98:3f:e4:8b:c5:95:6b:4d:8c:ca:4f:a7:f5:
a7:54:59:e9:e5:43:4d:f5:37:c3:b4:db:07:38:41:
00:d7:06:3f:ad:1f:5c:4a:4e:6a:f3:7e:5a:66:4b:
72:4a:97:d6:8c:c8:19:e0:91:10:b1:8b:aa:d2:4d:
57:c5:ed:2e:19:09:64:32:db:d8:be:35:f0:38:db:
42:62:dd:ae:9b:37:40:ba:85:ed:d9:a5:e7:7a:27:
b9:91:b7:d0:57:97:f0:4c:1e:d5:c9:cc:3c:a2:9d:
df:54:4c:e5:06:1e:4a:b0:14:96:6b:b2:00:2d:d9:
07:b8:80:b1:24:78:82:01:8d:55:c9:82:c1:93:e3:
c9:5b:d4:39:10:ea:b5:f5:28:32:8d:4a:0f:14:b3:
23:52:4a:96:e7:0a:92:b6:13:82:17:a8:54:26:46:
e8:f7:bc:2e:0a:89:7c:0b:e1:7e:0c:5e:04:80:73:
e3:67:b6:54:1a:c0:d5:d4:bc:4d:53:50:fe:e2:19:
b1:88:4a:d5:06:a6:29:08:11:81:08:c3:0b:cd:60:
fa:49:a4:12:cf:6b:37:f3:e3:03:96:84:dd:a2:4a:
f2:ee:28:ac:ea:1b:2f:09:91:61:ea:84:aa:b6:f6:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:17:6F:4B:E4:CF:25:4F:AB:49:19:6F:99:27:6A:4D:D1:2F:B9:88
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lhdvS-TPJU-rSRlvmSdqTdEvuYg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
44:71:0a:fe:03:c1:db:ce:c3:65:0c:f1:0a:75:e6:46:7c:7b:
62:a0:74:a7:20:43:f4:ba:be:d2:df:e0:f0:c5:cb:91:a8:2d:
4b:b7:33:71:17:5d:de:5f:39:83:d0:6c:a1:06:f7:69:b2:e8:
a4:0c:7b:11:fc:2b:05:fc:a9:94:9a:e2:25:1d:f3:c3:d3:16:
6b:fe:7a:d6:d0:0a:37:59:2e:2a:01:23:a9:be:bd:81:aa:90:
c6:c2:14:c1:82:4d:e9:a0:fb:19:39:a2:a0:b1:c1:61:c1:ac:
29:a9:59:c0:70:48:c0:0a:e4:da:d9:7f:3a:5d:4a:78:88:70:
4f:ff:2d:c6:45:cd:77:5b:65:cd:36:1e:af:0c:be:6c:6b:28:
e6:6a:52:c0:08:b4:89:b3:2e:9d:a0:e5:c1:41:9a:0a:8d:7e:
36:d3:8e:25:b6:71:d3:53:73:e7:00:b9:8c:c4:d9:b1:0c:6d:
45:df:63:7b:c5:30:9a:23:f8:c2:a8:7e:ca:a2:ab:a6:b3:dc:
ab:8f:d4:82:72:ac:b2:78:15:fb:16:3c:28:23:41:f7:a7:df:
a6:9b:c2:c6:9b:85:40:ba:ec:74:0e:ab:f4:ed:e6:97:a0:66:
d7:80:ce:3c:2b:16:69:ee:9d:8b:82:d0:93:f7:ee:6d:0b:19:
1f:13:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org