Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nTODvzqguEOzWSHJzWw1A_t_YLk.roa
File: nTODvzqguEOzWSHJzWw1A_t_YLk.roa (raw, json)
Hash identifier: oD3npzNgwEhgYpl0xc37V2C3xQNvWKZVWEp7HavdlZU=
Subject key identifier: 9D:33:83:BF:3A:A0:B8:43:B3:59:21:C9:CD:6C:35:03:FB:7F:60:B9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B0B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nTODvzqguEOzWSHJzWw1A_t_YLk.roa
Signing time: Tue 29 Sep 2020 10:07:56 +0000
ROA not before: Tue 29 Sep 2020 10:07:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2827 (0xb0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9D3383BF3AA0B843B35921C9CD6C3503FB7F60B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:c5:91:ec:7c:a6:a7:40:91:a8:9e:9c:7f:
b5:ed:cb:75:3b:bd:c5:82:f5:29:10:43:d5:86:97:
6e:4d:ed:aa:70:60:3b:50:e1:47:21:30:77:1c:be:
a0:78:fc:54:b4:e4:62:0d:a7:57:a2:18:a9:1a:c6:
1c:b0:10:16:6a:7e:4c:90:8d:71:f0:6f:11:9b:81:
82:c1:a5:13:db:97:7a:f9:fe:16:23:57:5d:3d:17:
b5:55:84:be:ba:95:dd:16:37:d3:b9:21:4a:67:7b:
15:ce:07:0c:f2:d4:5f:85:a1:9f:2a:af:18:ef:f5:
74:e6:43:58:06:fd:b7:e8:1e:c7:9c:15:ee:8d:91:
52:06:57:49:0c:b0:16:e3:3a:09:30:c4:da:1e:45:
8c:ab:80:fc:49:9e:bc:2e:d6:8e:c1:a0:65:81:68:
77:58:3d:1a:12:fd:57:f7:01:e4:cc:7b:15:e0:9f:
e1:b0:28:45:ad:35:e4:a4:8b:10:b2:c4:26:34:0c:
56:18:2b:29:77:78:21:09:e1:9f:06:a0:f1:53:74:
58:cc:86:1b:93:cb:ac:79:10:f5:90:fc:3c:9e:31:
fd:c6:e1:c3:9f:ca:02:a2:c1:55:67:67:14:2e:e9:
3c:12:00:00:35:e0:0b:90:e2:59:8f:dd:63:3c:e0:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:83:BF:3A:A0:B8:43:B3:59:21:C9:CD:6C:35:03:FB:7F:60:B9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nTODvzqguEOzWSHJzWw1A_t_YLk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8b:9a:a4:db:c7:eb:00:4b:d0:6f:df:27:89:ce:7c:b6:3a:
2f:41:46:90:d5:1a:70:c6:a3:bc:79:3f:b2:88:78:09:8e:d3:
aa:50:ad:ad:68:d0:4f:93:90:e6:6d:1e:15:10:b9:b5:a4:40:
66:3c:24:cc:b9:6c:40:3b:49:91:7c:6e:66:f0:4a:e9:6d:54:
47:e8:b2:c0:37:9c:b4:bf:38:fe:df:65:91:7d:26:eb:1d:21:
b0:b3:3b:2b:2d:1c:61:7e:f1:0d:3f:b5:f8:5f:f6:73:77:b4:
86:f1:cf:34:e0:62:08:44:d9:df:be:ef:2c:58:c0:da:82:fa:
8a:a2:cd:10:dc:3e:7a:55:a6:c6:c2:76:93:2c:bb:a8:61:77:
94:32:5b:37:3c:be:cf:f4:c1:a7:bb:fb:a5:2e:fb:d5:3f:fd:
9a:37:48:d5:f6:6f:3d:ba:a9:f1:92:51:3b:13:46:74:a7:43:
26:e8:ec:27:90:9c:f0:e7:e6:1a:b4:a1:63:d0:93:1a:75:58:
aa:bc:6c:71:83:fb:a2:b4:86:86:ca:44:bd:d1:8e:aa:41:8d:
f4:e5:e9:9c:92:af:6a:8f:29:27:96:77:dc:7d:1e:0a:e0:9a:
6e:e2:1d:57:b0:d8:d7:1a:ce:a6:3f:ca:24:50:12:50:47:ea:
47:ea:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org