Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oHcAe1VtRw9_OBGRTMrT8tSuPcA.roa
File: oHcAe1VtRw9_OBGRTMrT8tSuPcA.roa (raw, json)
Hash identifier: jliirvaA8OgJzi5BWfLA+kOb+BxKxCAj88mHch2goKM=
Subject key identifier: A0:77:00:7B:55:6D:47:0F:7F:38:11:91:4C:CA:D3:F2:D4:AE:3D:C0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 131C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oHcAe1VtRw9_OBGRTMrT8tSuPcA.roa
Signing time: Wed 29 Sep 2021 02:55:23 +0000
ROA not before: Wed 29 Sep 2021 02:55:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 180.218.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4892 (0x131c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A077007B556D470F7F3811914CCAD3F2D4AE3DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:4f:1e:66:90:ff:9c:7f:cd:9b:29:45:3b:
92:ef:93:04:3c:39:c2:d4:3b:3b:50:f5:a4:61:59:
43:44:61:73:29:b1:5d:62:53:4e:08:99:cb:d1:55:
5e:0d:f1:8d:21:a3:17:c9:dc:1e:61:8b:04:85:54:
1a:f9:5b:82:d2:57:4e:9c:b2:33:18:36:d3:c0:f2:
23:4e:40:aa:1d:b5:b0:ca:92:4d:b9:68:31:04:c9:
04:d0:33:99:58:3a:3c:cf:4d:d3:4e:39:23:6d:d1:
c3:d0:be:cc:f7:14:41:b9:f2:99:c0:e7:d9:e5:41:
99:31:97:f4:35:1c:d6:c5:02:7b:98:75:4e:c5:ee:
02:c8:ee:2c:45:2e:e8:d9:e6:0e:e7:ea:90:3a:2a:
a9:4a:54:4f:ae:8c:c0:f2:15:4a:01:3d:fb:de:dc:
ba:cc:e0:7c:4f:81:55:fc:7c:2e:5a:d9:b9:68:e7:
0b:a4:c7:7a:96:4f:0e:1d:a0:47:a4:3c:7a:d4:28:
02:8c:8b:0c:82:04:f3:e5:e3:9e:17:62:28:62:19:
97:00:f2:c7:32:f0:aa:4a:8a:ce:69:e6:84:2f:28:
4c:7b:5d:20:6e:91:c5:79:52:04:b5:7b:68:59:fc:
8a:40:cc:55:14:42:68:0b:3c:73:3f:15:7d:e4:b6:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:77:00:7B:55:6D:47:0F:7F:38:11:91:4C:CA:D3:F2:D4:AE:3D:C0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oHcAe1VtRw9_OBGRTMrT8tSuPcA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.104.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:a8:9c:4e:1e:42:58:b8:37:95:86:20:27:8d:90:fa:d1:ff:
79:55:a8:e1:6f:0b:ed:ce:40:cf:60:4d:74:d6:bf:f9:03:10:
cf:c6:aa:6c:be:89:17:6b:14:38:d0:d3:df:d5:fb:4f:7e:02:
99:82:fd:1d:12:6e:6e:83:c1:39:7c:82:b1:f9:29:eb:45:c9:
d7:81:5e:42:2b:af:f9:c8:67:57:a4:78:51:07:94:0a:ff:83:
c1:8d:3c:54:8e:96:88:fc:6a:1b:02:4e:1a:16:c8:eb:8a:3a:
05:9f:51:63:2d:3d:d7:5a:bc:2b:e9:58:f4:9f:65:15:ec:05:
00:bb:9f:3c:31:62:1c:f5:61:1d:46:97:e2:53:b3:d9:6b:e2:
25:f0:0e:8a:b1:b7:f4:4e:3d:e7:b6:d4:0f:97:3f:b5:cc:39:
da:2e:90:23:3f:18:95:51:96:f9:88:23:9a:60:83:e0:0c:13:
c0:41:1e:c5:29:ed:1b:54:8c:c4:53:7a:1f:fe:3b:80:79:23:
ec:bb:b0:04:f1:7d:70:27:9d:0d:23:f3:cb:b1:9a:2d:27:6f:
c0:80:a7:00:f9:b1:63:0c:45:b4:75:aa:df:f8:86:f5:0f:b9:
be:3f:92:fe:63:0c:ec:f6:7d:d2:6f:25:09:c6:1d:31:73:d2:
b7:70:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org