Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p5q5yN9-rjjhYjiijKJWY7XFrAE.roa
File: p5q5yN9-rjjhYjiijKJWY7XFrAE.roa (raw, json)
Hash identifier: 0p82fpjrRsx5Xrp4/qjAj4NgS7VNKERBVh9veSlSjP0=
Subject key identifier: A7:9A:B9:C8:DF:7E:AE:38:E1:62:38:A2:8C:A2:56:63:B5:C5:AC:01
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B1B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p5q5yN9-rjjhYjiijKJWY7XFrAE.roa
Signing time: Tue 29 Sep 2020 10:08:01 +0000
ROA not before: Tue 29 Sep 2020 10:08:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2843 (0xb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A79AB9C8DF7EAE38E16238A28CA25663B5C5AC01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:ec:d2:d4:52:04:ef:7f:16:6b:02:3b:00:
ad:3a:6b:12:5e:ee:23:a3:50:73:a5:64:22:8d:75:
af:46:bc:78:25:e7:a2:7b:47:d6:93:21:00:89:c3:
78:5b:78:f2:56:dc:06:91:14:0d:57:fb:bf:66:c0:
0e:f9:d4:66:3e:4f:58:a4:c1:e7:d2:42:78:6b:59:
7c:24:3a:f6:39:44:1c:7c:19:f5:f4:d1:61:b4:50:
0c:69:92:27:9d:c9:93:03:8b:d5:3b:e1:f5:5a:48:
60:66:f5:61:56:c7:8a:82:61:51:fc:55:fe:34:46:
ba:82:2c:31:80:db:a6:0c:f3:81:7b:a5:8e:d5:fa:
2f:56:81:5b:5e:3b:a8:5e:ca:dd:75:cf:96:1a:f7:
fb:4d:6a:63:69:8a:71:e9:c0:30:05:94:44:cb:4c:
b0:a1:f5:54:62:20:8f:12:94:f6:8a:64:e8:5a:f8:
3e:65:53:d8:4e:77:79:f5:ee:6c:dd:a8:1c:34:b4:
1f:bd:aa:49:0c:d1:46:30:cd:13:17:6f:7b:f3:99:
62:7f:5b:80:d5:7d:14:0f:6f:cf:af:17:29:7f:0f:
c5:5a:90:d1:4f:61:be:23:57:c6:73:2d:1e:d1:40:
21:a3:4e:17:f8:66:07:f2:b4:21:30:17:31:fd:99:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9A:B9:C8:DF:7E:AE:38:E1:62:38:A2:8C:A2:56:63:B5:C5:AC:01
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p5q5yN9-rjjhYjiijKJWY7XFrAE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.208.0/21
Signature Algorithm: sha256WithRSAEncryption
36:90:d1:83:c0:ee:dd:7c:2b:43:78:21:82:e2:b9:83:33:25:
ff:67:8f:08:3b:a3:ea:10:5e:70:71:cd:96:8c:48:72:9f:cb:
4e:c4:1a:2a:c9:a1:cc:b3:0d:54:62:62:16:46:b0:32:d6:26:
3b:bc:7e:0a:23:37:08:69:5e:98:05:06:e8:ff:5a:ea:34:2c:
9d:14:b4:41:0c:3d:93:a6:be:34:e8:48:55:fd:7d:de:3d:7e:
92:df:50:e0:08:6a:da:a7:38:49:c0:1c:c6:a0:ef:15:a5:8a:
75:95:07:f1:67:62:a1:6b:af:9f:50:da:bf:4b:dc:be:fc:82:
b1:74:5e:c3:1b:2b:06:de:a9:cb:5f:ee:d4:0f:51:65:43:fc:
d1:26:82:9b:6f:0f:94:0c:e9:f3:69:b0:b8:e4:c5:1f:cc:d2:
e1:c0:55:05:77:43:88:41:07:0d:a2:af:26:5e:75:38:b0:1c:
f9:e1:a0:55:f7:5c:c6:b8:23:f4:fb:be:d6:22:86:75:71:ca:
5a:9a:28:d5:57:f6:77:ea:74:6c:27:1b:52:b7:79:f3:f7:64:
ac:e7:35:20:f0:57:44:6e:79:93:86:71:0a:07:f4:a1:55:6f:
f5:8c:33:67:c0:26:fb:87:9a:f4:10:1c:75:5d:7e:cd:75:f4:
4c:0f:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org