Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgrVX0mD4wBgWc3uf1A4FirWlCw.roa
File: sgrVX0mD4wBgWc3uf1A4FirWlCw.roa (raw, json)
Hash identifier: 6uis2io3bT5WY6EM/tqxo9UDlprltZDUcEsQdRW31BM=
Subject key identifier: B2:0A:D5:5F:49:83:E3:00:60:59:CD:EE:7F:50:38:16:2A:D6:94:2C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B3E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgrVX0mD4wBgWc3uf1A4FirWlCw.roa
Signing time: Tue 29 Sep 2020 10:08:11 +0000
ROA not before: Tue 29 Sep 2020 10:08:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2878 (0xb3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:11 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B20AD55F4983E3006059CDEE7F5038162AD6942C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:fd:ef:da:ad:f7:db:f9:ce:7c:0a:87:92:
5a:1e:26:8e:b7:f0:f3:90:cc:c2:af:37:1d:fc:eb:
e6:3f:f9:83:32:d5:f5:f1:af:8b:6e:8e:26:5a:70:
93:7e:be:65:62:23:a7:a6:a1:12:b4:0b:c4:ed:97:
ca:83:56:1e:61:d2:b5:b8:0e:2c:c2:51:40:11:e4:
03:9e:e7:20:55:ff:76:20:fe:56:01:d3:c6:42:4a:
67:55:04:01:2b:b8:c3:ba:8b:42:77:51:24:69:ea:
1a:be:48:fc:5c:5d:88:50:17:e4:05:8b:36:cb:de:
ce:a2:55:7e:ac:90:ad:44:54:35:72:7c:16:f9:56:
8d:25:a2:70:df:8c:c6:4e:6e:df:ef:77:8a:e0:e6:
83:97:5c:80:cc:6a:cf:2c:e2:78:92:d7:9c:ce:10:
dc:41:c8:f5:ea:50:b0:02:29:34:1d:34:12:c8:e8:
9a:c5:ba:5c:1b:05:50:6d:ab:54:c4:9d:59:a9:4c:
57:48:26:61:4f:65:35:be:d3:41:00:3b:5b:e2:bd:
18:aa:b1:2b:13:39:d7:fd:d7:d1:f2:16:62:c4:9a:
53:62:e6:d3:5f:a7:15:e4:e5:27:f6:96:98:b7:62:
31:cd:76:c5:a7:45:cc:9e:b5:ee:ce:5e:90:f8:62:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:D5:5F:49:83:E3:00:60:59:CD:EE:7F:50:38:16:2A:D6:94:2C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgrVX0mD4wBgWc3uf1A4FirWlCw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:88:f1:cd:a5:5a:58:c4:a5:cb:f3:f1:02:30:fe:85:62:a9:
43:da:07:49:ce:1e:84:e0:d0:ce:70:51:09:56:1d:4a:01:00:
a4:57:93:c6:e8:1d:72:08:9b:49:7d:61:f7:d5:1f:80:76:a8:
2d:65:a2:db:f1:51:a3:15:13:18:7d:1a:12:fd:f8:ae:3e:24:
a8:e6:24:94:14:9b:96:cb:31:ec:f2:32:a1:b1:11:c7:d4:22:
31:3f:f8:fb:44:c2:66:c3:05:fd:cf:cc:19:29:15:b9:9c:e3:
9c:f3:e9:25:7c:2e:ac:4f:ae:0a:6f:27:76:b8:8b:ca:36:f7:
a9:9c:7a:f7:ec:a5:f6:ef:8e:90:76:85:64:0f:b5:90:ff:2f:
05:7a:17:53:2a:dc:46:30:4d:21:f4:c0:38:0b:82:a7:6b:91:
cc:0e:ed:36:d1:9e:78:6c:8a:7e:8c:bc:44:c0:1a:65:6d:4e:
e3:93:56:64:c2:ea:b5:5b:e0:5a:83:89:2c:10:ac:c4:c3:7e:
c7:c3:ba:b7:7d:4a:c6:f9:50:e5:6a:3e:b8:96:d4:c4:17:ee:
80:a9:05:36:83:e3:75:3c:3f:c8:e1:31:09:18:4d:2d:46:5e:
28:20:7b:b7:c0:a0:71:85:0a:48:60:fb:e2:67:58:39:cc:f5:
09:d5:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org