Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ssNiHvBJFtsIlR49FsmIJ3fmcLQ.roa
File: ssNiHvBJFtsIlR49FsmIJ3fmcLQ.roa (raw, json)
Hash identifier: 6dYMQYyijUuy4ugqGdlnen/jh+k8r5Chdfxe4U5twKQ=
Subject key identifier: B2:C3:62:1E:F0:49:16:DB:08:95:1E:3D:16:C9:88:27:77:E6:70:B4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B05
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ssNiHvBJFtsIlR49FsmIJ3fmcLQ.roa
Signing time: Tue 29 Sep 2020 10:07:55 +0000
ROA not before: Tue 29 Sep 2020 10:07:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2821 (0xb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B2C3621EF04916DB08951E3D16C9882777E670B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:02:a6:09:b1:be:a5:2f:d9:8b:44:f0:2d:
69:85:1f:91:e7:d4:3b:25:fc:43:82:a8:d4:3d:c6:
11:af:75:aa:5b:69:b2:eb:85:3d:15:f9:42:ac:c0:
4f:7b:dd:63:df:14:4d:b0:a8:42:38:11:31:33:55:
18:84:97:9b:eb:f4:78:1a:12:7c:d3:ac:a7:73:f7:
56:86:81:d3:11:78:4a:b2:d2:e4:6d:11:b9:be:6e:
45:00:03:a3:7a:9a:89:75:d1:01:23:a0:89:2a:9a:
34:9f:2e:84:c0:ce:91:78:cf:98:c1:50:67:f1:6f:
f5:71:8d:38:91:96:f7:54:c2:79:9a:dd:fc:19:9a:
ec:8b:38:f0:68:67:1d:50:5e:93:14:68:e8:31:4c:
d0:e3:79:52:2e:f6:55:e9:a1:38:d0:cf:72:51:c2:
a3:7d:94:37:23:6b:3c:73:24:5a:29:eb:49:c6:cb:
99:fe:96:a1:40:b6:eb:97:83:18:cd:34:03:e6:2f:
7a:25:39:e5:78:3f:88:22:03:23:5c:b5:6c:34:9e:
5d:21:69:89:a1:6b:34:5c:5f:32:0e:32:f8:01:a1:
68:09:78:d4:63:30:af:1b:c2:93:81:83:7d:d0:1a:
58:19:c9:34:06:44:94:25:29:91:70:d8:87:d2:84:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:62:1E:F0:49:16:DB:08:95:1E:3D:16:C9:88:27:77:E6:70:B4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ssNiHvBJFtsIlR49FsmIJ3fmcLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.64.0/20
Signature Algorithm: sha256WithRSAEncryption
55:ca:5f:0c:87:7d:f8:e5:8e:93:b5:ed:fc:4c:13:05:4f:66:
52:70:13:9c:fa:6a:43:3a:05:d3:31:86:a2:d8:33:46:54:5d:
38:42:96:49:ce:fa:95:d5:55:0e:e0:70:06:c8:41:b9:4e:6b:
33:07:b7:54:c6:7b:a2:73:b1:14:9b:b1:aa:23:a4:86:b8:fa:
fa:b3:8e:2b:07:07:c1:3e:d9:ae:42:90:55:48:51:2a:75:d5:
5e:22:c8:26:1a:7b:9f:0d:2e:99:20:de:26:4e:84:93:b8:c0:
95:5e:9f:2c:2e:8c:9f:a3:26:c6:e7:d2:ee:3a:ec:e3:95:43:
3e:69:8c:e9:92:df:fa:88:6f:f6:f9:51:f5:82:81:14:fa:bd:
98:8f:c8:92:80:d1:0a:3e:b2:94:8a:e8:6c:37:50:74:9b:fb:
f3:38:33:b8:c6:1e:88:2f:37:24:fb:dd:52:e9:c5:79:d1:93:
d8:15:3a:af:44:0a:23:66:c4:bd:d1:ce:22:71:3d:c0:fb:7b:
9a:72:19:44:03:a7:37:8e:3b:65:2b:d4:b9:1f:2d:58:cf:c8:
67:db:ac:d4:32:4f:3d:7f:c8:f0:20:80:f4:da:2a:19:a0:06:
08:d1:7f:99:74:9e:8e:d9:4e:bc:2b:e6:3d:ac:83:56:39:4f:
d5:21:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org