Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tL_MvEINZtGC75g3hvIHCLt4RIE.roa
File: tL_MvEINZtGC75g3hvIHCLt4RIE.roa (raw, json)
Hash identifier: uvcUoGK1UCEMZsTmv/uWi3LSCKP+o/tY6BCdWOZs36Q=
Subject key identifier: B4:BF:CC:BC:42:0D:66:D1:82:EF:98:37:86:F2:07:08:BB:78:44:81
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1085
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tL_MvEINZtGC75g3hvIHCLt4RIE.roa
Signing time: Sun 07 Feb 2021 12:45:59 +0000
ROA not before: Sun 07 Feb 2021 12:45:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.186.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4229 (0x1085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:45:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4BFCCBC420D66D182EF983786F20708BB784481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:12:59:d3:31:27:7d:af:58:04:35:d8:c5:
62:27:41:f0:24:09:c9:de:93:a0:8d:e6:01:db:ff:
f6:72:5e:a2:ee:5b:72:1a:b5:57:64:db:26:6e:d9:
ee:a4:48:66:0a:00:1d:2e:cd:aa:8f:5c:fe:83:f2:
9f:7e:84:6a:b6:8f:ef:89:2f:f0:f1:0d:e1:48:67:
67:5e:ea:ca:c1:fe:1c:54:40:19:df:71:df:8e:77:
41:bf:61:c8:8a:48:1c:87:91:e4:73:bf:04:a7:22:
c4:83:ee:37:fb:91:88:a7:01:f9:7e:be:c4:b9:dc:
56:ae:8c:da:a0:f4:a7:21:3e:b9:5a:33:de:9f:d1:
12:ad:c0:43:db:44:ab:06:09:ca:c6:77:9d:38:5f:
7f:b6:a7:db:d8:db:73:2c:98:0f:37:92:08:ae:0a:
9e:99:3d:50:a5:02:91:d5:fb:dd:57:71:ea:c7:49:
83:cf:80:43:23:49:1f:40:4c:6a:cb:49:75:81:92:
17:34:40:b5:0c:d4:92:29:86:8a:d9:53:e2:f1:d6:
f4:69:82:44:86:c0:ab:00:2e:21:e1:7c:eb:5a:92:
3d:b2:0f:35:94:4a:0c:91:0a:27:7c:6f:10:88:6d:
88:9b:2e:67:0b:97:a4:eb:1f:0e:5f:ee:3e:85:a8:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:CC:BC:42:0D:66:D1:82:EF:98:37:86:F2:07:08:BB:78:44:81
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tL_MvEINZtGC75g3hvIHCLt4RIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.186.0/23
Signature Algorithm: sha256WithRSAEncryption
14:ff:a2:c7:27:9f:12:16:18:d4:b4:03:db:a1:f8:ab:05:44:
e5:e8:0f:d9:75:93:76:c5:9e:1a:00:99:f0:57:7e:52:9b:6c:
b8:14:9f:a3:eb:b4:68:fa:f5:ed:26:d5:aa:72:6f:8a:0d:61:
d8:77:f4:6d:7e:6b:cf:2c:b2:cc:2f:c4:a2:df:e0:21:5c:5d:
49:a5:f1:0d:a3:38:6f:f1:81:29:b9:fb:cd:37:c9:59:12:07:
d6:16:09:29:10:93:6b:14:c4:2a:a3:a2:ca:06:da:07:05:57:
7c:cf:3a:f8:c8:5c:21:b5:ce:3f:03:6e:9e:be:94:3e:48:25:
a2:b8:b9:8f:6e:97:23:3a:55:f4:1d:3c:dc:3c:7b:36:e8:bc:
23:f1:3b:22:c8:9d:97:41:4c:82:9d:d7:69:5d:96:b4:df:63:
8c:58:ec:ee:62:41:22:f8:4d:d1:e3:b5:74:25:a1:f0:4d:cb:
7c:54:4d:dd:55:5d:a2:14:d9:49:bc:95:74:fa:9f:b8:46:cb:
8a:b2:9f:b0:3d:98:43:b1:90:96:29:16:63:fa:b9:e5:0a:62:
89:92:1d:8d:eb:7a:db:f6:d5:aa:15:44:d8:1b:83:7b:5b:1d:
fc:c8:41:59:fd:36:78:c6:76:a6:a2:30:b8:f3:6a:da:55:21:
e9:d7:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org