Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8AvSdrQR53vrGrKYwjT5rUVSXA.roa
File: u8AvSdrQR53vrGrKYwjT5rUVSXA.roa (raw, json)
Hash identifier: 1aKUotiwraEXMi++1qjYOQIePfKQiWuVy8D07VcCepo=
Subject key identifier: BB:C0:2F:49:DA:D0:47:9D:EF:AC:6A:CA:63:08:D3:E6:B5:15:49:70
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12F7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8AvSdrQR53vrGrKYwjT5rUVSXA.roa
Signing time: Wed 29 Sep 2021 02:55:11 +0000
ROA not before: Wed 29 Sep 2021 02:55:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4855 (0x12f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BBC02F49DAD0479DEFAC6ACA6308D3E6B5154970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:24:c1:23:7a:47:03:4f:81:2d:d8:14:ec:
fc:8c:bb:a0:5d:1d:f4:c8:64:dc:d4:95:8f:57:53:
c3:43:1a:20:58:71:5b:3e:94:7e:80:ae:25:2f:e3:
02:14:4f:d6:b1:38:ec:b2:7f:39:65:5c:9e:13:a5:
f0:42:a4:8d:e9:58:4d:ef:85:43:e0:b8:b5:ba:3a:
45:fa:89:3c:0c:fa:76:0c:3b:da:ac:9a:19:c2:f7:
5a:7c:d7:0a:16:14:f4:81:05:df:1d:a1:4b:ea:e2:
26:8c:d6:48:14:90:ad:c9:f8:96:10:2e:84:79:b4:
be:b0:d9:c8:43:1e:41:a7:97:7b:0f:be:06:23:93:
47:a3:56:a3:19:8d:f1:c4:87:71:0a:0e:35:4d:0e:
9b:3b:35:e6:8c:bc:0d:2e:c6:5e:56:16:b6:c6:48:
6a:b3:19:ef:a0:33:43:11:8a:43:75:13:e5:82:1b:
4a:ea:e0:35:e9:a5:92:9b:27:93:24:08:5d:1c:87:
40:ce:30:d7:de:7a:0c:51:1c:64:a0:8b:67:b4:42:
c7:e1:80:b7:c0:6b:6f:36:92:72:92:3e:78:18:6e:
3a:e7:b4:c4:06:c5:53:e0:88:81:1b:90:5d:43:34:
50:9f:d6:1b:88:54:1f:b4:87:2b:b9:da:cf:8b:4e:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:2F:49:DA:D0:47:9D:EF:AC:6A:CA:63:08:D3:E6:B5:15:49:70
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8AvSdrQR53vrGrKYwjT5rUVSXA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.200.0/21
Signature Algorithm: sha256WithRSAEncryption
85:d8:a1:ce:ff:df:74:ef:21:2d:7b:a2:5a:6d:70:e5:15:48:
85:19:68:7f:9b:94:25:00:44:1a:9c:aa:f2:d0:f7:00:e4:f3:
5e:de:99:df:59:3c:17:d4:52:e2:24:5a:e2:70:39:bf:64:18:
1e:ff:37:95:70:22:22:3b:eb:be:d1:8c:dc:ca:dc:01:2d:fa:
02:b9:d1:af:f0:d1:f0:53:51:f6:df:51:b1:fe:09:d7:26:ad:
f8:85:c3:0f:6f:d0:b4:c0:6f:7b:d2:26:23:09:fb:ad:c5:9a:
d5:58:8a:49:0c:9b:cf:02:9c:c4:c9:82:87:b0:72:12:90:84:
45:55:ac:ea:2d:aa:5c:a3:87:c3:d8:eb:18:9e:ce:82:8e:70:
dc:e1:41:18:7e:e3:e1:f4:f1:e6:51:2e:38:3e:6d:55:3e:f8:
81:a1:63:75:6d:ec:a6:8a:d2:94:c7:aa:65:b7:63:89:80:c2:
4a:23:4a:a9:a8:64:10:88:1b:ff:3e:8e:86:9c:19:71:a4:a2:
ff:ea:85:04:14:e4:82:c8:9c:cd:0f:b6:c1:6c:ad:97:26:01:
5e:94:de:38:a7:85:7a:7b:72:8e:15:ab:a7:3b:a1:f7:2c:83:
81:4f:63:a8:d0:75:e7:fd:76:32:72:be:0c:5e:88:db:59:63:
e3:c0:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org