Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/veJRt7K6aeSH9XWZH-ibLOP0hN4.roa
File: veJRt7K6aeSH9XWZH-ibLOP0hN4.roa (raw, json)
Hash identifier: QHpVj20/3f3MU3xqBB2uH5ONoKY+8uwNH4ydLXmGFl4=
Subject key identifier: BD:E2:51:B7:B2:BA:69:E4:87:F5:75:99:1F:E8:9B:2C:E3:F4:84:DE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1329
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/veJRt7K6aeSH9XWZH-ibLOP0hN4.roa
Signing time: Wed 29 Sep 2021 02:55:26 +0000
ROA not before: Wed 29 Sep 2021 02:55:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4905 (0x1329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BDE251B7B2BA69E487F575991FE89B2CE3F484DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:05:3c:72:ff:e8:de:2f:24:2c:22:2f:1f:
ef:a8:2f:fd:53:e0:25:bc:9c:8a:00:39:12:d8:f1:
6a:e5:7c:0e:51:a5:8f:de:0b:c9:b6:76:99:13:9b:
96:c9:8a:f5:31:23:7a:83:02:da:1c:8c:c1:49:7c:
5b:85:17:a3:98:d1:fd:e8:cd:1d:54:7b:de:e9:83:
e7:3f:30:87:61:e2:6f:d7:cf:cc:bc:9a:df:75:f2:
2d:f5:a1:7f:92:c4:e9:6c:86:f4:4f:03:ee:97:7f:
7f:cf:7b:c9:1a:41:3b:84:b3:29:09:ab:95:cd:08:
fd:5d:8c:92:e5:ed:a5:d9:a2:32:a9:0c:0c:1d:9e:
78:cf:7e:ee:b6:30:be:19:43:b9:39:ee:5a:9b:06:
b7:d3:51:1b:21:86:b9:e8:45:ae:b0:db:aa:a4:a2:
93:e7:35:02:d4:29:53:e9:cb:45:8a:e6:b0:a4:0b:
ae:4d:ac:c3:c9:a8:94:a9:01:bd:c4:2d:5e:c3:de:
b9:4b:8b:8b:9a:d3:2a:e7:05:e4:a3:1b:86:65:39:
99:32:49:9f:5d:c0:65:d1:09:3b:13:b7:d8:67:dd:
aa:27:43:c2:68:a5:db:cf:6f:17:e6:4f:63:0b:10:
48:6e:5b:3f:e5:73:40:e0:63:08:87:71:3b:91:13:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:51:B7:B2:BA:69:E4:87:F5:75:99:1F:E8:9B:2C:E3:F4:84:DE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/veJRt7K6aeSH9XWZH-ibLOP0hN4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.0.0/18
Signature Algorithm: sha256WithRSAEncryption
00:72:da:0b:25:35:b4:bf:84:99:15:d9:56:c0:6a:d4:d0:a5:
37:c3:43:e2:20:58:36:6d:33:13:03:0a:37:b5:c2:ca:d4:c9:
b9:ae:7d:34:aa:16:20:91:a6:32:cc:ea:23:ee:e3:31:20:a0:
67:5f:8e:76:a9:bc:31:ca:d1:52:20:95:48:d2:19:95:40:cf:
9b:22:c6:01:f6:ba:3d:36:01:82:c5:e9:cf:14:36:0f:f2:7a:
f1:c7:5a:94:e1:39:91:b9:1f:b3:81:33:f4:4c:fc:a7:ad:f0:
db:6f:23:7d:23:b3:15:a9:a7:58:a0:90:92:e6:9a:7b:8b:13:
e9:85:ee:a5:07:33:f3:b0:94:40:17:a8:a4:bf:8a:6f:79:b4:
60:8a:92:1d:bd:02:a5:ec:ed:67:ab:e3:36:9d:2a:20:15:61:
8c:98:32:0d:fd:0a:34:f8:c4:ae:15:ad:44:50:2d:9f:4b:aa:
48:b7:36:2f:cc:b4:56:f7:e9:b9:4c:cd:54:04:54:94:89:a4:
fb:37:d2:43:65:88:bb:42:b6:7f:bc:31:5a:8f:3c:2f:9a:14:
5d:8d:9e:9f:e4:e1:44:1b:a3:3f:83:1f:f1:ae:2e:e2:4a:38:
15:72:10:8a:f0:79:65:e7:d7:8c:b6:17:96:7d:e5:f0:cb:f0:
da:85:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org