Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xsvu2Rw5EK4N9v0ubwVWUJQMC3E.roa
File: xsvu2Rw5EK4N9v0ubwVWUJQMC3E.roa (raw, json)
Hash identifier: P20Cu2NtmiHfLV9S+YbYTKnSEEYUXOceoYeBugHgX7g=
Subject key identifier: C6:CB:EE:D9:1C:39:10:AE:0D:F6:FD:2E:6F:05:56:50:94:0C:0B:71
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 103F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xsvu2Rw5EK4N9v0ubwVWUJQMC3E.roa
Signing time: Sun 07 Feb 2021 12:43:46 +0000
ROA not before: Sun 07 Feb 2021 12:43:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4159 (0x103f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:43:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C6CBEED91C3910AE0DF6FD2E6F055650940C0B71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:cb:46:6b:60:5b:af:f7:fc:42:fb:1e:94:
5d:10:9f:c5:75:e0:f1:04:34:d3:13:b2:33:58:fc:
b7:80:b6:be:d2:06:73:bb:5a:8f:21:4e:40:cf:43:
9e:24:13:64:04:29:d0:76:50:e0:e9:dc:64:54:45:
f9:02:c9:b4:80:9b:a8:28:d0:f5:e8:57:6f:de:94:
64:90:d3:51:5c:27:63:4f:3f:21:fd:36:cb:6e:4d:
5a:26:0d:a2:b6:9a:eb:2b:7f:0e:bf:fa:e1:fe:39:
be:3d:bc:ff:98:c8:ff:aa:b1:83:eb:2a:48:7a:dc:
3c:b6:12:2f:1b:44:6b:34:72:eb:da:7c:ab:34:a1:
2d:8b:5b:18:09:fa:cf:3f:e7:3f:40:bf:77:1b:9e:
46:90:7c:90:99:e0:69:c5:69:50:63:68:86:38:78:
04:d2:71:4d:8b:0c:3e:8e:8a:76:96:a6:07:08:3d:
04:84:71:dc:1e:fd:34:2d:2a:86:9e:c9:63:70:bb:
a7:a7:f4:d9:48:2c:85:43:99:4b:57:4c:b8:fd:34:
fc:a1:df:a2:1c:24:a0:73:e3:c2:65:71:12:0b:d7:
60:d1:e8:85:83:6b:3a:7d:fc:8f:94:bf:43:bb:a4:
1b:e7:3e:54:2c:ed:62:09:51:51:03:ae:60:65:b3:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CB:EE:D9:1C:39:10:AE:0D:F6:FD:2E:6F:05:56:50:94:0C:0B:71
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xsvu2Rw5EK4N9v0ubwVWUJQMC3E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.56.0/21
Signature Algorithm: sha256WithRSAEncryption
52:0c:c2:89:7d:e4:f4:1a:0f:d1:bc:fe:10:f7:1f:b5:e5:81:
9b:bf:1e:17:25:5a:70:95:9c:88:2e:a2:ae:b2:46:c3:01:23:
1a:5a:99:c6:97:df:f9:bd:c3:12:68:5e:98:2f:bc:47:bf:5b:
0d:e3:8e:66:04:c7:7d:ee:ce:b9:a3:c9:36:c4:74:90:76:fe:
a1:61:62:a7:de:c3:e9:2a:81:f9:ec:f7:b5:fd:8a:99:85:68:
7c:0d:2a:ad:30:80:ad:a5:8d:f2:6e:a4:0f:4f:71:cf:b1:0c:
b8:be:73:8b:27:12:3d:1a:02:22:e7:2c:0a:b5:9d:f1:25:d3:
3d:04:47:0c:5b:84:bf:58:8c:d0:61:a8:fe:d1:64:a5:2c:e5:
2a:33:ee:17:0f:52:4f:65:56:4f:cb:83:45:2b:be:ac:3a:f3:
f4:3c:bb:bf:93:53:2f:07:53:f5:df:62:96:95:08:3c:38:f4:
e1:1c:56:ce:70:f2:5d:94:2a:4c:23:c2:4b:dc:27:73:d5:0f:
bc:a4:dc:f7:e2:6b:bd:27:45:8e:9d:36:63:96:aa:2d:29:e6:
88:6b:8d:f7:b6:17:7d:2b:54:71:84:78:8c:5f:08:86:1c:c0:
e8:af:66:0c:e7:f3:71:4a:f1:86:66:e9:5a:c7:dc:e1:f5:a4:
5b:71:30:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org