Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zOemLMCbE7zKLillK_a3BSJU4SI.roa
File: zOemLMCbE7zKLillK_a3BSJU4SI.roa (raw, json)
Hash identifier: f0Sf04rypBAkvCAeOBJslyboepAWWo1dKzbGy2wenVM=
Subject key identifier: CC:E7:A6:2C:C0:9B:13:BC:CA:2E:29:65:2B:F6:B7:05:22:54:E1:22
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B1C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zOemLMCbE7zKLillK_a3BSJU4SI.roa
Signing time: Tue 29 Sep 2020 10:08:01 +0000
ROA not before: Tue 29 Sep 2020 10:08:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CCE7A62CC09B13BCCA2E29652BF6B7052254E122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:5c:33:91:91:b1:a2:70:a5:e6:0e:77:33:
20:fb:34:49:fe:99:13:1e:27:27:97:61:69:db:ec:
8d:ae:f8:54:44:be:95:fa:da:c4:d6:0d:3c:4b:00:
73:5c:21:5a:9a:4c:d1:6b:b5:ce:dc:c9:aa:9e:51:
b6:61:e1:d9:d9:82:fb:e8:55:85:9d:7a:37:26:0f:
b3:e4:3e:a4:68:a5:61:91:8b:3a:0b:b3:95:6c:07:
a8:e8:cf:0d:f4:ee:4e:b2:e0:80:f8:8d:4d:df:6a:
fe:77:de:e9:a9:ae:00:b3:05:ea:7e:30:bd:0f:5c:
37:5e:74:72:55:bc:f7:f3:53:af:ef:8a:02:f8:00:
c3:3d:3f:7b:f7:5c:13:73:ec:f9:f5:10:fb:bb:8e:
c3:5b:3b:f0:07:7d:f1:b3:4c:b7:60:30:43:14:64:
8b:8d:f0:ea:24:43:b9:45:03:44:ba:71:ff:66:b1:
d0:2e:19:e3:b8:1a:0e:bd:c6:a4:c9:3c:d5:3d:a7:
97:99:b2:08:4b:c0:98:28:c3:6e:17:0e:ba:e1:12:
9f:d8:33:1b:ce:9e:1e:de:d3:74:79:56:1d:53:d0:
0d:d6:02:78:48:f8:c8:3e:cf:7b:61:a2:c1:9c:a2:
c9:8d:cc:9a:0a:3e:87:3e:00:97:8b:0b:e1:10:c7:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E7:A6:2C:C0:9B:13:BC:CA:2E:29:65:2B:F6:B7:05:22:54:E1:22
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zOemLMCbE7zKLillK_a3BSJU4SI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.216.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ca:4b:fd:83:d5:29:24:e6:ef:28:b4:54:9b:86:ec:5c:f9:
e5:82:d7:f3:3b:ce:59:7a:0e:42:60:9f:39:a4:40:97:e9:9f:
2e:66:57:98:61:43:49:44:dc:7f:ed:56:ae:22:3b:2f:29:23:
a3:5d:27:b8:48:2d:a3:d7:a0:af:d5:c9:e7:fe:0c:d2:95:6d:
d7:1b:fb:91:62:ca:58:29:1a:a5:5a:fb:dd:ca:54:48:4d:1f:
8b:57:ee:75:82:32:8d:a7:57:72:f4:15:42:ac:ca:f6:e0:1f:
4d:09:52:36:bd:97:64:81:66:5f:99:99:e4:7a:b6:c4:94:d0:
de:3d:53:06:1d:9d:bc:1b:07:38:b9:cd:f6:e1:cc:4b:23:45:
dc:e7:71:33:6d:33:11:2d:70:ed:94:38:42:05:4d:a3:2d:79:
7f:6b:8b:d0:99:df:9a:17:1c:9d:83:ef:ad:9d:d4:08:4e:c7:
cb:43:8a:25:eb:4d:b1:54:ed:c1:d5:4c:61:33:d9:fd:18:e9:
0d:93:fb:61:de:ac:d3:15:18:de:f8:04:bb:12:4f:e2:91:a4:
d6:34:dc:9a:e6:42:17:68:59:53:38:7a:b8:7c:a4:48:31:82:
04:9a:22:a5:22:d6:99:77:1c:95:8a:8e:b8:a8:e7:b2:a4:a2:
a7:03:1b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org