Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/846JyZpLDkLVRNbjhCy9BpI0-Vw.roa
File: 846JyZpLDkLVRNbjhCy9BpI0-Vw.roa (raw, json)
Hash identifier: BelC62oDsXTiogcurOJvbUwhTcM/wKzEBFVdc4Juazw=
Subject key identifier: F3:8E:89:C9:9A:4B:0E:42:D5:44:D6:E3:84:2C:BD:06:92:34:F9:5C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B3D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/846JyZpLDkLVRNbjhCy9BpI0-Vw.roa
Signing time: Tue 29 Sep 2020 10:08:11 +0000
ROA not before: Tue 29 Sep 2020 10:08:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:11 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F38E89C99A4B0E42D544D6E3842CBD069234F95C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:cf:4e:ce:7c:db:60:90:2e:05:4c:48:67:
c4:cd:eb:07:ba:03:e4:be:01:85:84:0f:30:c0:a7:
a8:e3:2d:cd:cd:b1:8e:68:22:2c:ef:ff:fc:93:08:
6d:af:af:ba:3e:36:f0:31:ba:2d:eb:b2:7d:81:c5:
86:84:96:dc:43:17:69:5a:b7:23:05:0e:49:59:a0:
3e:fd:e7:28:d2:62:1a:1e:ea:27:62:15:60:27:6f:
af:9a:6f:fe:83:48:24:5a:27:d2:77:05:47:2e:e2:
da:88:fc:9b:7c:94:63:ea:58:03:b3:16:77:c5:92:
db:1d:2f:a4:f3:18:d0:00:6b:1d:42:82:33:9d:6e:
4d:80:e4:9e:c1:01:44:40:07:b4:9e:e4:0b:8e:d6:
5c:24:ff:cd:d3:12:1c:0e:5c:8a:6a:47:cb:54:b8:
8e:36:95:30:18:05:33:1a:48:13:6a:fd:e2:b8:31:
66:76:96:67:c6:24:cf:bc:29:06:de:e3:80:ca:b5:
ee:47:ac:f5:32:e6:36:b5:0a:1e:1f:52:56:8b:8f:
63:5c:4a:02:0a:c2:17:a2:d8:ef:a9:9e:6d:65:cc:
36:5d:59:0f:64:a5:69:f6:f9:11:13:17:ac:1b:11:
21:33:b4:70:71:3b:6a:89:e9:94:25:19:5d:ee:34:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:89:C9:9A:4B:0E:42:D5:44:D6:E3:84:2C:BD:06:92:34:F9:5C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/846JyZpLDkLVRNbjhCy9BpI0-Vw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.80.0/22
Signature Algorithm: sha256WithRSAEncryption
09:02:d2:1c:2f:da:77:22:f6:5b:da:40:3d:80:53:b4:93:0a:
33:4a:4b:5f:c5:c4:04:48:27:93:56:87:28:53:51:4a:ce:c0:
c8:f0:72:82:19:03:fe:4b:6d:bc:1d:54:2b:0c:39:ab:42:b5:
b3:c2:db:85:f3:1c:30:c5:12:2c:ba:76:28:d1:db:b0:50:32:
e4:c9:ec:4c:61:fd:42:70:74:0d:3a:e3:66:dc:27:b2:97:e8:
f1:31:7c:b5:e3:48:cb:27:21:08:94:e2:a9:5c:bd:a5:6f:15:
cf:f7:44:08:0c:e4:95:cd:42:e5:07:c5:c1:82:6c:cd:a5:31:
02:b1:10:3d:ed:04:bc:05:86:01:40:82:90:42:a9:cb:08:59:
dc:0f:3d:06:9e:56:bf:2d:90:d9:25:12:2a:2d:4d:9b:66:67:
e9:9f:07:99:c8:01:2e:0f:22:f0:ef:f4:51:73:ff:34:5c:2e:
1a:43:db:37:89:d8:99:36:e7:bf:ed:f6:cf:93:78:71:90:0e:
ad:c6:90:ba:e0:bc:76:7a:4b:7c:9d:5b:28:43:3c:26:30:9f:
c1:50:9e:70:2f:10:62:94:e0:25:d5:69:18:0d:dc:78:95:f0:
cf:c3:92:5b:30:4d:d8:e4:20:97:58:8b:d0:49:e1:e4:79:f8:
82:81:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org