Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jc3Xz5dB6Hi4nNGuh-g08szkk08.roa
File: Jc3Xz5dB6Hi4nNGuh-g08szkk08.roa (raw, json)
Hash identifier: 2ej+UtoXqgXYYxh8pY6ep7wQ/EdTBZTvEWAlmxTBuyQ=
Subject key identifier: 25:CD:D7:CF:97:41:E8:78:B8:9C:D1:AE:87:E8:34:F2:CC:E4:93:4F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1939
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jc3Xz5dB6Hi4nNGuh-g08szkk08.roa
Signing time: Sat 22 Oct 2022 06:06:15 +0000
ROA not before: Sat 22 Oct 2022 06:06:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6457 (0x1939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=25CDD7CF9741E878B89CD1AE87E834F2CCE4934F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:da:b7:1f:33:5e:7c:b5:b7:d1:94:cf:05:
d5:3b:f7:52:9a:09:cb:42:b5:6f:fd:76:0f:0d:03:
00:d1:1f:4c:57:b9:39:74:06:c7:de:87:ad:bc:99:
96:3c:3a:f6:03:75:54:9d:82:62:0c:a1:7f:87:62:
76:ae:a9:9e:7e:6a:fa:b0:af:15:1a:ea:3f:f9:d9:
8d:2e:cd:0d:d2:ca:0d:48:63:fa:9c:16:39:a5:ca:
ff:fa:28:00:18:9d:2b:8d:54:15:f8:81:8f:18:b5:
ee:09:d7:94:3a:2f:9e:86:a1:5c:62:4f:75:ac:27:
8f:81:b9:2c:57:d6:2c:f9:79:1e:8d:ca:62:8a:ca:
15:a0:28:09:c4:5b:a7:aa:2c:ce:46:6d:24:76:c0:
73:18:b3:2c:99:59:2c:f8:b1:c2:f9:03:d4:6d:06:
c3:e0:02:0f:dc:f8:50:56:3b:75:02:9f:4d:bc:43:
40:da:5b:b4:09:07:7d:9f:b8:77:e7:95:33:c3:da:
7b:a8:88:c1:e5:93:81:39:a9:4e:b0:54:33:76:39:
58:87:d1:9c:19:f2:b4:be:34:c5:26:d1:60:ac:e3:
87:49:3e:05:a0:87:b4:44:8b:43:62:67:cb:ab:31:
c2:01:b9:06:31:a1:74:f0:bf:74:ca:7d:1c:ac:01:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:D7:CF:97:41:E8:78:B8:9C:D1:AE:87:E8:34:F2:CC:E4:93:4F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jc3Xz5dB6Hi4nNGuh-g08szkk08.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.222.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:b1:0a:6d:62:5d:62:07:a6:60:b6:8a:a7:08:49:24:b3:96:
d8:f5:a8:59:fd:f5:f3:ef:98:49:fb:cc:fe:1c:d5:3f:8d:4c:
a5:b2:8f:61:49:d1:5f:24:07:0e:0f:25:73:e5:49:9a:ff:e6:
ee:22:bc:95:cc:88:c6:2d:4e:b5:23:02:2c:d5:87:04:49:a3:
00:2e:ca:d5:b8:fa:c0:87:cc:4f:64:b3:60:f6:38:40:68:71:
e9:ef:89:1a:74:c7:9f:ac:e3:94:36:ff:9c:46:7e:21:7c:ef:
18:fb:61:09:09:49:69:f3:63:aa:9e:fc:6c:83:03:02:f6:f7:
af:55:0f:b5:fb:36:78:ac:e1:62:de:e0:91:20:ee:a1:9a:55:
d6:4d:48:a5:16:58:8c:6f:fe:79:37:b4:7f:77:4d:3a:b3:b2:
87:b8:4b:13:b3:8f:05:64:32:c6:ab:19:64:48:c5:05:69:fb:
c1:c7:3a:13:7a:27:8f:ee:52:d1:5e:2e:10:33:b9:07:1b:b6:
b0:f2:7b:24:3a:b3:c5:cd:f6:4d:ad:ef:82:41:1e:c2:7a:78:
34:1d:35:06:b6:54:73:d4:dc:3b:81:7e:85:e0:f8:dc:60:20:
cc:d4:03:13:3c:cb:e4:b1:4d:b0:1d:86:d1:f8:1b:a4:f2:31:
43:8e:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org