Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JkPiaawqmiz7cl2GkqVPT-607bw.roa
File: JkPiaawqmiz7cl2GkqVPT-607bw.roa (raw, json)
Hash identifier: mWcXPReWlFWhZvU0y+qcVNG49gTpJ+VH2/wZnUJBh0E=
Subject key identifier: 26:43:E2:69:AC:2A:9A:2C:FB:72:5D:86:92:A5:4F:4F:EE:B4:ED:BC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1959
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JkPiaawqmiz7cl2GkqVPT-607bw.roa
Signing time: Sat 22 Oct 2022 06:06:25 +0000
ROA not before: Sat 22 Oct 2022 06:06:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6489 (0x1959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2643E269AC2A9A2CFB725D8692A54F4FEEB4EDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:ba:e3:a9:0e:13:be:5e:e0:a3:ce:20:ac:
3f:62:df:13:e1:8f:a1:ca:cc:49:f4:2b:31:f3:ff:
2f:39:43:a2:73:41:07:f1:66:9a:98:46:b0:5b:04:
31:f2:51:12:7a:6e:b8:e6:b5:78:3c:de:95:7a:66:
a3:1e:ff:be:08:e9:ed:ac:9a:75:f4:e0:26:4e:0b:
cc:49:fb:05:98:57:a0:90:be:28:a7:22:97:e7:de:
8f:10:94:a9:9a:19:4f:7c:8f:cd:84:a1:45:0b:1f:
40:ad:2c:8b:2a:b0:3f:56:03:da:1c:f4:69:83:a7:
55:a0:84:75:5f:b3:a3:57:53:b9:95:be:8a:0c:ff:
b9:47:ca:ca:d7:a1:a5:9a:96:2f:8a:02:50:af:e9:
6f:33:44:88:4f:4f:10:2b:a7:b8:ea:4e:f6:7b:85:
68:d8:0f:7e:81:2d:41:9f:c5:d2:e1:35:29:05:49:
8a:fc:c8:4e:b8:61:54:d2:f1:0b:ee:b8:c0:f3:1a:
35:aa:76:ee:fd:64:d7:7e:a5:38:20:94:72:a5:6a:
30:0d:58:eb:7f:bb:56:83:57:90:8c:b9:8c:56:9b:
6d:44:02:11:f4:51:ba:3c:23:c1:27:3c:d4:65:85:
35:14:db:89:c8:eb:4b:f6:86:18:9c:b8:b0:26:79:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:43:E2:69:AC:2A:9A:2C:FB:72:5D:86:92:A5:4F:4F:EE:B4:ED:BC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JkPiaawqmiz7cl2GkqVPT-607bw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.184.0/21
Signature Algorithm: sha256WithRSAEncryption
24:a9:d7:1b:22:29:2f:f7:e5:3e:35:4e:e6:f0:0f:f7:b9:92:
ad:b0:43:c0:ef:dd:ad:d9:35:ab:9f:14:7f:16:a0:51:77:bb:
ed:06:4d:40:78:13:f3:f1:a7:f3:cf:21:3e:08:92:bb:a8:38:
a7:b9:d5:c4:11:7f:26:7c:27:2c:6c:c8:96:cf:88:e4:7b:e8:
0b:84:66:e9:6c:e9:d1:78:36:cc:ae:32:d8:bf:f2:9a:d4:1e:
df:29:7a:01:7f:f3:f1:9e:16:d2:68:8e:a3:5a:d6:6d:4e:0a:
20:63:84:cc:c1:44:8b:13:d9:b0:93:a1:6c:65:65:f3:ef:e1:
8b:e8:bf:d5:59:57:88:fd:cb:e4:61:ed:e8:d3:3d:e0:5e:30:
62:83:c1:7d:9e:d7:d2:fe:ab:cb:1d:9f:6a:99:8a:1e:4d:11:
0e:36:ef:08:54:26:7f:b3:e9:58:3f:a2:52:a6:3c:38:87:9b:
29:8e:ae:c4:20:98:ec:70:bc:48:b6:de:63:91:71:52:73:e4:
ae:5c:43:ca:74:22:4a:66:ac:c8:b6:94:b5:2b:09:c4:a5:12:
93:b0:2c:6a:55:f5:fd:4d:14:47:04:13:8c:f9:63:97:d5:06:
80:32:e6:31:c3:69:16:8f:b5:eb:fd:95:ea:3f:74:0d:d3:4f:
0e:a2:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org