Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bkArvXYHpc1Wr51_E15LrLAv8Tg.roa
File: bkArvXYHpc1Wr51_E15LrLAv8Tg.roa (raw, json)
Hash identifier: 0rT6lBnUtqrejfdcstcHrLZpMkDLhIwu8YymW3MDkjo=
Subject key identifier: 6E:40:2B:BD:76:07:A5:CD:56:AF:9D:7F:13:5E:4B:AC:B0:2F:F1:38
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 193E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bkArvXYHpc1Wr51_E15LrLAv8Tg.roa
Signing time: Sat 22 Oct 2022 06:06:17 +0000
ROA not before: Sat 22 Oct 2022 06:06:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6462 (0x193e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6E402BBD7607A5CD56AF9D7F135E4BACB02FF138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:d7:e9:bd:b9:68:ff:17:bd:68:e7:10:73:
aa:7b:7f:48:5b:b0:7c:09:85:df:c6:3e:34:2a:27:
58:0e:aa:95:ed:13:ab:52:10:dc:e9:a5:37:7e:e5:
ac:d8:ae:fc:22:60:4c:72:1a:ac:9b:14:c7:15:78:
d6:cc:62:94:67:dd:e5:c6:e0:4c:8c:ae:41:fa:65:
b4:b7:87:5f:68:29:dd:3f:b3:77:ac:73:7c:16:25:
ee:d7:a4:d8:90:1a:d3:34:8a:ec:0a:5c:2c:79:67:
c0:5f:7e:a1:66:9d:8d:ed:8a:5d:6e:58:d4:8b:32:
22:1a:81:52:0b:6d:b0:b1:15:ca:c3:69:7e:13:b2:
4b:9a:1c:e5:0a:e1:8b:0e:5d:a7:88:f6:a4:5b:32:
8b:99:5b:7f:97:a7:f9:30:c4:e2:98:2d:1e:dd:67:
d4:8b:03:84:8a:6b:6c:bf:32:d1:af:fb:99:97:22:
9f:c8:16:1a:4f:f1:b6:06:d3:17:e1:f6:e6:98:37:
4e:84:04:e1:7e:68:01:da:20:10:74:4f:14:45:22:
95:69:9a:a7:3d:b0:5d:a8:ee:f6:c0:49:55:91:77:
17:7e:af:27:34:91:5d:f5:e1:95:8e:87:1d:11:6f:
41:e9:10:3d:5f:1b:f8:44:33:6e:1d:1c:e9:16:0b:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:40:2B:BD:76:07:A5:CD:56:AF:9D:7F:13:5E:4B:AC:B0:2F:F1:38
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bkArvXYHpc1Wr51_E15LrLAv8Tg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.200.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:10:7f:c9:ef:1a:68:7e:85:10:63:a3:93:0d:ab:22:ee:95:
8b:63:75:a6:03:1b:60:68:12:a6:cf:8a:7e:cc:72:cb:cb:7b:
ec:8c:c0:0d:03:73:de:6c:82:f4:2d:5c:77:9a:a2:30:83:d8:
25:e3:e8:71:30:07:eb:33:c1:30:12:88:74:44:d1:1b:a9:8e:
6b:19:8e:25:dd:b4:29:1a:c5:f0:25:5d:3e:45:15:a4:ad:00:
f4:dc:11:bd:0f:a0:5f:d5:e8:c3:9b:09:e3:8e:9a:64:5c:5d:
cc:d2:44:49:e9:d3:02:a8:f5:ce:80:0e:48:81:04:da:94:be:
dd:aa:5d:a9:02:0a:05:b1:89:e2:b9:e2:30:7a:e6:4d:e3:9c:
4f:d2:10:3e:77:7e:15:5b:09:34:3d:16:42:1e:33:82:3b:7a:
b8:3f:c8:e6:1c:da:b8:43:6d:76:5a:f4:a4:3b:dc:d1:a4:d6:
5d:7a:62:f0:e8:55:1f:23:f9:a1:95:29:46:2a:d9:42:6f:52:
a6:d0:d5:75:aa:b2:b9:15:b1:86:0b:c1:cc:df:16:26:a9:59:
5b:0d:37:9c:02:55:e6:0d:96:7c:4c:6f:7f:4f:d0:4d:13:e4:
2c:ea:dd:d7:f3:9f:6e:8a:42:37:28:37:2f:a9:25:07:5e:88:
9c:9a:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org