Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lJH7N0LtiXCZpxSvKLHIJnTYoG4.roa
File: lJH7N0LtiXCZpxSvKLHIJnTYoG4.roa (raw, json)
Hash identifier: 3ys4wrCj3nBy7LHGcO/y2dd0UReLxH09yhl3ZcYHmpE=
Subject key identifier: 94:91:FB:37:42:ED:89:70:99:A7:14:AF:28:B1:C8:26:74:D8:A0:6E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1099
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lJH7N0LtiXCZpxSvKLHIJnTYoG4.roa
Signing time: Sun 07 Feb 2021 12:46:25 +0000
ROA not before: Sun 07 Feb 2021 12:46:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4249 (0x1099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9491FB3742ED897099A714AF28B1C82674D8A06E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:22:88:b2:b2:fa:8d:9d:7e:34:73:ec:2d:
1c:17:69:1d:96:80:83:db:ab:92:ec:75:f5:72:da:
cb:be:a5:cb:29:8b:9b:9d:d8:ac:48:7a:74:df:89:
85:a6:98:b9:b9:9c:27:35:80:75:90:fb:f4:54:01:
fe:29:dc:c1:ff:96:9f:52:c3:dc:a3:83:89:9f:5f:
63:c8:ad:8f:af:18:66:2f:0e:4a:c3:0f:11:e8:df:
77:28:71:fe:b8:bf:e3:b3:2c:89:99:af:94:60:97:
08:fa:17:3f:3f:b7:d8:48:d9:e0:9b:0b:05:bb:12:
27:68:e2:08:0e:4e:37:cb:f6:e2:a9:aa:8c:24:3b:
12:f0:31:58:23:06:4e:55:be:04:b0:db:73:3c:d9:
9f:9d:a4:1d:d1:aa:ea:59:cf:01:1e:11:e8:e6:a8:
fe:05:ab:54:f7:56:6e:29:27:f1:a2:42:92:4e:c3:
d5:59:47:2b:01:32:8a:9a:0f:dc:48:57:72:cb:73:
86:77:6a:9a:dc:cc:ed:c9:44:f7:b4:62:02:32:4f:
18:a5:c0:e8:28:d5:5a:2e:ff:cc:25:70:97:2b:8e:
5e:4d:84:bf:9d:53:00:28:fa:fe:72:3b:8e:8b:46:
04:fc:74:4f:f8:44:45:10:fb:d3:f3:56:83:6f:ac:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:91:FB:37:42:ED:89:70:99:A7:14:AF:28:B1:C8:26:74:D8:A0:6E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lJH7N0LtiXCZpxSvKLHIJnTYoG4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.64.0/21
Signature Algorithm: sha256WithRSAEncryption
79:12:78:b1:e3:72:30:d5:53:ac:1e:c3:c3:a3:3e:eb:96:6f:
86:26:2b:4a:c9:00:97:be:e5:ec:57:62:1d:09:88:ab:c9:5b:
0b:bd:ef:8b:ab:da:d7:f3:f3:46:d9:4c:e0:b0:dc:14:83:34:
ef:71:70:d3:ec:6a:97:d8:8b:97:ea:f6:f1:15:70:bd:b0:3b:
c4:b3:62:48:f4:cd:e5:19:05:24:76:1e:01:be:d7:5e:20:aa:
aa:78:31:ce:2c:9e:5a:77:79:d9:81:e4:ab:0f:51:83:47:d0:
f4:86:d1:d9:fa:92:16:a7:d0:bd:60:af:ec:61:8e:30:2b:aa:
d3:00:8b:e7:e1:6f:17:1f:ee:63:e0:df:c5:c0:14:d9:c4:60:
f9:36:a0:09:ac:5d:9b:8b:a8:f0:3a:c9:c7:51:e5:0b:3b:7d:
6a:bf:3f:9c:63:d1:43:f3:88:a6:5b:ea:56:6e:91:09:7e:a5:
50:d9:36:7c:6e:8a:ab:b5:ff:bc:96:56:b6:81:d0:99:07:f3:
1d:37:0f:1c:90:b1:c0:b5:12:ff:e2:69:19:b8:35:b4:8a:45:
69:fa:d4:35:55:23:a3:6a:67:82:b7:56:63:8d:ad:25:3e:d3:
20:f7:69:55:0f:4c:ff:0d:0f:31:cb:40:96:93:9d:ba:a8:2c:
66:18:10:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org