Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3pAQ2K2hqyvDhpBsz24R_m-jisg.roa
File: 3pAQ2K2hqyvDhpBsz24R_m-jisg.roa (raw, json)
Hash identifier: ZizAvg5ss/OUeXbbfdKnUAoa3Z1gq5rVDdMAGSMAwqE=
Subject key identifier: DE:90:10:D8:AD:A1:AB:2B:C3:86:90:6C:CF:6E:11:FE:6F:A3:8A:C8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 113B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3pAQ2K2hqyvDhpBsz24R_m-jisg.roa
Signing time: Sun 07 Feb 2021 13:14:31 +0000
ROA not before: Sun 07 Feb 2021 13:14:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4411 (0x113b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DE9010D8ADA1AB2BC386906CCF6E11FE6FA38AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:25:b4:62:d0:32:f9:55:74:0a:07:34:33:5f:
90:dc:6d:66:54:c9:7d:fb:5d:48:a7:8a:fb:17:68:
9d:66:30:c5:cc:b5:54:4d:e5:d5:9c:29:92:74:d8:
69:0b:10:49:68:ae:63:b0:18:60:bf:f5:54:6b:a5:
6e:a9:02:bd:f7:d1:b3:70:e0:0e:32:e3:89:c5:d7:
f4:cc:a1:13:f2:e6:63:5a:4f:98:0c:e3:d7:1c:2c:
9d:3f:f8:71:eb:bc:c9:21:c4:30:9e:c4:1d:54:6b:
1f:45:12:d2:ad:25:b7:e4:1c:aa:ed:09:3d:a8:e1:
60:ae:43:88:c7:b9:62:49:c5:cd:e6:76:fe:25:07:
46:af:3c:2c:e3:f6:f7:a2:a2:07:40:49:d6:ff:b8:
8f:ff:99:a1:5e:ea:61:dc:51:31:bb:c7:e2:66:b9:
e0:79:57:6f:db:eb:fc:08:0a:9e:50:e8:0d:14:90:
a5:dc:43:da:07:9d:ed:de:45:6f:dc:92:82:83:09:
d8:15:ee:2a:bf:82:67:f6:69:0b:0b:58:bf:e5:36:
b1:9c:7c:8f:ea:80:d2:b5:0d:43:2c:af:1c:74:3f:
87:4c:9c:a8:7a:bb:a7:df:26:71:6a:d0:78:df:c0:
cb:f7:5e:c8:6e:45:23:bb:bb:55:ce:27:2f:17:61:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:90:10:D8:AD:A1:AB:2B:C3:86:90:6C:CF:6E:11:FE:6F:A3:8A:C8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3pAQ2K2hqyvDhpBsz24R_m-jisg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
62:16:3f:d3:9c:78:7b:bc:b3:33:70:05:7a:4c:93:0b:26:73:
09:d4:74:07:71:e3:fe:fb:a1:5b:d8:5e:fa:d6:5b:ec:65:5b:
58:5a:5d:21:67:6d:77:70:7f:c0:e4:11:ae:88:9a:3e:2e:dd:
de:c4:1c:52:38:e2:5f:9a:bc:9e:f8:09:df:2e:8f:2e:f8:97:
c1:e9:94:eb:3e:b7:db:46:c8:3e:bd:ff:73:c9:64:8a:7e:c6:
84:b3:f4:08:27:70:d6:29:cf:05:fb:14:72:ff:9f:c5:cd:91:
7c:a6:15:d0:af:60:56:f4:cc:2e:ac:1f:05:d7:c1:aa:4b:c6:
85:f0:b1:d5:a7:c6:61:98:4f:df:2e:48:89:d5:b5:1e:c2:e7:
e6:9f:64:43:76:88:dd:27:5b:11:be:51:b5:ff:7d:69:30:9f:
2b:47:85:e3:f2:69:87:9f:11:2e:45:3c:35:86:b8:24:a3:1a:
4c:1c:05:d1:b3:ea:58:5a:55:86:7e:7d:33:c8:7b:72:ef:e7:
0a:e6:89:cb:1f:6a:97:06:9a:9b:cb:d1:25:11:7a:9f:6e:5c:
b6:ee:d9:6d:98:f8:19:10:d5:a1:6c:89:24:81:cb:5a:5f:f0:
c2:47:cb:f8:a8:8d:bc:f0:ec:cc:98:b6:ed:fa:57:0c:af:8c:
b7:49:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org