Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3xaJOG-zkcdvbg_HP7qQX_dNqVg.roa
File: 3xaJOG-zkcdvbg_HP7qQX_dNqVg.roa (raw, json)
Hash identifier: s9sidZFQEpRvlqbXsxCeNM7L9qNR3/iIEUTibhDUQek=
Subject key identifier: DF:16:89:38:6F:B3:91:C7:6F:6E:0F:C7:3F:BA:90:5F:F7:4D:A9:58
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1316
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3xaJOG-zkcdvbg_HP7qQX_dNqVg.roa
Signing time: Wed 29 Sep 2021 02:55:22 +0000
ROA not before: Wed 29 Sep 2021 02:55:22 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 180.218.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4886 (0x1316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:22 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DF1689386FB391C76F6E0FC73FBA905FF74DA958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6c:b4:e5:10:1c:35:f1:ce:d8:e4:ce:9d:20:
5f:33:f0:03:49:ba:b2:21:88:0e:b0:fc:4c:70:4e:
1b:e0:3d:cb:95:bb:12:29:1c:87:2b:16:c7:a6:8a:
13:40:7e:53:ec:0f:d3:fb:fc:fb:de:12:ad:99:e6:
96:de:00:78:4a:46:b4:b8:83:0f:c3:35:04:68:5e:
93:7e:c2:01:ed:44:f2:fc:5a:99:94:e9:61:54:b3:
c5:9d:db:ab:a4:c2:b6:58:69:c1:d2:2f:df:66:bc:
1f:4c:9c:99:aa:e4:5d:fe:d1:97:96:48:4c:12:5f:
6c:2a:81:60:8f:f3:e3:14:c0:6d:c6:6f:97:00:2e:
d1:04:64:8f:58:90:85:88:3e:dc:bd:01:4a:c4:15:
bd:8a:51:ca:03:6e:f6:b6:7e:0d:ef:bf:a1:6e:17:
84:c2:f5:2f:3b:c0:2a:5d:90:da:04:6b:56:32:ed:
d3:9b:87:95:ff:ac:25:dc:01:1f:98:c4:56:a2:22:
3a:c4:62:c7:14:c0:dd:2d:25:a6:13:bf:48:c6:29:
7c:de:43:af:88:1f:aa:c6:6d:a4:88:5f:21:13:9b:
d6:28:9e:89:73:e4:e1:6f:7a:8f:9d:b7:29:b3:53:
14:57:45:4d:15:41:eb:d7:c7:de:80:b7:b8:c3:74:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:89:38:6F:B3:91:C7:6F:6E:0F:C7:3F:BA:90:5F:F7:4D:A9:58
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3xaJOG-zkcdvbg_HP7qQX_dNqVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.224.0/21
Signature Algorithm: sha256WithRSAEncryption
67:ef:02:b0:26:cb:7d:4c:66:5f:08:c0:9e:6b:83:72:df:2e:
73:e9:9b:d5:88:07:ae:1b:95:1a:ed:c0:09:5f:6b:14:02:0b:
e4:22:05:08:5e:f2:9d:cb:e8:64:3e:00:68:e8:c8:b9:0c:d7:
fe:93:ab:96:8e:bf:72:02:6d:06:d0:e8:da:73:fe:ba:29:2d:
c7:f0:0d:7f:42:2a:fb:a9:62:d5:77:fb:3c:82:91:a5:02:7d:
7d:55:ec:67:a8:8e:b9:87:c1:1e:f6:00:cc:b3:0e:0c:69:de:
41:b6:96:29:43:9b:2c:d0:3d:49:51:61:47:68:64:0b:5d:8b:
d9:fe:46:29:1d:a2:d7:fc:3e:20:15:eb:7b:39:9b:f3:75:7c:
f8:07:f7:f6:23:8e:74:c4:2b:ba:92:6f:cc:99:60:1f:d2:06:
26:bb:5b:4f:28:34:5e:18:67:f8:d3:46:66:05:17:68:42:04:
36:e0:a9:29:a4:dd:dc:f1:bd:44:9d:02:25:f4:8d:87:9e:c2:
67:10:ab:e5:10:88:c1:38:a5:6c:a8:20:41:2e:d8:5f:82:de:
8a:fe:c0:ab:04:46:e0:46:cd:91:6e:80:6a:3a:af:90:9b:f9:
78:4d:55:66:51:10:20:9b:41:ec:92:21:41:2c:11:04:cd:cc:
50:1a:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org