Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/74aL6GajCDPcz_YIC9mOigYmim4.roa
File: 74aL6GajCDPcz_YIC9mOigYmim4.roa (raw, json)
Hash identifier: xLtCbFO9lhJdap47QngHcn9cxzf1eNPT2q4VDIgDQmM=
Subject key identifier: EF:86:8B:E8:66:A3:08:33:DC:CF:F6:08:0B:D9:8E:8A:06:26:8A:6E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1063
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/74aL6GajCDPcz_YIC9mOigYmim4.roa
Signing time: Sun 07 Feb 2021 12:44:32 +0000
ROA not before: Sun 07 Feb 2021 12:44:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4195 (0x1063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EF868BE866A30833DCCFF6080BD98E8A06268A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:fc:39:f6:17:3f:ff:61:ef:9e:ed:71:e0:
b6:33:ab:23:9b:74:5f:6e:f3:bc:fb:2b:f9:98:1f:
80:c8:59:54:bb:5a:2f:25:b2:cb:8a:42:82:53:e7:
1c:39:97:c7:00:5d:59:56:d3:43:5e:29:00:c9:89:
3b:8e:e1:e0:71:65:85:25:9b:34:6c:70:9a:6d:a6:
0c:9d:5e:59:67:99:b1:83:70:49:46:0a:c6:a2:6b:
55:55:17:54:27:c2:57:69:46:d6:32:0a:0f:d3:32:
d7:2d:a9:29:88:bf:36:79:54:9e:a2:1c:f3:78:17:
d8:b8:62:75:f8:73:18:27:0a:53:f1:76:fd:59:b5:
53:8c:9f:09:d3:92:60:5f:77:7b:73:9b:cb:75:5d:
75:38:bb:2b:44:8a:ce:20:5c:d6:95:53:a2:15:56:
69:a6:64:ee:d0:5a:b0:cf:95:ec:ea:97:97:c5:e2:
4a:f6:38:7a:37:d8:86:48:b7:7b:33:35:b3:f0:f7:
f0:a5:f9:80:60:7f:2b:ce:dd:bb:02:f6:8d:cf:9e:
0d:74:35:a5:1c:db:20:91:ea:9a:3c:ea:fb:3a:cb:
13:a0:cb:65:7e:43:9d:2a:58:8c:f6:ec:23:e9:9e:
12:98:ca:26:a5:79:84:7b:c0:bc:3b:d9:27:cd:3a:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:8B:E8:66:A3:08:33:DC:CF:F6:08:0B:D9:8E:8A:06:26:8A:6E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/74aL6GajCDPcz_YIC9mOigYmim4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:c8:bc:a8:4e:75:59:f8:6e:74:ed:65:e3:d5:49:56:98:c7:
0b:56:7f:a7:20:6a:ba:2a:15:f7:d5:f0:82:20:8c:24:87:32:
ed:71:79:e5:9a:59:98:52:b5:54:fe:3e:52:17:eb:34:cf:ed:
59:07:98:c3:1e:52:f4:c6:fc:ab:7b:cc:f5:6b:d8:b8:7a:91:
3f:03:89:cf:9c:e3:ce:9a:f7:6e:91:33:27:1b:99:a4:ad:14:
e3:53:47:2a:f7:58:00:84:67:a0:de:49:1a:6e:85:8c:ca:53:
2d:da:8a:f8:7a:5f:8d:14:f1:c7:94:87:d0:61:07:57:3b:1a:
89:8f:16:7d:e8:22:84:b4:fc:75:1c:39:dc:49:2a:01:b5:04:
33:3b:23:6f:aa:cb:02:f5:10:6f:97:ae:e7:54:6b:1a:ce:6b:
27:cd:c8:9c:27:5b:24:9d:28:71:a0:f1:2e:c6:5a:93:ec:6e:
ca:f8:6a:5d:11:1f:75:06:be:a9:c1:27:8e:ac:bc:db:cc:f3:
d4:f7:b6:16:5c:2b:45:e9:4e:23:f1:ea:91:9f:48:37:9d:f2:
11:e6:37:8c:95:9d:ba:04:7c:e5:a0:89:8d:7e:e6:5e:36:53:
3e:09:37:6d:54:ef:3a:79:37:48:be:ed:0f:6e:d1:21:cf:fb:
a3:b4:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org