Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DrglYeuNqTlh2cgQ9nnHqymaf04.roa
File: DrglYeuNqTlh2cgQ9nnHqymaf04.roa (raw, json)
Hash identifier: HpYB7lEAEt7Rlc24WCbEU2I2sgcgyvUP26voQh8xYr0=
Subject key identifier: 0E:B8:25:61:EB:8D:A9:39:61:D9:C8:10:F6:79:C7:AB:29:9A:7F:4E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12F6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DrglYeuNqTlh2cgQ9nnHqymaf04.roa
Signing time: Wed 29 Sep 2021 02:55:11 +0000
ROA not before: Wed 29 Sep 2021 02:55:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4854 (0x12f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0EB82561EB8DA93961D9C810F679C7AB299A7F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:4e:22:b0:5c:53:73:00:b1:bf:f2:a5:5e:
dd:b5:59:7a:1f:ae:a5:c9:6f:f5:71:d4:3f:c7:f2:
94:e3:5d:a0:da:81:98:91:ee:44:ae:41:97:30:20:
cf:9b:9c:4a:67:f1:92:21:bf:a8:86:27:70:d9:72:
2b:12:1d:4c:90:cd:5b:47:ba:56:96:ae:39:39:df:
6b:96:df:e2:d8:b1:42:25:6a:18:9d:9d:f0:2d:79:
f5:aa:88:08:65:16:fb:6d:07:34:65:90:fd:44:c9:
bd:3a:25:fc:4c:5c:20:0b:d7:53:3e:48:f3:79:7c:
cf:7f:27:af:ff:ad:32:ad:9b:70:0c:db:d8:de:17:
1a:cb:bb:b6:95:40:e3:c5:d8:d6:cc:a5:8e:d3:6f:
07:eb:6c:86:08:39:8f:b9:cb:33:c8:7a:e0:72:c6:
c5:90:f2:05:a0:59:ec:a2:5c:55:b5:92:19:af:d3:
c6:f4:c0:c2:94:5a:5b:94:ad:e0:36:25:b7:2c:72:
eb:11:d4:be:ab:7e:1a:df:a8:88:07:02:88:a5:8c:
f1:21:51:70:8e:f1:f7:29:8d:59:87:13:e5:72:b7:
eb:53:d6:6e:dd:94:e5:3d:88:d5:6e:8f:a3:0d:3e:
b1:e3:f8:4b:66:38:c4:2d:d4:f4:ba:ac:13:e3:48:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:25:61:EB:8D:A9:39:61:D9:C8:10:F6:79:C7:AB:29:9A:7F:4E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DrglYeuNqTlh2cgQ9nnHqymaf04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/21
Signature Algorithm: sha256WithRSAEncryption
67:99:fb:26:30:be:a4:51:ec:53:ad:6b:fd:5a:ce:b7:ef:5e:
79:8c:e4:a5:d9:bf:de:8f:b4:55:8a:c4:10:d4:b3:51:5f:82:
db:ec:7d:59:c3:68:9d:3a:e5:0c:3e:c8:50:f1:20:e9:d2:af:
bb:14:e0:b8:58:08:81:7f:27:9e:68:ab:85:07:16:a7:10:f3:
60:85:e2:03:c9:ee:98:e5:3f:2b:fd:94:f4:88:7f:00:e3:fd:
7b:57:16:82:84:f6:ae:5d:9f:c2:9e:92:3a:bf:94:35:39:d5:
2c:62:66:29:3b:95:18:c0:0e:28:5c:84:f8:c1:13:49:b2:db:
4e:23:52:dc:61:e1:b7:21:04:4e:ed:aa:13:86:32:8f:79:d4:
47:42:fc:e2:73:16:82:14:61:db:19:ab:27:5f:07:a1:66:28:
8a:52:63:f2:12:9a:da:d2:e0:5a:2a:48:be:e9:8d:6c:47:10:
98:08:a3:24:50:f8:cd:1f:bf:68:16:45:1b:9c:e9:bc:56:b7:
6b:7c:df:a8:05:87:c6:f4:79:24:e2:fd:58:98:7e:50:87:86:
34:5e:a2:6c:ed:5f:c5:82:ef:a4:19:36:3e:33:5b:80:bf:aa:
6b:b2:f6:0e:2d:cb:db:f9:e5:72:c2:2a:8f:61:d4:66:f5:71:
cc:09:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org