Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G6LsN4GJpK-1Earw5DNbZxoIk1A.roa
File: G6LsN4GJpK-1Earw5DNbZxoIk1A.roa (raw, json)
Hash identifier: ITlKITHwcAt/sJhqFr4b13+BgWrXGkv+wfTOJ4K21+E=
Subject key identifier: 1B:A2:EC:37:81:89:A4:AF:B5:11:AA:F0:E4:33:5B:67:1A:08:93:50
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10CF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G6LsN4GJpK-1Earw5DNbZxoIk1A.roa
Signing time: Sun 07 Feb 2021 12:49:02 +0000
ROA not before: Sun 07 Feb 2021 12:49:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4303 (0x10cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1BA2EC378189A4AFB511AAF0E4335B671A089350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:f3:c6:b9:54:64:cf:f0:ba:af:b6:f6:f8:
4b:da:da:8e:2b:f9:9d:6a:69:c5:ac:e0:38:ee:0f:
a2:9c:3f:5d:b7:ca:0e:8f:81:48:4f:f1:0b:79:06:
e1:5f:d8:2d:f3:cd:08:36:88:bb:8d:e2:90:74:bc:
b4:40:fd:d3:23:e9:06:94:b7:15:27:9a:45:e5:66:
ce:49:13:0b:b4:63:03:ab:49:88:b2:7f:9e:99:df:
49:4c:ba:3a:86:53:43:c4:e1:28:3a:61:7d:72:cd:
79:ba:1d:0f:3c:8c:43:0d:8c:ee:60:89:2b:f8:f4:
1b:1e:05:4c:25:3c:fb:03:d4:27:c5:b7:c9:69:50:
93:29:a1:89:9c:ef:50:b6:93:79:77:89:e0:3f:7a:
16:fc:97:59:2b:7a:aa:55:8e:0f:42:81:d5:60:31:
bc:fe:6c:c8:00:45:02:23:c3:0c:92:b0:07:6a:54:
87:4e:a3:83:4c:70:52:20:bb:b9:5c:4b:7c:7c:92:
09:f6:25:4e:fc:14:7d:10:dc:eb:5f:35:b2:34:35:
6b:14:ff:af:ce:f4:d9:43:90:e8:74:d7:7a:c0:70:
ff:65:96:3b:93:41:64:4b:0d:46:79:97:b9:3b:4e:
92:db:70:71:87:df:a2:8c:88:74:7f:a1:41:f3:4e:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:EC:37:81:89:A4:AF:B5:11:AA:F0:E4:33:5B:67:1A:08:93:50
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G6LsN4GJpK-1Earw5DNbZxoIk1A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:0a:82:89:7e:05:e3:b0:68:e8:ff:50:04:dd:88:6b:3f:bc:
36:35:78:cd:a9:da:c4:a7:a1:13:3d:65:02:5b:34:92:38:b1:
45:2a:09:65:02:14:d9:2b:d8:99:8d:ed:8d:41:f9:b5:94:40:
d9:4d:2e:e6:fa:ea:ce:16:ae:b6:7b:19:8e:c3:3c:b2:c3:eb:
9f:25:39:64:0e:25:58:ef:bf:da:d7:67:1d:7c:66:30:d2:54:
b7:e2:ec:c2:55:91:d0:11:2c:4e:29:5a:b0:33:c5:54:3c:32:
14:68:53:84:4f:c9:20:e1:ff:3b:7b:3b:97:1e:92:95:71:88:
9c:39:e8:38:fe:ae:c8:36:65:a2:e1:5a:6b:02:f6:f3:57:a5:
b8:26:f7:d2:5b:4f:e2:ca:3d:e4:44:09:fd:22:ca:a4:8e:27:
8d:9e:f7:d0:af:42:43:20:21:f8:42:87:e8:d7:39:4f:87:c9:
57:ba:9f:50:8c:4f:84:3c:95:bb:d9:13:ad:9d:ee:f6:47:74:
04:96:2c:bb:3e:10:09:d1:54:e9:72:b2:3a:d2:ba:3c:54:b3:
96:7e:9f:45:35:fc:95:0e:2a:b8:e7:6d:4f:dc:04:f8:e0:99:
d2:e6:cb:e2:e8:fa:d3:6f:a8:d8:4e:61:66:0c:91:bd:90:3d:
47:4c:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org