Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HtNIGoKKnFwhAZWOvSGL5DjEe9k.roa
File: HtNIGoKKnFwhAZWOvSGL5DjEe9k.roa (raw, json)
Hash identifier: AxuYRW4txWB8NeTTYPcqoDPH3Fbvnz6harH+jDk6HRs=
Subject key identifier: 1E:D3:48:1A:82:8A:9C:5C:21:01:95:8E:BD:21:8B:E4:38:C4:7B:D9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1135
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HtNIGoKKnFwhAZWOvSGL5DjEe9k.roa
Signing time: Sun 07 Feb 2021 13:14:21 +0000
ROA not before: Sun 07 Feb 2021 13:14:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4405 (0x1135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1ED3481A828A9C5C2101958EBD218BE438C47BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:bd:28:c8:fe:17:9a:7a:2f:d1:b1:da:a7:
42:dd:22:63:11:9e:01:eb:93:74:6b:02:91:bd:e1:
5f:3b:93:fc:7f:a8:0f:7c:27:d6:0e:3e:ea:23:cd:
a6:f2:d2:98:da:e7:d1:14:d7:3c:5e:45:26:a2:d6:
1c:dc:c6:23:ab:90:65:bf:b4:bc:6c:5a:31:63:74:
be:b5:d6:b1:9b:63:1f:83:a0:59:10:98:9a:3a:2f:
7a:40:d6:6e:dd:a1:8b:ed:39:91:e7:31:22:a0:0a:
52:94:a9:96:c8:1d:55:a5:9d:77:97:95:42:2b:14:
0e:82:1e:bf:a5:d4:c4:31:84:74:dc:f5:21:57:e6:
0b:af:5d:a1:a4:99:96:00:7c:c8:84:30:b5:b7:03:
37:e4:00:3f:29:73:27:aa:97:e2:20:8b:9e:e4:8d:
10:b2:03:a4:6d:20:fc:31:94:fa:c4:72:c1:aa:86:
ef:f7:6f:d0:fd:99:28:fd:89:38:4a:96:3a:59:84:
0c:50:ad:74:ac:35:94:5d:92:85:5f:c0:9c:3c:be:
27:ad:ef:ae:5c:1b:4b:fb:e7:20:77:80:76:69:9a:
90:72:55:be:3c:93:4c:d9:49:3b:9b:d7:f9:3d:33:
63:ff:47:6e:e1:aa:30:93:ea:b1:92:85:3a:bb:e0:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D3:48:1A:82:8A:9C:5C:21:01:95:8E:BD:21:8B:E4:38:C4:7B:D9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HtNIGoKKnFwhAZWOvSGL5DjEe9k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.245.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d4:e0:b2:74:fb:d8:60:1d:00:55:c2:66:ea:b5:62:50:95:
d0:f1:fa:9a:52:4c:2a:1c:f9:53:b4:a2:4a:75:22:77:d0:fd:
a6:56:79:e0:ab:68:2a:62:7a:98:69:9d:03:5e:c9:4f:a9:d6:
0f:c8:1a:cc:51:ca:13:90:f7:d7:62:62:43:1b:3f:72:9f:5f:
ce:5b:a0:48:ec:3d:6a:98:17:3d:04:c2:fa:88:78:12:6d:64:
f8:b6:44:f4:e4:26:e3:f2:bb:9c:ae:f8:07:3e:85:a3:8d:af:
0c:48:ac:3f:91:bc:26:2e:fe:46:82:b8:55:8b:22:52:a2:12:
a4:64:60:97:5f:80:f2:d3:51:55:7f:22:24:86:98:4f:22:fe:
97:15:0a:6b:66:07:6e:c8:1f:1d:05:e1:20:26:36:f6:d1:f8:
08:16:f6:84:84:83:87:58:22:d6:dd:37:63:6a:88:dc:e8:c9:
8d:51:96:33:1e:35:ec:4a:23:7a:dc:f7:84:7b:c8:a6:2b:6c:
4d:3f:53:93:c9:2c:3c:f8:6d:10:f0:67:46:34:ec:a8:8b:e1:
26:f8:5d:33:3a:ad:60:6b:d7:5f:85:03:90:84:5d:fd:00:c5:
11:b1:fe:5f:80:e2:45:b5:8d:9b:ec:6d:d5:fa:3f:1d:5a:93:
2f:59:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:47 2023 by rpki-client on console-fra.rpki-client.org