Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEC4cTdWDJ-EguG9BGpDgzdoCs8.roa
File: JEC4cTdWDJ-EguG9BGpDgzdoCs8.roa (raw, json)
Hash identifier: QiuSiFYxogFZBQGPBVKrtqfu4CW/OMVITH6Kg5mkJgU=
Subject key identifier: 24:40:B8:71:37:56:0C:9F:84:82:E1:BD:04:6A:43:83:37:68:0A:CF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 135A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEC4cTdWDJ-EguG9BGpDgzdoCs8.roa
Signing time: Wed 29 Sep 2021 02:55:40 +0000
ROA not before: Wed 29 Sep 2021 02:55:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 180.218.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4954 (0x135a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2440B87137560C9F8482E1BD046A438337680ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:1f:fc:b1:dc:dc:a2:4d:f4:c7:4f:2d:13:
a2:68:ca:10:94:ae:1a:46:24:40:23:36:dc:a7:1b:
fc:3b:cb:58:b9:cc:78:b8:bd:e4:89:d2:49:e3:01:
3d:cc:b5:e4:34:2d:9c:ea:de:f4:c6:2a:d4:24:8a:
08:b3:19:9a:db:59:71:eb:a7:a8:fe:14:d1:9f:0f:
84:91:b9:d5:82:42:a9:78:0f:af:d3:9f:80:2b:df:
40:19:39:cd:b7:22:47:90:4c:89:96:21:9c:b6:c8:
ae:69:a2:38:bf:ab:c8:ed:59:0e:4f:81:ec:77:97:
12:56:3f:be:1a:98:56:7c:ef:3b:2d:d7:2a:96:97:
af:d3:fb:56:05:3c:a3:14:1f:aa:b9:04:39:6a:f7:
29:79:d4:34:95:b0:0d:81:b9:3a:33:fd:ae:f1:0f:
1d:c2:09:7f:24:6f:1c:c4:2d:2c:4d:60:e9:7e:56:
2b:45:11:f4:31:4d:87:42:41:6e:8d:7a:e0:22:21:
a6:94:27:6d:76:a4:7d:14:1c:e4:54:d6:4b:33:d0:
45:00:9e:e1:e3:fb:ab:14:77:c7:4a:93:1b:eb:86:
a7:8f:74:1d:76:e0:87:a9:7d:3a:04:e8:f9:02:2b:
ec:6a:9c:18:6f:53:68:20:d8:a6:99:a4:13:85:79:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:40:B8:71:37:56:0C:9F:84:82:E1:BD:04:6A:43:83:37:68:0A:CF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEC4cTdWDJ-EguG9BGpDgzdoCs8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ac:86:96:63:73:bc:3e:01:a1:f6:fa:ac:c8:06:52:93:a1:
b2:f6:39:da:6b:52:f8:07:08:93:86:33:2f:16:bd:de:b7:78:
74:a4:7e:ce:02:f0:ea:31:da:2a:92:4c:7a:f0:00:fd:12:85:
d7:d0:7d:9d:89:6b:b4:ba:21:48:2a:c4:e9:6d:74:f3:d1:fb:
27:97:a5:76:d1:f6:59:18:03:94:db:dd:ed:8c:1f:1a:f7:08:
5e:45:3d:78:bd:94:8b:9a:33:f7:a7:f6:bc:c2:bf:98:23:97:
b6:b9:46:ff:77:a6:9b:36:42:3c:67:eb:a5:2e:33:90:0a:34:
86:2c:f8:c6:bb:49:e6:c5:0b:f6:76:f2:6c:a9:07:99:11:0e:
a4:86:c5:4d:64:c2:12:b6:09:71:05:c0:b1:02:bd:a1:42:fd:
fd:0a:8a:e0:e9:a8:7c:8b:3f:d7:43:7d:03:cd:30:01:99:c6:
86:dd:ef:d4:88:93:06:34:0b:0e:11:2f:e0:f1:8a:3b:01:e8:
be:b1:0a:79:5a:70:5c:81:4e:e9:1f:6e:c5:76:42:ea:db:ef:
ce:8c:7d:22:8f:59:29:96:ec:6b:d7:22:2d:4d:9f:6b:41:9c:
46:ef:c8:86:28:7b:58:5d:d4:ef:b8:86:0b:06:6e:18:d3:40:
3a:15:19:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org