Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JI-F3LdA292DXsnO1rYehie8etQ.roa
File: JI-F3LdA292DXsnO1rYehie8etQ.roa (raw, json)
Hash identifier: yXNPpHCiZbcSuXdM/ftW6eTMmXxLBTKkPmfd+aeZzrI=
Subject key identifier: 24:8F:85:DC:B7:40:DB:DD:83:5E:C9:CE:D6:B6:1E:86:27:BC:7A:D4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10D3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JI-F3LdA292DXsnO1rYehie8etQ.roa
Signing time: Sun 07 Feb 2021 12:49:08 +0000
ROA not before: Sun 07 Feb 2021 12:49:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4307 (0x10d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=248F85DCB740DBDD835EC9CED6B61E8627BC7AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:22:b6:13:48:d7:cf:42:2a:0d:58:59:7f:
bd:da:0d:99:9b:36:8c:d8:e8:a8:66:05:d7:aa:ce:
b0:2b:d6:1a:04:6d:48:b7:b5:25:68:44:fa:41:6a:
39:ab:25:d6:c3:fa:dc:4a:4a:fb:30:00:2c:41:5d:
7d:c0:f5:ae:70:41:9f:93:53:8e:cd:e0:5f:f3:9a:
9f:7c:a7:ea:99:08:44:a8:e2:83:18:c8:0f:28:05:
85:5c:76:2b:ea:f7:d9:00:e1:54:25:af:c2:d7:6f:
42:42:bb:be:bd:ce:a3:8e:7f:55:d4:6c:d7:de:1c:
2e:53:32:6a:b6:73:b7:bc:98:1c:4f:e7:20:d0:a7:
5b:fd:94:5d:cf:75:3e:28:7e:3f:d4:8f:a7:1e:1f:
0b:93:cd:00:54:1a:54:05:f0:ac:55:1e:ec:f1:bf:
b8:5d:fb:3d:8c:19:78:dc:e9:c6:94:be:d3:5b:aa:
9c:21:22:71:3a:48:76:1a:50:74:c8:58:f4:5d:98:
d8:d1:1f:cf:44:49:e3:2b:6b:95:ee:e8:18:f5:14:
1e:0a:58:d4:50:1f:c4:df:78:00:83:40:e8:8a:c1:
28:71:86:ae:ff:f4:82:aa:ce:2b:69:8a:1e:8e:ef:
5d:29:44:63:56:cc:c3:a5:f6:37:31:46:97:b8:d7:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:85:DC:B7:40:DB:DD:83:5E:C9:CE:D6:B6:1E:86:27:BC:7A:D4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JI-F3LdA292DXsnO1rYehie8etQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
83:b1:97:f1:44:d6:9e:f0:de:10:47:be:81:f4:a8:c4:4d:89:
cc:22:aa:a6:15:09:58:ff:a9:bc:ee:53:a7:44:0d:34:d1:5f:
d5:aa:5b:48:fb:b4:6c:6c:51:af:b2:8d:64:d0:0b:66:9f:c2:
32:18:0e:22:60:ac:a8:56:a2:a5:36:29:21:80:e8:9d:04:17:
b1:f7:15:ef:04:b0:b9:41:16:40:0c:bd:a7:5a:31:7c:5a:20:
c0:4b:52:02:14:3e:f1:15:c9:fa:81:2b:54:16:40:f2:e2:b1:
21:fd:fd:af:26:78:39:a3:73:8c:68:f1:b6:d4:93:01:92:9e:
64:1c:20:64:c0:a4:31:9e:3d:a3:09:ed:63:5c:12:e8:28:77:
70:9f:6a:68:20:e8:60:ea:bd:59:68:07:7d:df:cc:3d:93:5b:
7e:32:6d:46:b4:65:6f:a6:ae:53:49:c9:90:eb:e6:b2:8a:3a:
47:b2:d2:d7:f7:fd:08:60:84:4d:41:da:1e:1b:22:7f:8e:78:
03:59:12:4a:8b:e9:45:86:0c:49:0b:8a:a5:b0:0b:80:8b:f8:
9c:12:73:e6:e8:09:60:e9:5e:fc:7d:42:1a:22:be:1f:ea:d7:
c6:39:fb:a8:0c:23:e9:c1:dd:e3:ce:ed:08:03:1a:86:56:58:
c9:db:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:35 2023 by rpki-client on console-ams.rpki-client.org