Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jepq5NcAN-F8_CjkKcl2rR4IMfU.roa
File: Jepq5NcAN-F8_CjkKcl2rR4IMfU.roa (raw, json)
Hash identifier: liS5V9k4RxVt1OtPl1tC1mpjaWtZwaAMWL0oTszWkf8=
Subject key identifier: 25:EA:6A:E4:D7:00:37:E1:7C:FC:28:E4:29:C9:76:AD:1E:08:31:F5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1928
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jepq5NcAN-F8_CjkKcl2rR4IMfU.roa
Signing time: Sat 22 Oct 2022 06:06:10 +0000
ROA not before: Sat 22 Oct 2022 06:06:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6440 (0x1928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=25EA6AE4D70037E17CFC28E429C976AD1E0831F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:83:51:b6:d7:e9:77:3f:76:8d:a6:0b:d7:
2e:fe:ce:91:04:35:ce:be:79:65:ef:fa:0d:7b:7d:
a8:8f:c8:d5:6e:9c:be:ff:d8:00:12:a4:44:44:0a:
fe:23:ac:0b:e3:0d:e7:9b:3d:01:78:f1:c2:3a:0c:
eb:0c:18:a9:61:76:4e:a5:c3:52:05:e3:0a:52:f0:
2c:62:09:41:b6:29:a1:6b:60:1f:c9:b9:2b:f7:d0:
cc:db:46:ce:47:b9:70:c7:d0:65:f4:61:67:bc:7a:
2a:55:dd:96:9d:7b:5b:2e:81:e1:6c:c4:a8:8d:34:
e9:1f:02:bd:6a:5d:8c:97:21:75:8d:bd:a3:bc:39:
8c:92:92:12:54:db:71:30:50:8c:69:37:dc:cf:a1:
53:41:6c:ab:77:c4:49:82:4b:d6:2d:65:e7:29:23:
ae:e3:0f:13:47:d5:3d:b0:af:89:bb:1c:2a:21:10:
1c:5f:ee:81:f8:a8:f5:98:29:18:09:9a:ce:65:e3:
2d:61:2a:e0:23:54:9c:d3:da:cf:e8:ee:a6:16:e8:
f4:b0:7b:78:83:ab:75:66:13:99:bc:2d:22:04:84:
f3:75:e4:a8:dd:f7:26:80:d1:82:bf:ad:0d:f2:fb:
fa:31:ce:05:28:c9:d1:91:99:fc:8b:90:ea:00:3e:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:6A:E4:D7:00:37:E1:7C:FC:28:E4:29:C9:76:AD:1E:08:31:F5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jepq5NcAN-F8_CjkKcl2rR4IMfU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.168.0/22
Signature Algorithm: sha256WithRSAEncryption
38:96:34:17:7d:b1:46:a3:66:bc:73:da:10:58:37:b1:b2:ab:
8e:7b:75:d9:b2:ee:c0:e9:5e:d1:e8:c1:90:5f:57:69:2f:bc:
4e:88:6c:a2:4a:db:15:3a:89:f8:ee:c7:07:53:ea:5b:b3:8e:
f9:24:8a:18:29:0a:a7:f8:08:f5:ca:b5:cd:07:9d:a2:a6:78:
10:b4:d6:c6:20:c1:f1:b0:07:1f:09:7e:7b:12:40:7b:44:73:
46:b8:48:cf:ef:fb:bd:13:c8:c6:a3:77:9b:60:35:d6:f1:8b:
6e:08:cc:27:b3:08:1c:ce:c1:ba:80:70:b5:fd:c2:30:02:2a:
d7:f3:29:cf:30:96:99:04:bb:ff:2b:37:d9:e1:70:4e:dd:9f:
2e:73:3f:73:a3:5b:e0:d2:aa:11:48:f2:55:8f:6c:d1:e9:51:
9f:c0:e9:0a:b5:8e:b5:5a:05:5e:9c:01:0f:a6:4a:c6:f0:41:
50:11:1a:72:cd:23:2d:25:37:ec:41:03:66:60:49:b2:46:2d:
0a:16:37:26:95:d0:65:75:26:ec:68:ea:3b:23:04:22:40:b9:
4a:af:c0:ea:5b:ea:54:71:75:62:97:7d:09:aa:5d:d0:9c:40:
7e:84:c7:81:02:c1:a7:d5:7c:b3:81:88:c8:a1:bc:01:57:11:
7c:92:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org