Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JsK8ECR-a0HHI6W8gVEHQogYJvA.roa
File: JsK8ECR-a0HHI6W8gVEHQogYJvA.roa (raw, json)
Hash identifier: 9F2CNHl587xYZc5aA6VRyWkLsHlIruSmDFRiCs+vDoE=
Subject key identifier: 26:C2:BC:10:24:7E:6B:41:C7:23:A5:BC:81:51:07:42:88:18:26:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 17FA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JsK8ECR-a0HHI6W8gVEHQogYJvA.roa
Signing time: Sat 22 Oct 2022 05:48:00 +0000
ROA not before: Sat 22 Oct 2022 05:48:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 180.218.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6138 (0x17fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:48:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=26C2BC10247E6B41C723A5BC81510742881826F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:53:ba:ae:15:ee:e1:09:67:96:bf:56:90:
90:fa:b7:a6:69:60:9a:d4:6e:e9:80:be:76:a4:66:
d2:1f:72:b5:35:bb:f6:57:ee:d1:7f:28:0a:9d:32:
a6:76:1f:70:aa:34:e4:7c:46:49:37:6e:1a:77:fe:
02:9c:4b:ef:93:8f:63:7f:a0:4f:58:ad:a9:ff:98:
b7:b7:3a:71:81:fc:52:49:6e:1e:0e:23:ce:a4:23:
f5:56:bb:98:6e:e4:fc:46:87:d2:d2:b4:a3:60:2f:
22:20:47:f6:68:30:53:e3:cc:66:63:16:45:5c:93:
b7:0a:89:57:7a:de:4e:13:ae:41:c2:b6:da:a7:a3:
36:df:ed:c7:58:7b:02:21:3d:e2:ef:0b:56:21:5b:
4a:ae:a8:67:d2:b6:4a:a2:26:16:63:48:ae:1b:50:
e5:ee:a7:99:ca:83:61:97:b3:ae:4b:54:90:c4:a9:
45:a7:b5:1b:76:e7:88:83:2d:54:ff:5e:e1:a6:46:
0f:70:a8:ed:1a:f6:5a:70:76:5d:96:9a:57:9b:3d:
49:83:ab:1b:e1:01:1f:76:76:46:ac:c9:97:df:84:
7c:70:13:c4:f4:64:39:ac:29:4e:9a:03:22:d4:a1:
f4:af:6a:50:06:12:6a:fb:6f:12:d2:46:a6:d8:28:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:BC:10:24:7E:6B:41:C7:23:A5:BC:81:51:07:42:88:18:26:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JsK8ECR-a0HHI6W8gVEHQogYJvA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.72.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:4b:1d:07:89:17:fa:fd:f1:f1:a9:3b:79:6e:13:63:8a:b7:
9d:8e:c5:31:d5:d3:2c:59:1f:87:7d:24:2e:e2:94:a3:dd:64:
f5:79:fc:8e:78:58:5b:a7:d3:36:6a:de:e8:76:ea:7f:f9:13:
c0:36:fd:4f:86:80:47:db:5f:52:64:aa:11:97:f5:8b:7d:ab:
9f:3f:38:e0:ea:f0:99:70:ff:7a:2a:e4:9f:02:95:86:77:5d:
e2:82:90:75:56:09:42:0c:23:ae:1a:3a:c1:6c:af:0f:b6:91:
b5:40:c9:1e:20:04:5d:1f:c0:be:f5:a2:62:4f:95:7e:66:f2:
3a:aa:ba:d8:ad:c2:62:41:22:e9:2a:51:34:06:02:b1:79:07:
06:86:45:74:81:5b:82:3e:21:97:21:a8:91:d0:c3:c8:2d:b9:
51:c7:43:82:82:fb:4e:90:35:47:9e:56:12:f8:99:56:96:42:
89:ba:a3:9a:81:64:c5:48:e7:6d:9c:7e:80:cb:6e:98:1d:c6:
ff:7e:e4:40:66:bb:58:a7:71:84:a6:2c:41:0a:0a:db:12:db:
1e:dc:b4:16:8b:1f:da:6d:c3:5a:96:98:98:2d:b8:25:1e:64:
c0:c6:a6:b4:49:d3:c2:7f:81:69:2b:df:c2:4c:2f:b1:7d:a5:
26:0f:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org