Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LEn8tkQPlAF0LBxX3oDuF_HCE68.roa
File: LEn8tkQPlAF0LBxX3oDuF_HCE68.roa (raw, json)
Hash identifier: SrshQd21d7ikyV8nTpBsSFec+Zcj8F9aJfHQn92E2G8=
Subject key identifier: 2C:49:FC:B6:44:0F:94:01:74:2C:1C:57:DE:80:EE:17:F1:C2:13:AF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1319
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LEn8tkQPlAF0LBxX3oDuF_HCE68.roa
Signing time: Wed 29 Sep 2021 02:55:22 +0000
ROA not before: Wed 29 Sep 2021 02:55:22 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 180.218.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4889 (0x1319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:22 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2C49FCB6440F9401742C1C57DE80EE17F1C213AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:c3:0c:f9:08:bb:28:df:81:32:88:70:47:
68:97:22:e8:b9:98:12:a8:78:5d:05:a1:ac:d5:6c:
ec:f8:80:1b:7d:73:8e:51:bf:14:ac:2b:81:ef:59:
5c:8c:91:9e:65:ec:11:49:22:78:64:59:6e:a9:aa:
ef:80:04:a1:a8:48:2d:53:8c:c3:2f:ff:43:db:96:
e9:7d:02:77:ae:75:fd:49:74:21:5b:db:86:bf:ba:
cd:fd:26:2b:a7:1e:86:a6:8e:16:ae:69:d2:f3:0d:
f7:7a:47:c3:df:ac:7c:22:a7:49:f2:39:94:f3:d8:
2c:18:a4:2d:5c:67:c5:86:6e:7c:99:65:3c:c1:d5:
cf:0d:3a:89:05:f2:45:fc:2c:49:23:53:3d:ec:88:
c3:09:c0:51:09:c5:0a:d4:2f:4d:4f:0e:e5:79:fb:
e7:1b:71:96:de:c3:b5:bd:4a:1f:87:85:30:e3:f5:
da:b3:db:7f:4c:b4:d9:51:76:1b:dd:e8:1b:6e:d9:
10:13:a8:3d:9e:1d:bd:4d:ff:82:36:aa:cf:2e:1f:
00:cf:2d:67:81:7f:53:5b:1e:0a:58:48:01:6e:60:
16:32:99:fd:b0:85:18:97:55:0b:24:74:fc:c2:62:
98:8a:28:28:17:7f:85:d1:5b:8b:d9:e4:24:b2:c0:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:FC:B6:44:0F:94:01:74:2C:1C:57:DE:80:EE:17:F1:C2:13:AF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LEn8tkQPlAF0LBxX3oDuF_HCE68.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.232.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:94:79:54:d4:96:8d:32:f9:76:33:ae:9f:2f:9d:3b:a1:2a:
1f:d0:27:f0:32:ad:b5:be:8d:44:a5:1a:87:a2:cb:81:d8:32:
c9:a5:35:63:76:38:5b:14:33:eb:9b:21:5c:f0:78:af:21:58:
c8:9d:bf:a2:0d:fc:60:df:4a:b3:e5:9f:33:aa:47:30:fc:32:
c2:a7:b9:ed:ba:e6:6d:46:97:59:b7:0d:18:96:88:ad:dc:9b:
9e:34:56:8d:66:7b:99:60:62:f7:89:11:6b:55:42:a7:79:fc:
73:95:7b:8f:a1:81:f1:67:0d:1e:32:15:cf:91:17:c2:64:3d:
a8:ef:ab:8c:5b:29:89:a6:eb:40:0e:f3:71:30:e4:e3:81:1d:
2b:3a:21:6a:f4:96:95:dc:45:5a:57:33:5d:c4:63:06:48:b6:
c9:1b:f2:56:f6:ee:1d:13:6b:b9:53:52:71:60:cf:bf:65:46:
c0:b0:e0:9e:b9:01:fa:a6:2b:c1:30:72:fd:5f:04:36:99:30:
c7:fd:e1:a7:e6:51:2c:b6:e5:09:33:e4:44:77:72:de:62:ba:
3d:d6:3d:57:f0:27:bc:b1:39:d6:31:d7:53:39:df:e0:d2:8f:
66:ae:04:0f:65:15:41:56:4c:27:bb:0b:6f:d8:3a:f9:48:bd:
6d:ea:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org