Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PhaL9qVj5GI8h8ZTgklLFvV-qfY.roa
File: PhaL9qVj5GI8h8ZTgklLFvV-qfY.roa (raw, json)
Hash identifier: AElTKfR314PqtnuoPVlPFUHgvpIJ1Ox1c6MWYJLMBeU=
Subject key identifier: 3E:16:8B:F6:A5:63:E4:62:3C:87:C6:53:82:49:4B:16:F5:7E:A9:F6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10AB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PhaL9qVj5GI8h8ZTgklLFvV-qfY.roa
Signing time: Sun 07 Feb 2021 12:46:56 +0000
ROA not before: Sun 07 Feb 2021 12:46:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4267 (0x10ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3E168BF6A563E4623C87C65382494B16F57EA9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:e9:07:38:63:2b:03:c5:ce:ab:cd:90:e5:
9a:d8:a4:21:96:d6:96:11:b5:74:54:a5:25:fd:d6:
fb:78:ee:61:69:47:ed:ea:85:51:38:04:4d:f7:77:
55:0c:17:44:62:54:36:a3:16:69:ae:82:33:60:98:
46:c5:1a:96:11:da:56:45:9e:2b:67:9e:fc:76:54:
bb:9a:e8:e9:9b:1d:62:dd:ab:1d:cf:87:95:70:f0:
8e:1b:e5:cc:a0:a0:89:6f:29:da:6e:38:87:18:b2:
c0:72:10:1e:28:32:df:89:48:5d:8b:93:75:ea:a8:
8f:91:b0:a9:d1:b4:f7:e2:4a:4f:d7:a5:32:99:c0:
f4:7b:2e:7c:86:94:34:be:55:05:11:52:e5:b1:d3:
2c:2c:df:2b:43:6a:c4:4e:60:9d:a5:56:70:be:a1:
8d:09:02:7b:e8:cb:ce:77:91:8a:49:78:9b:f0:1c:
28:e4:e1:35:c2:6d:0f:79:4f:ff:2f:3c:bc:a7:20:
89:9e:b8:de:d3:8f:41:03:e9:00:06:17:d5:ed:86:
eb:50:c1:61:b1:cb:42:66:04:f1:d6:5b:26:ec:fd:
9f:8a:d5:05:8b:09:0e:ee:72:56:71:ed:d2:fb:f3:
77:a3:b0:73:b6:57:74:0b:37:b3:18:ca:84:dc:09:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:8B:F6:A5:63:E4:62:3C:87:C6:53:82:49:4B:16:F5:7E:A9:F6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PhaL9qVj5GI8h8ZTgklLFvV-qfY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.240.0/20
Signature Algorithm: sha256WithRSAEncryption
50:33:fe:95:e7:74:5c:91:75:b2:b1:80:d1:86:07:bd:ae:5f:
df:bb:ec:25:b2:71:eb:20:0c:25:b7:24:a0:ac:0e:09:81:02:
5d:5e:c3:2f:ee:a3:57:ff:64:52:ca:bd:bf:ed:e1:24:6c:44:
11:cf:94:86:0b:b5:84:25:7c:83:5b:e5:f7:ad:0b:42:0c:9f:
17:9f:12:4d:58:08:df:9a:c6:7e:33:61:21:8f:60:d8:47:cf:
d8:73:14:b7:fc:4b:80:e4:7d:8a:54:b5:27:29:c1:b2:96:3c:
d8:4b:2e:f2:cd:69:f4:71:02:81:52:cc:ed:ce:51:e8:32:78:
ad:4f:3c:80:95:1b:59:bf:85:4c:68:5f:c4:4c:f8:3d:f4:e2:
5b:d0:08:10:b1:d3:39:37:26:ae:d3:6e:ca:32:cf:ec:db:29:
b1:1e:1b:0c:30:1e:2d:c0:45:db:cb:31:f7:2f:3d:90:2f:e1:
4d:76:49:e9:99:8f:bc:52:e2:fc:14:27:6c:b5:4c:93:e9:a8:
28:db:e7:28:6c:7e:b4:a9:07:b1:3d:b5:0c:24:0e:9d:71:a8:
1c:1e:6a:b5:5a:f4:13:57:aa:d1:e4:ac:ed:55:3b:3b:d9:59:
89:90:d2:40:e4:22:12:91:cd:f2:98:d2:be:07:dd:83:fa:87:
86:05:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org