Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VrR3P3FHslIpoilYdC1VNYnOfF0.roa
File: VrR3P3FHslIpoilYdC1VNYnOfF0.roa (raw, json)
Hash identifier: be3B9o7/y0tRwozu0bHOr8OjPsKbQ0N4S0OW7ShBtUE=
Subject key identifier: 56:B4:77:3F:71:47:B2:52:29:A2:29:58:74:2D:55:35:89:CE:7C:5D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1061
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VrR3P3FHslIpoilYdC1VNYnOfF0.roa
Signing time: Sun 07 Feb 2021 12:44:29 +0000
ROA not before: Sun 07 Feb 2021 12:44:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4193 (0x1061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:44:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=56B4773F7147B25229A22958742D553589CE7C5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:0c:2f:7b:ac:af:e7:fb:15:6e:86:8e:d4:
0e:c1:3e:80:5a:89:c3:5c:9e:25:95:12:5a:e8:89:
5f:92:23:4e:dd:19:4c:3e:63:ca:0d:e7:49:33:7a:
88:a5:1b:ac:14:fe:75:de:2e:89:85:e1:67:45:13:
c5:2b:d9:7a:3c:00:f2:06:b3:6c:05:62:33:1d:0e:
96:b1:82:a2:4b:1f:f4:d3:39:c9:ed:b7:65:7b:3e:
0e:4d:89:63:19:93:fe:87:5f:cb:1d:e6:17:48:aa:
87:59:32:67:59:e9:c7:17:72:00:25:25:01:f4:1e:
c5:d5:24:9b:b4:91:c9:76:5e:75:74:6f:3c:7f:38:
25:8f:1f:f1:10:83:15:5e:bc:00:87:2b:3e:b4:b3:
bb:f5:11:1b:96:a6:79:a0:90:42:47:e8:70:93:f5:
54:93:08:aa:dc:5a:84:7a:c2:6a:c8:b2:c2:d7:e2:
4d:be:76:8a:d9:eb:fd:41:76:9b:39:eb:5c:94:89:
d8:9e:ac:3c:56:40:34:ec:33:8b:b4:78:c3:d4:fe:
38:c8:5f:13:e5:dd:90:76:a2:91:b4:59:c7:a4:9c:
cb:cf:0e:b2:62:ec:db:9f:6e:b9:b0:3e:c2:e0:d2:
22:0a:98:0e:8f:e3:7a:23:80:c8:06:fb:4e:5d:ae:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B4:77:3F:71:47:B2:52:29:A2:29:58:74:2D:55:35:89:CE:7C:5D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VrR3P3FHslIpoilYdC1VNYnOfF0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:af:c0:ba:58:b8:6d:c0:53:7e:e2:5d:2f:44:e6:db:a5:5b:
5c:a0:53:90:6b:29:30:21:0d:d0:e2:11:56:00:74:d9:3c:c6:
ac:0e:f2:0f:b5:6f:d3:39:19:6f:b0:18:e6:3b:7b:57:3a:1b:
8e:61:e5:6e:a8:57:2f:6f:6a:20:a0:1a:11:3b:89:bb:4a:ac:
38:97:e1:da:02:40:bd:81:dc:f6:11:da:00:9f:e5:8b:2e:9f:
44:f8:82:31:3b:9b:99:e9:34:3f:32:b7:30:8e:5f:bb:87:4f:
c2:6c:51:b6:24:fb:04:66:83:fa:97:06:bf:a5:87:06:a3:28:
cf:41:b9:86:b0:e5:38:64:54:08:6f:c7:6e:ed:98:27:b9:3f:
03:64:1e:a9:24:d0:f0:c5:a1:33:9e:50:a2:a3:7d:37:e7:a9:
f0:08:a5:a4:ec:ba:9e:d4:5e:67:11:f8:e5:60:0f:a6:ce:b2:
0b:04:e0:78:3b:b0:18:df:d4:07:b5:a4:91:ec:90:2d:f0:7d:
e5:1b:0e:bb:a2:04:04:8d:e8:48:c1:5d:2a:74:11:f2:40:c9:
b8:59:23:2b:c9:4a:c9:ad:46:dc:ee:92:28:1d:ec:fe:d1:78:
8a:bc:d7:1b:1e:a8:80:6e:3f:f2:2e:be:62:cc:a3:2d:48:3d:
a6:4e:92:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-fra.rpki-client.org