Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gBjIrq_M_CpJTKu1LkrtvayVm4g.roa
File: gBjIrq_M_CpJTKu1LkrtvayVm4g.roa (raw, json)
Hash identifier: UfYDj7NiQEl+0cS6ZpfzWZgc5LiuyR0KavnAocGVkzo=
Subject key identifier: 80:18:C8:AE:AF:CC:FC:2A:49:4C:AB:B5:2E:4A:ED:BD:AC:95:9B:88
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D3F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gBjIrq_M_CpJTKu1LkrtvayVm4g.roa
Signing time: Thu 14 Jan 2021 07:27:50 +0000
ROA not before: Thu 14 Jan 2021 07:27:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 180.218.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3391 (0xd3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:27:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8018C8AEAFCCFC2A494CABB52E4AEDBDAC959B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:f0:52:eb:8c:53:3d:56:c1:7b:7f:7a:c3:
98:48:b4:0f:3e:ce:7b:47:b6:05:13:9f:77:60:5a:
9f:32:20:04:f6:c3:b4:30:2a:a9:4e:19:d8:0a:44:
f9:00:12:f7:1e:3b:03:8f:57:5f:e6:ed:79:be:85:
ff:ff:e5:1a:ae:b9:4a:39:30:8b:08:c8:05:4d:26:
01:c1:a8:1b:61:15:5c:d7:b4:67:ac:66:aa:e9:b9:
ca:8a:bc:ff:3d:02:37:63:a7:83:f4:71:58:ae:64:
25:6d:c2:42:07:e6:06:e4:a0:ba:ff:60:8c:63:7d:
a2:b8:63:53:e5:f1:1c:b6:a1:4f:4a:6e:99:78:b0:
7b:00:11:90:35:62:24:50:11:22:07:2e:81:04:dc:
71:fd:7a:2d:9e:6c:76:68:8f:28:34:52:1f:1a:f9:
01:db:d3:ca:17:d2:59:84:39:7b:8d:c8:cc:15:80:
b4:24:fe:28:fe:db:ef:7d:8b:f6:98:3c:e5:9c:63:
ac:5b:61:e1:70:43:2b:5d:8d:8c:2a:b0:9d:ed:12:
90:9f:e1:67:84:dc:b6:02:03:57:31:bd:61:51:85:
1c:7c:40:c3:73:3e:3f:5a:ec:3c:ac:f7:7e:77:a1:
dd:52:e7:81:bf:b6:d0:25:ed:59:fe:b0:bc:1e:fe:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:18:C8:AE:AF:CC:FC:2A:49:4C:AB:B5:2E:4A:ED:BD:AC:95:9B:88
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gBjIrq_M_CpJTKu1LkrtvayVm4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:9a:7d:a2:f6:f0:ed:39:b0:81:08:5a:ac:80:b6:51:bd:4c:
9d:59:55:62:ee:6c:d5:c5:6d:eb:84:d7:1f:9f:e7:e6:4e:ce:
0f:17:91:59:77:be:73:97:88:3b:c9:d2:bf:7b:79:fc:37:b0:
8c:1e:78:2e:eb:7a:4c:a7:5a:b9:c6:d3:bd:aa:6c:1f:06:f2:
f0:bf:d0:72:36:66:9c:6e:b4:7e:c8:e8:00:44:7b:99:75:c4:
9c:df:b5:19:ef:5f:31:4d:b2:29:c6:ea:a3:bd:a0:98:16:06:
a4:cd:79:67:c7:5e:53:46:1b:2a:55:fb:7c:f7:4f:9b:4f:3e:
65:a8:06:e3:37:2d:cf:0c:81:09:89:d3:11:0e:cb:10:94:c4:
84:7d:f9:05:c6:53:b0:9b:00:17:36:2b:0d:aa:7c:87:c3:fe:
8f:06:44:77:9e:81:e9:a0:29:29:83:ec:c6:64:15:12:9d:34:
9a:a8:3a:4a:77:0c:dd:d5:ea:05:2c:32:c2:21:97:8c:6e:89:
97:c6:20:c5:f0:5d:0b:25:ed:69:5f:5a:26:cb:7a:6d:d1:bd:
9c:db:1d:3f:75:44:f6:c1:f2:34:96:21:cb:6d:3a:48:48:5e:
97:21:26:d6:f7:27:df:28:1d:ea:4b:18:86:c7:e8:a5:48:85:
c7:0d:1d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org