Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/laBoBEX8MzyCiKPK4qDTxpSOzJk.roa
File: laBoBEX8MzyCiKPK4qDTxpSOzJk.roa (raw, json)
Hash identifier: QvcxPdhiyxMHDly/poU8Y0HFwREg6358grE62rfMedc=
Subject key identifier: 95:A0:68:04:45:FC:33:3C:82:88:A3:CA:E2:A0:D3:C6:94:8E:CC:99
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D4E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/laBoBEX8MzyCiKPK4qDTxpSOzJk.roa
Signing time: Thu 14 Jan 2021 07:34:21 +0000
ROA not before: Thu 14 Jan 2021 07:34:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 180.218.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:34:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=95A0680445FC333C8288A3CAE2A0D3C6948ECC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:35:d0:7f:99:54:53:17:ff:c5:bd:f8:72:
6f:1a:e8:c5:20:9e:7a:5a:b4:fa:ed:ea:38:00:35:
d6:34:f2:5b:42:ee:ad:f8:a3:51:d2:2d:e1:82:a2:
1a:22:aa:be:e4:bd:38:45:89:2c:58:35:ca:8e:bf:
36:25:c8:24:f3:70:47:44:5e:0f:46:78:d7:c6:fe:
fd:20:2f:f5:02:fa:b2:8d:41:01:94:9c:d8:56:00:
f2:6c:93:04:db:11:a7:59:3b:0d:76:3d:1c:b9:a0:
bd:ce:21:70:57:2c:07:db:52:4d:93:37:52:e2:2c:
49:94:92:a5:50:e3:17:2a:12:53:bc:55:cc:81:28:
4d:2c:6a:34:23:f5:ee:a4:f3:2d:b2:54:2e:3c:77:
64:fe:fc:53:db:6b:cc:1c:57:04:d3:63:13:d2:74:
b8:b4:7f:fb:c0:dc:aa:3e:6f:c8:45:1d:ba:2e:9c:
7b:d8:77:76:8e:4d:83:e7:4a:02:9e:96:46:62:99:
d0:7a:83:75:86:ef:69:02:73:f8:31:68:2e:66:0c:
ee:bf:e9:c5:e6:8a:6c:18:23:eb:ec:fd:a2:e5:5f:
7e:d1:b4:1b:34:28:17:af:47:fb:47:20:24:3f:a6:
31:27:63:fd:2c:0b:e3:3d:c5:cd:a9:73:90:4f:79:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:68:04:45:FC:33:3C:82:88:A3:CA:E2:A0:D3:C6:94:8E:CC:99
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/laBoBEX8MzyCiKPK4qDTxpSOzJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
87:a9:65:64:ff:ec:bf:17:ce:72:27:bc:58:f6:05:6c:e2:38:
bf:b5:ea:91:22:70:5d:ba:06:32:87:b7:13:00:93:65:ba:7e:
82:ee:40:8a:4d:fb:a9:11:65:2e:cc:9d:f3:fa:fa:ba:ea:8d:
2e:89:c2:4a:36:b6:54:1a:cc:da:24:7c:97:e9:d7:9c:53:71:
7e:db:aa:77:e6:ff:e5:d3:9e:cb:1a:af:81:82:5c:03:52:70:
5d:58:6f:16:e3:46:7d:bb:41:06:f3:8c:59:76:43:9e:ea:a5:
46:c2:5b:e7:83:15:35:c2:75:09:49:4b:6b:32:44:22:50:0e:
25:d1:a7:fa:93:7a:41:8e:4d:c2:2e:34:4f:75:f0:fc:ce:45:
3f:a2:8c:7d:a1:ae:77:cf:b2:40:81:16:cc:90:cc:0e:b8:35:
22:15:91:58:14:bf:12:47:c2:b5:50:99:e7:f6:9e:1a:5e:ff:
6a:cd:be:6c:91:f2:5e:b4:f9:24:64:54:de:2b:aa:44:e7:41:
34:b0:6d:03:81:0e:92:25:83:b8:99:e6:2f:d6:82:ec:9e:b9:
c9:31:1e:0f:04:63:b8:83:95:7a:c9:ee:cc:e7:96:24:52:ad:
42:cb:b6:4f:4a:11:0d:53:2c:5f:95:e7:f3:d0:47:56:4d:6b:
35:ca:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org