Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m0YY5r3BwKglgcofU69KAA9xBOs.roa
File: m0YY5r3BwKglgcofU69KAA9xBOs.roa (raw, json)
Hash identifier: OuJJf7iBvxBShuW8m+14fmJkWTXw4vdHwIzAOYEYnyc=
Subject key identifier: 9B:46:18:E6:BD:C1:C0:A8:25:81:CA:1F:53:AF:4A:00:0F:71:04:EB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10C9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m0YY5r3BwKglgcofU69KAA9xBOs.roa
Signing time: Sun 07 Feb 2021 12:48:52 +0000
ROA not before: Sun 07 Feb 2021 12:48:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4297 (0x10c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:48:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9B4618E6BDC1C0A82581CA1F53AF4A000F7104EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:b9:d1:46:96:e2:a2:12:ad:9f:c6:1e:32:
3c:ae:26:b5:8e:4d:6c:f5:aa:f0:8e:32:d1:04:4e:
d0:e9:63:90:56:05:6f:1b:50:77:e4:22:12:1e:98:
09:e2:d8:7d:87:a8:cb:ae:fe:ff:d8:ba:af:bf:95:
d1:92:fa:03:df:77:2b:dc:19:03:52:d5:06:65:b4:
ba:1f:29:1a:d1:49:43:98:22:f8:fc:9a:d1:b8:db:
0c:33:36:2b:56:d1:c5:5d:99:f1:20:2c:33:60:9f:
2b:29:c3:cb:3a:d6:60:30:ac:a7:42:7a:ff:3a:63:
90:2d:5d:84:11:52:4a:91:03:d2:29:57:1a:74:c4:
64:23:dc:56:18:5b:55:0b:d5:f8:65:b5:a3:67:15:
3a:43:a4:43:eb:70:ea:77:7e:20:96:88:c5:b7:25:
47:44:6c:1f:47:9d:ed:ac:25:c9:3b:9a:4e:c0:fe:
72:5b:d1:3b:85:01:21:89:6c:a6:1b:ca:f6:2f:3d:
85:69:b5:b6:94:9e:7b:a2:21:3c:04:27:40:68:81:
d1:06:a7:58:fe:01:ff:49:78:de:db:c1:0d:88:98:
2f:40:c7:1d:c5:8d:df:e5:a4:39:fc:e0:e4:fc:af:
ad:fe:2a:b5:6c:04:b3:c6:11:cd:4f:00:4b:c1:b8:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:46:18:E6:BD:C1:C0:A8:25:81:CA:1F:53:AF:4A:00:0F:71:04:EB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m0YY5r3BwKglgcofU69KAA9xBOs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.0.0/18
Signature Algorithm: sha256WithRSAEncryption
12:5b:7b:9d:e6:94:a2:23:05:33:08:76:1d:c4:2a:6b:1d:5c:
40:78:ce:62:30:7e:94:e6:44:28:fc:c4:a7:8b:99:b3:35:38:
ed:1a:a3:b4:05:6e:ce:b8:57:91:8c:ca:1f:8d:9d:68:5f:b2:
2f:58:a3:d1:50:e6:37:7b:7a:a3:15:46:3c:38:15:21:3f:1f:
e8:ee:96:3f:d6:21:09:e1:b5:7e:d5:f0:f3:6e:03:05:2e:c1:
b0:78:0b:f7:26:97:f5:28:0d:af:00:13:72:4f:03:e9:b8:75:
f9:f7:c9:7f:57:89:88:eb:a0:19:fe:fb:5d:76:91:c2:d8:c2:
23:48:00:bf:ce:ae:33:9e:db:73:57:57:0b:0a:65:70:44:f6:
aa:07:13:ed:c1:15:4c:18:ae:cb:0f:ea:b2:cd:f5:83:d3:2f:
63:ee:d0:72:41:24:d2:b3:d0:a1:c9:dc:2c:00:32:a6:9c:f2:
46:04:a8:ce:b9:f1:80:ef:89:22:8b:4e:a1:f9:e2:f1:d5:03:
68:7e:d0:00:0f:70:95:f4:6c:73:4f:d0:d0:51:c5:5f:00:77:
9e:46:fe:8b:4a:e7:c0:83:95:a1:3d:a8:21:c8:2f:d2:cf:ac:
c5:dc:58:fd:23:c8:aa:a1:ee:4f:10:08:52:34:c8:98:81:96:
6e:7e:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org