Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t9PkxhzarZAXvqnWs-Q-dyly5II.roa
File: t9PkxhzarZAXvqnWs-Q-dyly5II.roa (raw, json)
Hash identifier: guWoXfIhBn2Eop7Ep6dAmODSJZWEzXhqp+fkBfAI7TY=
Subject key identifier: B7:D3:E4:C6:1C:DA:AD:90:17:BE:A9:D6:B3:E4:3E:77:29:72:E4:82
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1097
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t9PkxhzarZAXvqnWs-Q-dyly5II.roa
Signing time: Sun 07 Feb 2021 12:46:22 +0000
ROA not before: Sun 07 Feb 2021 12:46:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 180.218.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4247 (0x1097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B7D3E4C61CDAAD9017BEA9D6B3E43E772972E482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:92:12:ed:7f:3c:05:4d:e7:7b:5a:86:17:
98:65:96:17:d6:bb:89:d8:e3:99:77:17:e4:de:28:
8d:80:5d:d6:f0:b9:fa:81:33:b1:f8:cf:73:be:2d:
c6:96:a6:f4:81:f4:70:7d:6c:a5:45:3f:ba:36:5f:
7b:03:49:29:ac:e2:b5:ab:55:36:1e:b9:3a:1f:e9:
94:91:e2:8e:7e:15:e6:d0:96:d2:d0:d4:b2:88:07:
5f:2d:a4:99:22:18:9f:c4:95:e5:23:ce:f1:f5:22:
5b:8a:2c:cb:1e:f8:1f:69:72:d4:bd:c6:13:2b:66:
be:1f:47:f7:9d:cc:80:11:41:84:0b:db:2b:13:1e:
eb:45:ad:28:ae:e9:3b:21:da:69:ec:d7:2e:0c:3f:
01:22:dd:cc:03:ed:26:cf:55:54:af:c3:e9:18:90:
15:c3:57:c7:41:79:54:02:f4:51:a4:75:cc:f8:71:
84:75:fe:5a:ac:72:c5:af:40:09:d5:f9:93:1c:0a:
ba:a3:9c:5e:04:e1:3b:2d:ae:1a:53:f3:55:9c:4a:
cc:05:a9:4e:b0:f7:ff:22:91:43:cd:fb:5a:f4:fa:
ae:09:c0:6d:06:98:6e:52:79:1d:c5:24:66:be:e5:
6f:8e:47:e9:a1:98:dd:e6:8a:df:05:c6:6d:0e:08:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D3:E4:C6:1C:DA:AD:90:17:BE:A9:D6:B3:E4:3E:77:29:72:E4:82
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t9PkxhzarZAXvqnWs-Q-dyly5II.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.222.0/23
Signature Algorithm: sha256WithRSAEncryption
06:8d:d1:1d:39:31:18:02:b1:a0:fa:aa:b8:7b:ea:ce:c9:63:
db:36:e7:db:d6:df:46:02:ab:31:82:c5:84:7d:e1:1e:76:eb:
49:1d:a0:ee:d3:2e:80:16:46:bd:b6:e3:dc:78:ea:2b:b7:73:
d9:d1:2c:84:7f:c9:6d:f8:eb:f0:73:7d:10:0d:5e:f8:d9:6c:
02:cf:81:61:e5:b7:ea:18:dc:c1:ba:1e:68:00:18:3c:c2:35:
1a:b3:9d:67:75:f8:68:ec:8a:fe:4d:06:d7:97:1f:f1:ff:cc:
93:98:d8:a6:52:34:49:22:10:d4:f3:35:82:6b:10:44:25:2e:
23:e5:1a:84:be:37:55:87:92:58:56:06:eb:de:8c:f5:07:2a:
6a:87:5a:6e:79:ac:fa:f9:33:5a:f2:d3:77:79:99:98:1f:9b:
e9:cb:97:e0:5f:be:6e:68:37:72:15:4f:ab:ca:77:f8:0b:bc:
85:2a:d4:d2:f1:66:77:a2:b3:e8:59:15:c8:5e:9e:40:aa:ab:
65:55:93:2c:68:43:c1:69:2f:3e:66:39:42:4a:1a:5a:28:25:
40:1b:66:04:2f:a5:26:85:1d:37:71:22:12:f0:c8:24:b4:55:
42:5a:4a:3b:5a:37:7f:ea:4a:86:a1:18:6c:1f:3d:a4:85:2c:
b6:87:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org