Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vg2IFXOJa6slBoIvgpuo3JNXrf4.roa
File: vg2IFXOJa6slBoIvgpuo3JNXrf4.roa (raw, json)
Hash identifier: ke3nvTflA7VToSUCDdE5t4RHyu+aY3USEquT//xWpcc=
Subject key identifier: BE:0D:88:15:73:89:6B:AB:25:06:82:2F:82:9B:A8:DC:93:57:AD:FE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1133
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vg2IFXOJa6slBoIvgpuo3JNXrf4.roa
Signing time: Sun 07 Feb 2021 13:14:18 +0000
ROA not before: Sun 07 Feb 2021 13:14:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 180.218.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4403 (0x1133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE0D881573896BAB2506822F829BA8DC9357ADFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:86:ae:8d:0d:77:61:0e:85:2e:5f:96:cc:
c2:3b:51:06:95:c5:f0:3e:f2:4b:75:f1:d3:36:b6:
60:65:99:da:48:4d:8e:8e:93:e7:40:ce:7a:fc:3c:
0b:07:64:82:11:e7:6c:dc:1c:aa:18:07:b7:01:43:
59:94:0d:ea:a9:97:54:2b:30:9a:33:cb:56:0d:05:
be:ee:30:92:34:3d:8f:7e:34:7d:db:e0:c2:a5:52:
20:20:20:4d:13:3e:f0:38:19:12:2e:e2:52:b1:df:
67:dd:45:11:eb:ef:35:b5:d3:16:7d:dc:d8:f6:3a:
db:30:d5:24:3f:91:ee:47:2f:9b:35:43:c5:e9:3a:
5b:53:82:c0:62:08:ba:9a:21:17:7e:fb:62:d6:a0:
c1:93:c5:74:24:f2:0b:ca:db:61:50:e3:dc:1b:b2:
39:ae:4f:82:7b:99:fd:96:77:7e:e2:ba:87:54:7a:
c4:14:d7:01:b4:3b:37:15:1d:ae:58:34:fe:59:ac:
83:70:d7:f6:af:15:4a:14:ad:3a:87:f5:1b:10:04:
02:69:48:61:da:18:33:b6:48:52:f1:90:19:18:19:
5a:80:5d:19:1e:b1:95:60:6d:c5:fb:d7:db:3b:52:
34:49:d1:0c:9d:0b:42:45:0d:59:a9:bb:7b:c0:a9:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0D:88:15:73:89:6B:AB:25:06:82:2F:82:9B:A8:DC:93:57:AD:FE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vg2IFXOJa6slBoIvgpuo3JNXrf4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:c4:6d:e4:5c:5c:2f:4d:c1:da:c5:dc:3a:17:4a:46:bd:62:
f2:26:79:34:c3:fe:6a:66:3c:3c:d6:68:ca:1c:5d:1d:c1:98:
5f:d9:6b:6e:c4:c6:b5:6e:1c:29:5c:00:c4:ca:ad:2b:ea:f3:
7c:d8:e3:3c:2a:30:6e:64:1a:61:81:e6:5e:ba:bd:37:aa:2d:
22:94:9d:f2:8b:eb:c3:6e:78:4e:c9:e6:42:6e:f0:86:57:d1:
e0:43:03:1a:59:de:ed:40:59:2b:36:fe:72:c8:de:70:31:e6:
1c:c7:00:2c:9b:da:07:a8:0c:55:2d:3d:1b:4d:c0:3e:75:f3:
d2:c1:68:73:bc:47:fc:90:3f:9c:dc:f6:d5:6c:fe:6c:ff:f9:
8c:c6:91:09:04:3f:3c:2b:87:b0:57:02:a7:dd:28:a5:fc:3b:
1a:61:6b:b8:26:5a:95:0e:07:05:45:23:c6:cd:b3:cc:3f:bf:
38:9f:21:f1:81:ac:be:9e:35:7e:ed:c6:7a:cb:b7:ce:a3:8f:
8f:6e:f3:75:c9:e3:7a:ec:b3:3d:ea:02:b8:8d:be:4c:52:d8:
f7:65:e1:07:a3:92:49:e7:69:bc:12:6f:25:dd:f1:b5:6c:cb:
e2:80:bd:7d:c0:91:ac:c9:59:27:0c:84:e6:53:5c:66:e1:53:
75:dc:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org