Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hnJBURSLarGGM-JB4Vfm-JwyH4Q.roa
File: hnJBURSLarGGM-JB4Vfm-JwyH4Q.roa (raw, json)
Hash identifier: 9AKASEx+N2+hlwYnIiyy0oKTLis0h/gcAJcEN9MN+f4=
Subject key identifier: 86:72:41:51:14:8B:6A:B1:86:33:E2:41:E1:57:E6:F8:9C:32:1F:84
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 120B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hnJBURSLarGGM-JB4Vfm-JwyH4Q.roa
Signing time: Wed 29 Sep 2021 02:54:09 +0000
ROA not before: Wed 29 Sep 2021 02:54:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4619 (0x120b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=86724151148B6AB18633E241E157E6F89C321F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:06:a3:a2:f7:f3:e8:5a:54:f3:d4:25:54:
e4:00:25:61:4f:13:57:41:97:d2:98:2a:21:43:07:
e1:8b:2c:57:15:ed:61:80:20:d2:24:2c:8f:76:5d:
10:11:10:dd:52:c6:12:6c:27:8d:21:6b:9a:3a:0a:
8e:98:98:83:bf:1b:f4:ce:9f:67:55:ba:24:41:2d:
2e:b8:97:67:30:41:ba:ed:11:2d:64:24:81:c8:7a:
4e:3c:94:e9:10:3e:13:aa:f5:39:cb:be:69:f6:3b:
0a:1e:2e:32:ea:b6:45:37:47:5e:86:29:0b:09:22:
98:26:a4:c5:db:7f:53:1e:32:97:47:9c:71:e3:49:
4a:f8:da:cb:cf:44:98:1a:ec:80:c8:22:75:b2:91:
f8:b0:2f:9d:49:c6:84:2f:38:e9:fa:ab:7b:37:a1:
02:69:d7:cb:82:a6:94:ec:df:8a:ca:ee:c0:a8:2e:
15:da:31:5c:63:d4:99:f1:bd:49:1c:ef:99:8b:7d:
33:ff:ed:66:90:ac:62:2a:15:f1:e9:d8:b7:b0:f4:
96:75:47:7f:62:bd:e0:3c:52:26:ba:ba:f0:72:dd:
80:ea:4b:73:d9:06:ea:55:34:62:bc:bb:15:6e:d3:
c8:e7:c9:35:24:4b:7b:24:77:66:41:b1:eb:d4:d4:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:41:51:14:8B:6A:B1:86:33:E2:41:E1:57:E6:F8:9C:32:1F:84
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hnJBURSLarGGM-JB4Vfm-JwyH4Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.116.0/22
Signature Algorithm: sha256WithRSAEncryption
16:89:81:7e:92:fc:86:f5:4f:b7:db:00:7e:33:6e:ea:3b:35:
0b:cc:69:96:0f:72:05:85:98:b9:df:a0:f2:41:2b:6f:81:88:
33:23:8c:45:9d:1f:89:9a:f6:18:1b:3b:05:81:66:e6:d4:d4:
f7:6d:6a:38:54:59:72:45:3e:6f:ac:5a:46:c0:35:28:23:eb:
65:ea:fa:ad:a2:85:ae:dd:34:31:80:ed:73:2d:31:5d:31:92:
03:7d:4e:f1:b9:f9:f6:97:c7:35:c0:86:ba:b8:6f:c0:91:76:
96:b9:6c:f1:41:10:de:b6:80:6a:09:04:c8:7c:d9:62:c8:92:
84:9d:ff:2d:a4:39:40:af:73:d1:71:08:1f:cc:94:5d:54:35:
33:95:41:bd:bf:5d:11:5b:16:4e:b3:4f:54:64:0d:6c:b6:13:
22:46:d8:bb:86:34:b1:36:23:df:13:3d:be:72:9b:a3:ae:8d:
81:62:a7:36:0b:82:37:24:2d:bf:80:87:a9:9e:68:56:56:1a:
c3:ac:90:06:a4:8a:26:c2:2d:ab:17:d5:71:2a:fc:8b:24:b0:
42:10:cf:24:4c:d6:ba:c8:58:f3:fe:37:33:d8:bd:50:7d:da:
3b:87:ed:6e:02:99:46:c1:11:94:34:16:70:cd:9a:2f:b5:26:
81:da:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org