Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HH6B2-awNhukJwTtoPpfnfnN-kI.roa
File: HH6B2-awNhukJwTtoPpfnfnN-kI.roa (raw, json)
Hash identifier: 801SzkSmJxy4fjiTHbsRUg34xWkErmbwCnDEMfx32QU=
Subject key identifier: 1C:7E:81:DB:E6:B0:36:1B:A4:27:04:ED:A0:FA:5F:9D:F9:CD:FA:42
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HH6B2-awNhukJwTtoPpfnfnN-kI.roa
Signing time: Thu 15 Sep 2022 02:36:30 +0000
ROA not before: Thu 15 Sep 2022 02:36:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 180.218.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1C7E81DBE6B0361BA42704EDA0FA5F9DF9CDFA42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:3f:6a:2b:66:d4:a7:7a:7c:90:e4:cb:08:
0a:9c:27:70:1b:00:ef:8f:54:32:c6:4d:58:c0:41:
24:34:1c:4d:94:bc:e2:e5:c5:ea:e7:a7:30:6d:dc:
0e:56:54:f5:26:b2:cf:99:77:6c:73:e3:38:50:b0:
e9:1d:6f:79:1e:91:21:fd:b4:2d:e1:0c:e8:53:5c:
0f:11:ff:b0:51:a6:e5:73:58:44:17:64:e1:9b:2a:
39:76:7d:8c:18:2b:61:39:18:45:28:9c:39:73:d3:
bc:e4:76:04:5a:6b:0e:99:5a:d4:ac:1d:d4:cb:00:
c1:84:23:c8:a2:48:45:ff:f7:f3:22:e6:75:2a:a9:
6a:5d:b7:2c:37:7f:29:44:cc:22:5a:31:17:b8:1a:
9d:0b:d2:a3:17:53:3f:cf:59:e6:30:e8:c1:d2:26:
76:8c:9a:59:a7:98:f3:48:d4:3f:fd:e2:b5:28:15:
c7:33:6d:30:d6:b3:ab:9e:e0:1e:e7:69:ab:8c:8c:
9d:25:ac:17:a4:b6:80:f2:b1:3d:4b:e8:ce:70:5e:
7d:4d:82:de:55:85:9d:6c:99:18:55:8d:5f:5f:d4:
39:d9:84:53:d5:c5:30:1e:24:c3:9e:3b:e4:dc:4e:
a9:fd:e4:79:19:dc:91:7f:c3:f8:7d:f0:5e:3c:af:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:81:DB:E6:B0:36:1B:A4:27:04:ED:A0:FA:5F:9D:F9:CD:FA:42
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HH6B2-awNhukJwTtoPpfnfnN-kI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.104.0/21
Signature Algorithm: sha256WithRSAEncryption
83:77:54:90:12:c0:cd:39:23:67:58:c0:5d:63:2b:d0:15:7b:
b2:d4:d0:1b:0d:0e:29:ec:5b:46:9e:37:e5:a3:d6:42:65:99:
9f:02:a6:27:c9:bb:88:a7:51:46:2a:03:4e:cd:e1:2c:aa:3d:
82:95:d9:cc:13:60:ae:4f:81:90:74:8a:3e:d0:36:ef:c1:e7:
9e:ac:5e:f1:a8:38:c9:7c:1c:ae:2f:ba:2b:e9:bd:73:4a:fc:
85:e3:7b:c5:ca:e5:d5:19:37:fc:66:94:ae:bb:5b:8f:39:48:
4c:f1:79:e9:ae:27:c4:ea:76:5e:62:d7:f9:02:b8:55:af:26:
df:e4:f7:90:df:6c:e1:e9:b7:8b:22:19:06:d5:91:86:cf:12:
12:8a:64:8a:2e:6b:03:f7:dc:31:0d:2c:7d:a1:ad:a3:64:78:
60:5c:fd:02:44:6a:82:6f:d1:bb:eb:bc:c5:07:26:e9:4c:7a:
26:7f:1c:07:e6:b5:e5:47:64:42:0d:99:d0:5e:f4:94:4d:56:
22:f9:3e:78:a6:96:24:92:6b:a4:d2:0a:92:12:e2:56:0c:84:
8d:e2:68:68:5f:07:f2:20:e5:20:34:22:1a:28:93:0e:42:81:
f9:8d:db:d1:d2:ae:b4:d7:d6:d3:e6:da:a8:5c:4f:2e:b0:24:
cb:34:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org