Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LhhRhLI7X2h_6skR8TrsudMhpGU.roa
File: LhhRhLI7X2h_6skR8TrsudMhpGU.roa (raw, json)
Hash identifier: dO6xwbn8wGLMMOmcvh853RBshNu9kd9kIr1xL6OdY7w=
Subject key identifier: 2E:18:51:84:B2:3B:5F:68:7F:EA:C9:11:F1:3A:EC:B9:D3:21:A4:65
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1258
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LhhRhLI7X2h_6skR8TrsudMhpGU.roa
Signing time: Wed 29 Sep 2021 02:54:29 +0000
ROA not before: Wed 29 Sep 2021 02:54:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 122.100.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4696 (0x1258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2E185184B23B5F687FEAC911F13AECB9D321A465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:87:9e:2e:c0:f5:8a:ce:4f:eb:09:67:10:
fe:ec:9f:1c:57:c4:46:6e:01:b0:cb:cf:b7:49:cf:
a9:93:bd:76:89:e9:84:be:58:e7:3e:a4:5a:f3:67:
be:b4:84:9a:5e:b3:4c:cf:ed:f2:2d:b0:3a:67:70:
f5:92:47:c1:10:65:95:3c:0c:0e:ea:0e:92:2b:05:
f3:7d:bc:1b:21:c0:67:7d:d4:1b:62:4b:fa:a0:95:
52:30:32:10:9d:dd:35:1f:44:eb:15:af:75:62:14:
b6:e4:62:ab:16:2c:0a:ad:74:ed:c8:aa:24:c9:89:
4f:bc:4b:fc:92:95:b9:7a:36:73:a2:ae:6b:d8:d5:
d3:1d:17:67:f6:ed:51:04:28:b9:64:d1:f3:8a:f1:
96:3b:80:38:e6:fb:bb:63:cd:37:34:fb:d0:91:2f:
34:65:b4:27:63:5e:f8:96:6d:0c:95:9a:33:a5:87:
a3:2a:53:27:1a:c4:00:4f:39:29:61:0a:c0:fc:48:
55:0a:94:ea:4d:51:ce:84:cf:f0:81:48:0e:7d:ae:
58:e1:ba:1f:1f:4e:ea:25:89:dd:81:d0:3d:97:09:
35:61:b7:66:00:21:ea:38:40:9d:64:7c:0f:8c:90:
90:9f:e8:93:bf:72:90:ee:66:2e:5e:ca:17:11:a8:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:18:51:84:B2:3B:5F:68:7F:EA:C9:11:F1:3A:EC:B9:D3:21:A4:65
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LhhRhLI7X2h_6skR8TrsudMhpGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:1f:6e:06:cf:f1:be:27:1a:d0:f2:f5:fb:a6:f9:99:dc:e5:
d5:16:d0:43:db:1a:59:7d:5b:d0:e6:d4:e8:29:a3:65:e9:2e:
99:f6:cd:33:6b:e3:d8:7f:42:cf:e5:a9:c4:02:19:4a:5f:d8:
f6:44:e2:37:8e:22:24:b8:22:99:22:f1:c7:54:f2:b4:f8:4b:
57:a5:5e:c3:54:9d:7a:7c:f7:ba:77:68:9c:6a:b4:bc:5f:dd:
11:7b:69:23:1c:7f:57:28:aa:82:3b:cf:f4:13:6b:0f:18:0b:
ca:3c:6f:55:e1:d5:c7:fa:70:1c:92:3c:75:3b:4f:d0:e5:8b:
2a:76:13:a6:07:50:d7:aa:7d:73:34:01:97:ce:8c:f1:35:69:
97:2b:38:5e:a5:1e:73:ae:ef:cf:14:f1:2c:f6:73:17:81:41:
c4:96:31:56:be:9f:0f:8d:fd:c5:c3:08:b2:6f:43:3e:ca:1e:
4f:18:2e:0a:6b:af:ce:b0:d0:dd:ec:bb:33:71:5f:c2:ad:20:
59:6e:db:c1:7f:53:35:c3:4f:8e:38:ef:cf:04:72:a6:2b:cf:
90:3b:62:d4:33:40:6f:1e:3c:06:ff:aa:d0:ed:c8:33:84:a1:
47:96:6e:65:6d:d5:16:0c:1f:0f:f6:46:ac:a7:3f:46:d3:6f:
63:8c:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org