Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3S8pXUI3sPQoDTHx-n838JRw7UE.roa
File: 3S8pXUI3sPQoDTHx-n838JRw7UE.roa (raw, json)
Hash identifier: 9TQ+9OO3pVCyHtYnARyq2R89ILirtDwwqE84YX3F+ro=
Subject key identifier: DD:2F:29:5D:42:37:B0:F4:28:0D:31:F1:FA:7F:37:F0:94:70:ED:41
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ED7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3S8pXUI3sPQoDTHx-n838JRw7UE.roa
Signing time: Sun 07 Feb 2021 11:56:57 +0000
ROA not before: Sun 07 Feb 2021 11:56:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3799 (0xed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 11:56:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DD2F295D4237B0F4280D31F1FA7F37F09470ED41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:e8:81:99:2e:63:fc:e3:dc:b5:8d:cb:01:
84:83:54:85:20:42:bd:ba:42:c7:87:b6:5f:23:a2:
81:d3:02:82:4f:14:5c:14:9b:4e:11:4a:c5:4a:1f:
73:73:f9:6f:ac:ec:2b:ee:52:3a:f8:2a:dc:ca:f1:
19:57:62:4b:85:39:5f:69:94:a7:fc:e8:69:7a:27:
c0:fa:eb:a6:92:69:89:3f:85:63:2e:3f:f1:7a:9d:
23:76:b7:04:7c:aa:e8:52:3b:07:26:cb:9e:27:fc:
b6:c8:d7:9b:bb:de:bd:6e:54:ee:ab:74:4f:56:0c:
85:63:b1:fc:0d:00:7a:ad:da:54:1b:5e:04:1d:14:
2f:09:15:b9:1c:8b:de:de:02:d6:0f:8f:80:33:5c:
fd:b3:25:dd:3e:d3:72:e0:a1:55:a9:4c:25:6c:3f:
68:3b:90:2a:5e:2a:9a:51:58:59:2a:be:bf:ce:3b:
1d:72:94:c0:89:a4:12:ba:6c:23:ce:33:3d:15:50:
d0:32:ac:02:29:29:38:b9:f9:b2:7f:f9:c7:ab:04:
1a:c1:d0:21:33:43:bb:c4:fc:3a:eb:90:8e:03:25:
0f:32:14:32:37:7e:08:96:72:80:06:3b:ae:53:52:
2f:1f:4c:47:bf:04:04:4c:69:91:bc:a2:46:88:92:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:29:5D:42:37:B0:F4:28:0D:31:F1:FA:7F:37:F0:94:70:ED:41
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3S8pXUI3sPQoDTHx-n838JRw7UE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.198.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ef:c6:f9:80:5c:dd:7f:e5:4e:99:d8:a0:95:e7:4b:50:22:
65:1c:1f:9a:a8:3b:5c:f4:5e:56:d7:8a:26:7d:ea:31:f7:57:
0b:8a:46:0d:89:95:81:d0:d0:12:3c:b3:05:aa:9d:c7:72:48:
05:a7:ae:62:02:31:7c:15:d9:7e:77:e3:2a:1c:a8:2d:45:db:
7e:aa:46:02:ae:d4:78:bc:51:f7:5e:2c:0b:98:47:44:30:94:
08:42:26:a9:4d:8b:f6:85:1f:60:d2:a1:b5:1e:f2:0b:73:31:
76:ce:3e:22:97:f1:6b:6d:40:ff:ba:34:03:73:5d:21:39:14:
63:f7:7f:d2:a5:c9:a9:07:75:b9:3f:b0:65:56:b3:50:10:86:
ab:53:98:2b:1c:ab:04:5b:23:4f:64:90:be:7a:ed:0b:4d:d2:
47:56:99:b5:ef:c0:83:05:04:73:f3:26:78:2d:f9:80:67:c5:
f2:d2:40:45:c1:4c:38:ec:af:15:a7:e3:97:aa:41:55:70:c2:
2f:14:b5:bc:1c:5d:f4:9b:0f:38:ed:2d:86:be:ca:ae:bd:bb:
9a:d6:6b:99:40:99:1f:5d:00:67:ce:83:88:85:7d:d9:16:54:
1c:df:47:67:ea:3e:a8:e5:d1:14:00:c5:86:37:fd:a5:ae:7c:
c6:bb:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org