Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Zh7VIGcc7ORiuUlCdx29EEtc2c.roa
File: 7Zh7VIGcc7ORiuUlCdx29EEtc2c.roa (raw, json)
Hash identifier: WX6Xc8YHdKNBHo/HVwu3QBzAyBJ8k69iuIMYWy/+FZE=
Subject key identifier: ED:98:7B:54:81:9C:73:B3:91:8A:E5:25:09:DC:76:F4:41:2D:73:67
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1313
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Zh7VIGcc7ORiuUlCdx29EEtc2c.roa
Signing time: Wed 29 Sep 2021 02:55:21 +0000
ROA not before: Wed 29 Sep 2021 02:55:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 119.77.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4883 (0x1313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=ED987B54819C73B3918AE52509DC76F4412D7367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:4b:48:b1:eb:7c:fb:b2:fe:49:79:4e:94:
95:24:c7:d5:e7:66:4b:29:45:0c:80:88:2a:27:41:
c9:05:62:83:c5:a0:85:d7:4a:3e:4e:f6:86:dd:00:
e6:12:b9:19:27:45:8a:1a:04:b4:86:a3:b6:28:fb:
06:a9:cd:8d:70:0a:9f:11:96:50:82:2f:84:6f:03:
85:d8:be:61:c5:57:a8:8f:7d:43:86:fd:f7:f0:ea:
8b:b0:3a:ad:da:b2:f0:96:14:1d:22:a0:a8:9c:4d:
9a:ad:d0:43:b4:97:2b:d1:b7:73:2b:5c:20:b0:9b:
1b:ac:a5:59:04:63:4e:d6:49:f5:47:1a:06:40:73:
b3:1c:c7:79:46:e9:78:d2:67:2b:1a:6d:c2:1f:dc:
37:26:2e:95:88:8b:24:2d:af:09:26:07:4b:3b:a9:
e4:04:87:1f:6a:34:dd:cd:17:b7:cd:75:94:55:cf:
c5:4a:20:67:d6:d8:b0:5b:65:ca:91:79:cd:25:5b:
65:31:3c:e7:bc:91:ec:23:93:79:65:74:0f:bd:f6:
6f:46:4c:8a:ea:51:1c:96:f9:aa:03:c2:64:17:36:
20:c8:b4:e3:64:38:93:07:31:ea:1d:b4:be:61:4b:
92:9b:55:bc:8b:d9:80:d2:09:3a:de:59:f1:53:75:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:98:7B:54:81:9C:73:B3:91:8A:E5:25:09:DC:76:F4:41:2D:73:67
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Zh7VIGcc7ORiuUlCdx29EEtc2c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.140.0/22
Signature Algorithm: sha256WithRSAEncryption
83:6a:8c:65:32:a6:a1:aa:24:9c:3e:38:51:fb:fd:90:74:ca:
35:4e:0c:f0:c6:1a:9e:a7:d4:75:98:42:44:c3:bd:ed:3a:04:
a0:50:c2:45:bd:4b:a9:d7:fa:ce:53:7f:92:29:69:07:20:78:
3a:72:8b:a4:a8:53:83:36:db:99:fb:3e:49:cf:7d:b6:94:69:
5e:9c:50:3a:3e:b2:88:94:37:f8:02:58:4c:3b:ba:7e:98:e5:
3b:15:d0:87:22:2b:b4:00:a0:92:30:59:3d:16:90:98:3f:26:
04:14:dd:5b:e5:1c:4a:e0:41:ae:94:c0:bd:d8:24:f2:78:7f:
a7:f8:b0:b6:48:ff:98:de:e3:cd:0a:73:71:bb:cb:a4:11:28:
36:c7:0c:f1:ea:85:26:e5:91:f5:df:03:54:60:36:65:f0:eb:
51:e2:05:d5:97:8d:04:4a:64:6d:86:9b:29:1e:72:7c:de:b4:
30:ca:5c:7e:06:42:bf:09:7d:fd:ac:a4:f0:73:43:28:1c:12:
4c:d6:85:51:df:a9:49:ea:76:13:04:09:8b:65:b0:61:e9:ff:
36:37:3d:5d:bf:6d:72:51:04:2d:3e:a2:92:09:08:fd:71:d0:
e5:6d:34:8b:42:9a:55:dc:e8:4f:b7:12:d5:e5:15:eb:2d:10:
71:c7:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org