Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CfF4Yn-UIJZQ544SkwZdI_bTKsg.roa
File: CfF4Yn-UIJZQ544SkwZdI_bTKsg.roa (raw, json)
Hash identifier: aSA9m7fk9UAIy2fI8yxTMPiwVU6Yh5YaJYu8X/ZOXnM=
Subject key identifier: 09:F1:78:62:7F:94:20:96:50:E7:8E:12:93:06:5D:23:F6:D3:2A:C8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1217
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CfF4Yn-UIJZQ544SkwZdI_bTKsg.roa
Signing time: Wed 29 Sep 2021 02:54:12 +0000
ROA not before: Wed 29 Sep 2021 02:54:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4631 (0x1217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=09F178627F94209650E78E1293065D23F6D32AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:a7:75:ab:bd:d8:a4:78:e8:55:50:8d:9b:
93:05:8f:56:14:8f:3b:23:8a:57:a0:3f:4f:7a:bf:
bc:e7:9e:06:a7:ac:2e:0d:ea:94:19:3b:b1:7e:4e:
e6:64:5c:17:6f:96:9c:28:41:4a:90:bd:64:24:ee:
47:df:e0:8c:7f:22:89:94:b8:7e:ee:f6:78:9a:5e:
ea:12:60:d9:9f:0f:d2:fb:7b:73:e4:8f:35:91:cd:
e6:8c:01:a4:59:09:84:c8:79:d7:d6:7e:69:a0:fd:
6b:34:98:45:52:21:9c:82:27:2f:4e:91:c7:cd:d1:
48:c7:67:d3:cd:39:76:26:f2:d9:07:cb:3a:df:a3:
7f:7c:ec:96:9c:8d:36:73:96:d4:35:da:5c:d1:dc:
55:ca:a3:39:e5:b4:f3:61:3f:5e:97:60:8b:5e:d9:
a2:2b:fc:5a:7e:c5:9c:43:2d:b2:84:03:9d:22:72:
c2:f1:11:d3:68:0a:41:03:28:b6:f2:4f:81:13:25:
a9:72:b4:41:9d:ec:84:50:a0:73:59:e3:c0:05:8b:
ca:f7:1d:6a:b3:95:6d:01:bc:b3:d6:2d:42:12:c5:
a4:2f:11:cb:4d:e1:b2:3a:26:7d:cc:aa:91:61:ca:
6c:bf:a1:35:28:ec:b3:80:09:85:02:54:03:16:bf:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:78:62:7F:94:20:96:50:E7:8E:12:93:06:5D:23:F6:D3:2A:C8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CfF4Yn-UIJZQ544SkwZdI_bTKsg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.197.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d7:68:48:28:ab:b2:a0:05:78:f7:39:c5:36:44:df:03:70:
1c:80:46:91:f5:f0:03:60:54:5d:3b:2f:a5:d7:ef:ae:8d:30:
c7:59:11:05:0e:6f:5b:3c:8a:9b:ea:fd:f9:cb:4e:76:0a:03:
c2:0f:6d:92:09:47:3f:b1:67:76:a0:a4:ef:27:bc:aa:1f:14:
61:b5:f2:2f:9b:be:ff:8d:85:39:e4:e9:95:81:62:3b:7c:7e:
4e:45:56:ed:71:bb:78:a8:1b:28:2f:29:bd:e1:83:e9:4c:6e:
bf:0c:b1:ba:42:b0:08:07:cb:b8:c9:2b:d6:77:4c:25:8b:4f:
c6:5b:9a:4a:1e:83:5d:79:6d:86:9e:6c:56:7b:c6:7b:9b:57:
6e:4a:cd:a3:6d:00:4a:2f:fe:66:ef:25:66:c9:4a:bd:1a:93:
41:0b:c7:5e:9f:98:eb:9e:6b:e4:0c:38:5c:96:ed:d2:42:af:
6e:91:32:46:8f:5d:e3:4e:e0:90:c1:33:b0:db:17:c6:6a:2b:
24:95:4a:ea:27:af:a2:ce:90:db:4e:f3:6c:91:bc:04:12:8e:
af:09:d3:50:f2:b8:9c:11:ca:a2:d7:31:36:9a:70:94:22:0a:
5d:4b:5b:cc:7c:aa:79:83:31:68:d1:78:91:58:da:cb:4d:99:
ae:40:c0:9c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDA5RjE3ODYyN0Y5NDIw
OTY1MEU3OEUxMjkzMDY1RDIzRjZEMzJBQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMx6d1q73YpHjoVVCNm5MFj1YUjzsjilegP096v7znnganrC4N
6pQZO7F+TuZkXBdvlpwoQUqQvWQk7kff4Ix/IomUuH7u9niaXuoSYNmfD9L7e3Pk
jzWRzeaMAaRZCYTIedfWfmmg/Ws0mEVSIZyCJy9OkcfN0UjHZ9PNOXYm8tkHyzrf
o3987JacjTZzltQ12lzR3FXKoznltPNhP16XYIte2aIr/Fp+xZxDLbKEA50icsLx
EdNoCkEDKLbyT4ETJalytEGd7IRQoHNZ48AFi8r3HWqzlW0BvLPWLUISxaQvEctN
4bI6Jn3MqpFhymy/oTUo7LOACYUCVAMWvwBtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCfF4Yn+UIJZQ544SkwZdI/bTKsgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NmRjRZbi1VSUpaUTU0NFNr
d1pkSV9iVEtzZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3
TcUwDQYJKoZIhvcNAQELBQADggEBAITXaEgoq7KgBXj3OcU2RN8DcByARpH18ANg
VF07L6XX766NMMdZEQUOb1s8ipvq/fnLTnYKA8IPbZIJRz+xZ3agpO8nvKofFGG1
8i+bvv+NhTnk6ZWBYjt8fk5FVu1xu3ioGygvKb3hg+lMbr8MsbpCsAgHy7jJK9Z3
TCWLT8Zbmkoeg115bYaebFZ7xnubV25KzaNtAEov/mbvJWbJSr0ak0ELx16fmOue
a+QMOFyW7dJCr26RMkaPXeNO4JDBM7DbF8ZqKySVSuonr6LOkNtO82yRvAQSjq8J
01DyuJwRyqLXMTaacJQiCl1LW8x8qnmDMWjReJFY2stNma5AwJw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org