Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Osor9Oxtc4AZFQtK2OXuFHp2Keg.roa
File: Osor9Oxtc4AZFQtK2OXuFHp2Keg.roa (raw, json)
Hash identifier: Qe29d3UAJxKJVH/Gn92KJ/DJbOjnCC2PV+gHmilmSvc=
Subject key identifier: 3A:CA:2B:F4:EC:6D:73:80:19:15:0B:4A:D8:E5:EE:14:7A:76:29:E8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F21
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Osor9Oxtc4AZFQtK2OXuFHp2Keg.roa
Signing time: Sun 07 Feb 2021 12:32:59 +0000
ROA not before: Sun 07 Feb 2021 12:32:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3873 (0xf21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3ACA2BF4EC6D738019150B4AD8E5EE147A7629E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:e7:1e:d0:7b:58:0b:65:8a:cf:31:9b:6a:
3f:93:93:2b:bf:d5:bb:2a:ca:be:5d:27:d5:7c:be:
08:3a:cc:d2:ca:82:00:0e:3e:3d:aa:0b:a9:9f:cf:
32:4b:8d:a4:0d:5e:2f:b3:b1:a3:e8:67:7c:25:db:
d2:70:25:e7:7a:ee:48:03:11:02:8f:32:75:c4:99:
ce:21:7c:33:6f:29:f5:b2:fa:b9:57:03:9f:8c:b4:
66:87:08:22:f2:c3:21:09:8d:54:40:5e:3b:37:36:
ed:2d:80:5e:59:15:16:c8:de:ae:e9:f7:d8:db:c4:
1e:53:41:12:b4:2a:6c:c5:ae:9d:60:79:d7:91:86:
b0:a6:26:53:e1:15:56:69:28:33:e4:4d:b4:70:6a:
15:69:ce:33:76:da:49:15:0e:b7:aa:97:49:9d:1b:
3a:6e:c8:91:79:91:94:be:de:49:0b:d3:85:12:26:
82:78:4b:9b:58:4e:06:fb:1e:0b:26:16:dc:69:2d:
2a:c6:dc:55:5d:b2:f8:69:05:d2:5a:6e:12:fd:25:
9f:d7:0e:bd:56:e9:31:e0:bc:38:ef:6a:08:c9:6b:
89:b8:95:4b:67:98:c0:7c:a3:29:f6:c4:54:6a:b5:
db:6f:99:9f:53:8c:ce:5a:7f:b8:ad:ac:af:46:e5:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:2B:F4:EC:6D:73:80:19:15:0B:4A:D8:E5:EE:14:7A:76:29:E8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Osor9Oxtc4AZFQtK2OXuFHp2Keg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.194.0/23
Signature Algorithm: sha256WithRSAEncryption
05:f6:40:b7:a5:c8:f8:b4:0c:1d:b3:c6:c0:5c:37:5d:5c:4c:
6c:07:4c:bd:b9:87:f6:2b:b6:b4:fb:20:85:3f:95:37:dd:2a:
73:58:7c:d4:d1:cb:ef:94:e5:9b:2c:75:1c:c8:3e:54:9e:89:
71:50:14:92:44:bd:1e:32:37:0d:37:a5:cf:84:d2:37:ce:ad:
ba:1a:95:40:40:3d:b5:d7:29:d9:0a:29:e3:8d:28:30:49:42:
40:f7:9f:50:1b:01:f7:35:0d:30:22:10:22:0b:dc:df:bd:67:
f7:a3:54:4c:c1:be:7e:40:96:57:f1:6d:b4:4d:94:d1:28:a2:
fe:1f:5c:98:0a:e3:2f:8d:dd:db:d2:d7:81:56:19:98:18:6b:
7f:78:f5:61:58:1d:00:21:75:0f:b7:8e:24:d9:0a:77:07:6d:
31:1e:53:b2:5d:f6:b5:70:1c:41:bc:89:a0:5d:b8:9e:48:a1:
14:b2:3d:5d:ce:9f:a9:35:65:61:69:28:e8:04:e8:53:e0:33:
3f:85:8a:b8:d5:7f:8d:14:a5:36:b2:2d:da:16:e0:5d:96:af:
d9:77:a0:e9:aa:fd:60:a5:4a:9f:a0:f9:a4:e6:f3:8f:f9:ed:
eb:79:94:5e:d6:16:4d:47:e8:df:94:79:d1:bc:06:ac:b9:89:
0a:e4:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org