Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VwAylKWf0INalRx_FsfM7hzm3is.roa
File: VwAylKWf0INalRx_FsfM7hzm3is.roa (raw, json)
Hash identifier: 77AbvEd7x+moSn5Y8kehrtBg1M3hE8DAFloy4w4jVtw=
Subject key identifier: 57:00:32:94:A5:9F:D0:83:5A:95:1C:7F:16:C7:CC:EE:1C:E6:DE:2B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BA5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VwAylKWf0INalRx_FsfM7hzm3is.roa
Signing time: Tue 29 Sep 2020 10:08:40 +0000
ROA not before: Tue 29 Sep 2020 10:08:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2981 (0xba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=57003294A59FD0835A951C7F16C7CCEE1CE6DE2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:1c:3b:94:d1:66:b8:dd:5f:69:1d:41:76:
3d:bf:fb:5a:7c:28:83:f4:5d:42:a5:23:2c:c5:b9:
ce:65:74:5d:8b:4d:a0:d3:49:f8:5b:d4:ef:26:58:
51:74:68:4b:5b:4e:20:41:ce:a8:a8:9a:8a:2f:b7:
db:a7:ad:c0:07:09:29:fd:5e:23:9b:56:30:1d:08:
c3:30:4e:ba:fc:d4:80:73:13:23:ed:7c:c0:12:58:
88:77:02:e5:42:56:0b:dd:50:61:f7:d0:d9:15:79:
d5:c6:2c:e2:5f:ea:d3:b8:49:0e:61:f7:a4:4a:77:
98:0e:a2:a6:88:3f:2e:c7:6c:58:0e:aa:ef:cf:fd:
9c:11:a8:a6:27:2b:0a:f5:a1:6a:0d:ba:a2:7f:bd:
15:4f:af:b8:80:23:bd:b6:97:b4:a2:6c:40:6b:32:
35:ef:d1:39:a3:9c:0c:a6:87:1a:a1:f7:0a:78:ff:
ba:c4:0c:57:b0:92:b3:5b:c2:f1:56:8d:ab:b8:10:
e1:88:ca:d8:f6:d9:61:f8:5b:8f:a8:2e:53:6f:76:
8b:29:5c:58:eb:9e:c9:38:5c:ea:4d:cd:20:06:67:
75:f4:67:36:82:be:2e:bf:23:ae:c8:bc:c7:48:a8:
2a:bb:74:7e:7d:cb:9d:63:b3:bf:38:3a:49:25:f6:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:00:32:94:A5:9F:D0:83:5A:95:1C:7F:16:C7:CC:EE:1C:E6:DE:2B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VwAylKWf0INalRx_FsfM7hzm3is.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.128.0/17
Signature Algorithm: sha256WithRSAEncryption
29:b0:00:c7:7a:32:67:bc:ec:02:24:c9:ca:58:82:44:40:c0:
1e:6d:5b:79:0d:94:57:c3:6c:cc:0a:38:cc:eb:5a:52:5b:9f:
36:63:0c:07:41:c2:31:42:9d:60:90:5c:b2:41:ba:89:a4:fe:
6c:a0:3a:f0:a8:74:64:d5:b3:94:05:62:f7:6a:f8:1f:32:72:
c8:47:a2:c7:b4:60:99:0c:8d:28:73:2e:e0:03:62:5f:29:b8:
e4:bb:b9:65:5a:0b:c0:a8:1a:75:d2:80:c2:f2:ad:a9:bd:a7:
1d:10:00:dd:f4:8d:f2:22:78:5c:18:2f:44:0f:5a:2c:d7:d8:
52:42:3f:51:8b:0f:d0:62:1f:06:cf:a2:3c:9c:d9:33:6b:00:
ba:db:ab:b8:c3:14:8c:2c:a2:fd:8e:e1:74:73:7a:dc:ab:ba:
42:30:a4:66:24:05:5e:25:91:1a:ce:54:bc:a4:bb:a0:7e:0d:
a2:8b:3b:19:7f:1a:bf:f9:54:46:80:b3:ef:15:66:51:eb:8b:
ce:f4:30:e2:c3:3e:42:f2:ee:d5:3e:37:65:93:82:4e:07:aa:
0e:86:b9:10:fa:65:7f:2f:35:9f:ed:ad:b4:c9:5d:e0:f4:c7:
2d:6b:b9:6d:f4:98:c4:ce:98:a2:d9:2d:fd:ef:5d:d1:1d:2a:
d2:a9:13:89
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4NDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU3MDAzMjk0QTU5RkQw
ODM1QTk1MUM3RjE2QzdDQ0VFMUNFNkRFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFaRw7lNFmuN1faR1Bdj2/+1p8KIP0XUKlIyzFuc5ldF2LTaDT
Sfhb1O8mWFF0aEtbTiBBzqiomoovt9unrcAHCSn9XiObVjAdCMMwTrr81IBzEyPt
fMASWIh3AuVCVgvdUGH30NkVedXGLOJf6tO4SQ5h96RKd5gOoqaIPy7HbFgOqu/P
/ZwRqKYnKwr1oWoNuqJ/vRVPr7iAI722l7SibEBrMjXv0TmjnAymhxqh9wp4/7rE
DFewkrNbwvFWjau4EOGIytj22WH4W4+oLlNvdospXFjrnsk4XOpNzSAGZ3X0ZzaC
vi6/I67IvMdIqCq7dH59y51js784Okkl9mnrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVwAylKWf0INalRx/FsfM7hzm3iswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1Z3QXlsS1dmMElOYWxSeF9G
c2ZNN2h6bTNpcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3
TYAwDQYJKoZIhvcNAQELBQADggEBACmwAMd6Mme87AIkycpYgkRAwB5tW3kNlFfD
bMwKOMzrWlJbnzZjDAdBwjFCnWCQXLJBuomk/mygOvCodGTVs5QFYvdq+B8ycshH
ose0YJkMjShzLuADYl8puOS7uWVaC8CoGnXSgMLyram9px0QAN30jfIieFwYL0QP
WizX2FJCP1GLD9BiHwbPojyc2TNrALrbq7jDFIwsov2O4XRzetyrukIwpGYkBV4l
kRrOVLyku6B+DaKLOxl/Gr/5VEaAs+8VZlHri870MOLDPkLy7tU+N2WTgk4Hqg6G
uRD6ZX8vNZ/trbTJXeD0xy1ruW30mMTOmKLZLf3vXdEdKtKpE4k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org