Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k6O2DKROJCW7K4XViyxhwilgliY.roa
File: k6O2DKROJCW7K4XViyxhwilgliY.roa (raw, json)
Hash identifier: uKms7LkxbbnCxSLqbj48Gehjmu74pQGW58QpjB9kAVE=
Subject key identifier: 93:A3:B6:0C:A4:4E:24:25:BB:2B:85:D5:8B:2C:61:C2:29:60:96:26
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1219
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k6O2DKROJCW7K4XViyxhwilgliY.roa
Signing time: Wed 29 Sep 2021 02:54:12 +0000
ROA not before: Wed 29 Sep 2021 02:54:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4633 (0x1219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=93A3B60CA44E2425BB2B85D58B2C61C229609626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:72:24:82:92:58:57:ca:17:3f:c0:ff:1b:
dc:50:bf:3e:dc:72:e2:ee:48:27:90:ed:7f:24:77:
c5:c9:4b:70:d7:03:68:e5:d7:74:77:4a:61:da:d2:
75:d4:27:76:82:b5:52:5b:ec:fe:ec:46:80:69:c6:
7a:a5:58:d8:9c:4e:53:8d:64:ac:5a:97:ac:07:52:
00:bb:fa:dc:a7:84:03:9a:63:c6:9c:6d:58:a4:9e:
29:02:51:98:30:ec:6c:7a:b3:00:ea:75:92:e3:7f:
d1:7e:a6:fb:ad:b2:ea:83:51:59:9c:1a:ce:96:1d:
51:ae:f4:50:b0:8f:cf:da:38:6c:28:94:8b:a4:fd:
aa:e0:05:87:79:82:9b:48:9e:77:11:44:5d:63:34:
d5:c2:8b:cc:4d:7f:a0:51:86:bd:87:42:f2:e5:ca:
60:60:ba:81:2b:d5:e5:55:4a:89:b3:c0:46:ea:80:
6e:d9:9a:92:95:ad:ae:54:ff:97:7c:58:1b:89:f2:
26:58:56:ce:a4:d1:49:e5:ae:51:b5:1c:cd:2e:e0:
27:d4:6e:84:81:65:dd:25:7b:95:8a:2e:f2:a2:e0:
cd:b4:73:8b:99:d3:5a:e1:a5:a6:1d:e6:53:42:1e:
77:42:cd:b0:27:0f:b1:2e:ce:38:87:24:52:38:0b:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:B6:0C:A4:4E:24:25:BB:2B:85:D5:8B:2C:61:C2:29:60:96:26
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k6O2DKROJCW7K4XViyxhwilgliY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.199.0/24
Signature Algorithm: sha256WithRSAEncryption
03:28:0b:43:d6:51:5f:98:ac:0d:20:72:11:8d:23:87:f6:8d:
8a:8d:5d:97:9d:e6:d5:2b:0c:20:95:80:b0:c3:4a:ff:d4:6a:
e9:60:be:98:45:fb:55:b4:cf:33:7b:c3:19:de:b5:16:53:ef:
1f:2b:7e:89:6b:09:fc:67:5d:a6:04:8d:21:a2:77:bf:59:c3:
7c:90:89:26:66:de:1a:77:5a:e8:ae:33:14:d1:04:4f:cd:a6:
45:5c:97:3f:08:63:c6:8d:eb:52:68:0c:87:69:23:c9:f2:a1:
1d:c2:b2:03:53:6e:1a:e2:54:3b:76:30:e1:c5:ee:77:c7:1c:
7b:28:34:ec:d7:7c:66:28:55:00:01:2d:07:db:38:95:2d:66:
1d:92:13:13:f8:a5:aa:08:45:7d:95:70:06:ad:89:e0:68:a3:
6a:ca:2f:03:67:fc:7f:20:29:31:f9:53:f5:c8:df:c5:c0:d6:
af:5c:a1:be:4b:5e:b3:7d:2f:7c:32:03:2c:86:21:40:36:95:
d2:b1:b0:88:df:e7:e8:d3:e6:50:81:a1:c3:f4:7a:7c:e3:bd:
3d:d4:24:6e:35:b2:27:d8:ff:41:d4:f6:38:a6:f4:51:45:fa:
85:4b:c1:50:96:9f:a0:f3:0b:be:55:a9:85:99:16:22:9b:8c:
2a:ec:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org