Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k7IZ1IDn2W-m3uZyFOkll_puDoU.roa
File: k7IZ1IDn2W-m3uZyFOkll_puDoU.roa (raw, json)
Hash identifier: hAVmuWAWCp9RhnHtJVwbBajIi2nVph5PMcjgtzDvrp4=
Subject key identifier: 93:B2:19:D4:80:E7:D9:6F:A6:DE:E6:72:14:E9:25:97:FA:6E:0E:85
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1125
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k7IZ1IDn2W-m3uZyFOkll_puDoU.roa
Signing time: Sun 07 Feb 2021 13:13:55 +0000
ROA not before: Sun 07 Feb 2021 13:13:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4389 (0x1125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:13:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=93B219D480E7D96FA6DEE67214E92597FA6E0E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:46:e9:ba:71:50:23:7b:ca:32:41:11:47:
66:d8:9f:9e:e2:7c:53:d0:23:2f:69:ef:be:04:fe:
2e:aa:21:8e:e2:38:c1:f1:3e:32:08:93:64:e3:bd:
5e:e5:e5:6d:c5:ce:d8:df:e5:90:ce:22:3b:b7:f9:
9d:00:24:43:80:d5:04:cb:2a:4a:ef:71:c6:49:8f:
67:c0:7f:62:31:f0:3e:5c:da:9b:a1:55:c6:a0:3d:
13:08:63:5d:6f:08:0c:ef:32:2c:4e:cb:cb:e6:60:
7a:96:34:79:6c:e8:a1:49:d5:d8:d1:ca:03:dd:d9:
56:b3:35:8b:7a:87:43:66:c7:9a:5c:b7:93:67:44:
f7:05:7b:bd:fb:ac:a3:83:ba:9e:88:88:3a:c1:dd:
bf:d8:e6:76:35:af:3c:d7:9f:7c:66:d9:c0:b2:07:
6b:d3:4f:b0:ad:88:9b:09:7c:66:3b:e6:91:60:e3:
d5:f9:49:6f:76:38:01:06:1c:78:05:1f:02:79:44:
43:0f:5a:b5:e5:6a:f3:59:1b:6d:c1:60:67:56:0a:
a4:ba:36:4e:9a:d7:5b:28:96:28:a2:49:9a:a8:49:
7a:7b:1f:f4:13:34:b5:26:42:27:32:5d:c6:f5:ce:
81:3e:05:88:02:b7:45:b1:00:14:bb:0c:4c:de:98:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:19:D4:80:E7:D9:6F:A6:DE:E6:72:14:E9:25:97:FA:6E:0E:85
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k7IZ1IDn2W-m3uZyFOkll_puDoU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.190.0/24
Signature Algorithm: sha256WithRSAEncryption
54:92:cc:34:f0:55:49:18:a5:97:a1:fa:61:a4:ea:77:eb:8e:
cc:07:7f:bb:3f:2b:48:db:ea:db:b2:6e:b2:06:b9:29:32:ab:
6b:78:b1:c4:7b:6f:c2:ab:a2:87:93:37:46:12:4f:15:1e:88:
8b:9f:fb:2f:b3:09:97:e1:d1:af:8e:9a:9b:03:1a:e4:d3:fb:
45:9f:2f:d8:75:96:76:5e:10:9b:b0:1f:dd:70:bb:75:dc:4b:
13:25:d1:46:8f:be:ff:e4:30:87:00:d4:9f:67:84:8e:a9:44:
d3:64:52:1b:08:36:86:48:ff:96:b1:28:f5:a2:71:b4:a1:60:
9c:5e:78:00:92:9c:7f:fc:17:46:89:0f:70:df:85:7d:e1:63:
b5:9c:06:e6:31:60:a8:b1:47:53:c5:2e:5c:27:fc:3b:93:c2:
e2:8b:4f:80:12:c3:f7:b2:3e:cd:8f:a7:07:b7:9c:cd:54:ae:
0e:21:ef:74:c8:6e:b8:38:70:15:7e:dc:7f:c7:b4:40:6d:84:
35:cd:39:92:ff:eb:da:70:4e:09:77:b5:15:1e:7b:86:65:42:
ae:7c:1f:53:37:77:b7:0f:60:cc:91:99:1d:6f:8b:14:a7:69:
26:d7:a7:88:d8:03:85:9a:3e:00:e3:cb:ed:59:81:00:94:a3:
85:28:b5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org