Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/myQ2yQklGYHXnDBNus8IieCr-RY.roa
File: myQ2yQklGYHXnDBNus8IieCr-RY.roa (raw, json)
Hash identifier: GeixpzbZn/VYBlA1FbTF7t/LCzxCo5TulwG19sVJwLM=
Subject key identifier: 9B:24:36:C9:09:25:19:81:D7:9C:30:4D:BA:CF:08:89:E0:AB:F9:16
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D29
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/myQ2yQklGYHXnDBNus8IieCr-RY.roa
Signing time: Thu 14 Jan 2021 07:17:40 +0000
ROA not before: Thu 14 Jan 2021 07:17:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 119.77.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3369 (0xd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:17:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9B2436C909251981D79C304DBACF0889E0ABF916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8c:33:19:07:9c:26:e8:9c:59:ad:fe:51:d4:
5a:57:09:83:68:da:d3:d2:0a:b9:9d:3d:da:10:c4:
80:16:97:42:dd:a3:2c:7a:e6:36:c6:16:9b:73:fd:
fe:6b:21:5a:34:a8:0c:c1:ae:87:11:1f:20:c5:77:
ba:0b:d4:74:a2:ab:d0:49:2a:f3:09:c0:17:5b:4a:
46:b2:19:a1:6f:21:11:24:1e:f6:90:4f:87:60:e3:
96:e7:00:84:90:ec:2f:4d:63:24:13:0f:32:0d:08:
96:b1:72:87:a2:f2:af:95:91:e6:c5:98:6b:79:63:
bb:36:80:15:2a:60:42:74:7c:60:90:a6:34:fd:1e:
f5:18:8b:7d:dc:b0:21:e2:a7:95:f5:67:43:46:d3:
96:ae:22:a7:86:65:e7:7e:e5:2e:a4:c8:9a:f9:22:
84:e1:c6:7f:8d:18:42:c7:c2:4c:e1:cd:ac:27:bd:
4e:24:52:9e:1a:54:47:cc:c6:35:13:60:f3:c2:c8:
31:c9:0c:98:78:b8:85:e1:07:10:1c:c7:01:31:0a:
e3:0e:53:aa:34:e3:f9:2d:f6:fe:5b:9e:a3:b8:49:
68:5a:6e:81:2d:5d:08:49:42:6e:11:c0:bd:50:ec:
07:4b:7f:ba:ff:22:74:32:94:f9:c5:9d:26:83:bb:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:36:C9:09:25:19:81:D7:9C:30:4D:BA:CF:08:89:E0:AB:F9:16
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/myQ2yQklGYHXnDBNus8IieCr-RY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:44:df:d2:60:91:fa:10:27:16:e5:96:91:b6:cf:a7:3e:b6:
e4:0f:d5:f2:e2:b5:e8:cd:cb:68:7d:2b:2f:69:df:8e:82:4a:
3e:b7:30:eb:95:ad:2b:85:0e:71:93:7c:22:81:b3:e2:fb:20:
9d:64:fc:8a:1e:68:fe:d5:7c:83:7f:73:0b:ac:cc:23:32:fa:
f5:e4:da:1b:aa:bf:eb:68:dc:ee:79:7c:0e:ca:40:98:f4:1e:
5f:9a:b9:26:91:8f:3b:ef:65:3f:02:9a:d9:62:7a:8b:2f:55:
0a:4e:d4:07:8f:36:ac:41:49:dc:e5:f3:9c:a0:97:3f:ed:d2:
99:b5:13:73:d1:99:36:97:e0:27:09:44:27:7c:9c:28:ca:c3:
5b:70:a1:52:f1:70:a0:b6:0a:16:3e:16:1d:98:18:e9:a8:12:
69:6e:19:5c:30:59:86:63:65:96:c2:ac:b7:77:0c:61:69:05:
c5:0a:c4:5b:5a:26:fe:b7:8a:cb:e4:8f:29:c9:d1:0d:a8:15:
df:bf:0c:b7:ab:6b:58:9e:2c:35:68:2e:c4:79:08:60:08:bb:
2e:a6:57:40:af:82:d4:45:a9:ff:9a:72:57:52:5d:67:bb:96:
9c:da:82:48:91:8b:a6:0f:90:b6:eb:9d:71:44:7a:29:bc:5d:
ed:13:02:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org