Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLJSE_vOY7K6hGJqRVZvAFYIzsY.roa
File: nLJSE_vOY7K6hGJqRVZvAFYIzsY.roa (raw, json)
Hash identifier: HOLLRl173YMJPJWHAKZp62h4a4pvmcJIYN56s4QwpQ4=
Subject key identifier: 9C:B2:52:13:FB:CE:63:B2:BA:84:62:6A:45:56:6F:00:56:08:CE:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0EDF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLJSE_vOY7K6hGJqRVZvAFYIzsY.roa
Signing time: Sun 07 Feb 2021 12:30:39 +0000
ROA not before: Sun 07 Feb 2021 12:30:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3807 (0xedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:30:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9CB25213FBCE63B2BA84626A45566F005608CEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:88:b0:4e:17:fa:21:03:9d:9d:c9:e6:b6:
4d:7e:97:1c:14:26:a3:2b:18:dd:a8:63:76:7c:07:
d4:7f:a2:52:d4:9c:17:78:dc:64:28:40:e8:02:5b:
3b:12:f1:11:bc:42:05:cd:80:37:25:c8:b2:e3:63:
54:aa:22:6b:55:3a:6c:46:0f:14:53:27:3e:cb:d7:
c4:4e:c5:6c:7c:a4:ff:21:e9:bb:82:57:98:31:43:
3e:e6:87:1f:37:f9:e7:62:11:f1:ff:9d:2e:65:2b:
66:80:d2:99:84:fb:7e:dc:f0:57:63:70:3e:35:74:
41:6a:be:03:c7:7c:9a:7f:7e:6f:3a:d3:c6:5e:70:
00:5c:4d:46:99:03:11:17:73:e2:ed:86:45:50:7a:
17:88:23:0d:b7:40:09:52:1b:69:83:88:48:55:f1:
80:98:49:9e:6f:87:36:d4:7c:cc:8c:e9:75:75:b7:
42:62:0d:47:17:50:d7:a0:a4:ed:5a:41:c5:a3:4f:
ef:66:ce:9d:18:43:30:67:28:1d:7e:88:95:50:4c:
fd:f5:55:5d:98:95:70:63:e8:b1:79:2f:11:84:7a:
ea:4d:dc:68:f9:36:c9:e1:50:e4:89:0f:4d:83:2d:
38:0f:3d:e6:2f:f4:40:1c:2f:6e:40:8f:90:8f:59:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B2:52:13:FB:CE:63:B2:BA:84:62:6A:45:56:6F:00:56:08:CE:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLJSE_vOY7K6hGJqRVZvAFYIzsY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.241.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1c:01:60:4b:88:34:4f:59:84:11:07:ce:94:0b:4c:90:ad:
a0:56:43:10:b0:0f:5a:3b:89:ee:f9:31:c0:be:d5:e3:07:1a:
63:c8:ed:64:1f:77:92:d1:7d:dc:f3:89:5d:5f:26:ba:15:e7:
8a:82:36:15:de:64:3f:40:47:5d:24:c7:35:75:a2:ee:4b:02:
92:63:dc:45:3a:2a:07:0b:22:0c:65:e6:51:82:8a:7b:a2:0b:
00:bc:f7:87:71:02:2a:0f:1d:b3:2a:4b:0f:48:7a:70:a7:b9:
ee:13:9e:3e:3a:d5:80:f6:c5:21:20:43:07:6c:9b:4f:09:d3:
5c:9a:78:ec:e7:a6:e2:51:b6:99:10:45:57:f4:95:53:61:9a:
2e:52:8f:61:d7:6e:fd:0a:b9:d2:68:29:ce:15:3d:63:60:04:
29:ef:40:ea:3d:24:90:96:70:64:5d:45:7f:d6:13:c4:56:71:
5b:a6:a6:35:88:d6:81:97:3d:42:78:74:6a:70:34:88:f5:83:
20:62:3e:51:50:1e:b7:65:c4:c2:56:3d:ec:08:96:81:f0:00:
69:f3:d7:b3:6f:01:8e:a2:36:e8:c4:7c:00:1f:7f:15:ce:85:
c3:32:81:3b:70:09:e9:fa:4a:48:c0:00:5b:63:bd:0e:90:e6:
36:20:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org