Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rcnFiAsg7pTTmT4bDGo498-T5UA.roa
File: rcnFiAsg7pTTmT4bDGo498-T5UA.roa (raw, json)
Hash identifier: ExpwcwCi9OohPYEiKJ2jur5MHbvzmeCBEJBU5f0fISw=
Subject key identifier: AD:C9:C5:88:0B:20:EE:94:D3:99:3E:1B:0C:6A:38:F7:CF:93:E5:40
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F3D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rcnFiAsg7pTTmT4bDGo498-T5UA.roa
Signing time: Sun 07 Feb 2021 12:33:23 +0000
ROA not before: Sun 07 Feb 2021 12:33:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 119.77.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3901 (0xf3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ADC9C5880B20EE94D3993E1B0C6A38F7CF93E540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:43:ea:f6:09:44:5e:0e:bd:63:f5:d4:05:
ba:5f:34:fe:2d:73:c6:3b:ed:5f:d0:18:35:c8:66:
93:ec:e1:13:fe:90:c3:fc:7b:a4:c7:8f:4c:d5:e6:
3b:51:fb:21:e1:4c:c9:1e:20:21:2b:99:ac:4b:98:
48:e3:00:14:e6:8e:57:69:23:e6:fb:53:78:94:51:
6e:5c:89:3a:21:c7:5e:6d:5f:93:7d:af:0a:37:28:
18:25:78:d4:81:19:af:16:99:c3:39:29:cc:0d:ca:
4e:cc:1a:1f:a4:97:d8:e2:70:6e:50:22:8d:51:0f:
a8:66:9e:ee:61:45:8f:04:2e:87:8e:07:38:32:05:
91:07:e7:4a:81:29:00:39:65:6b:d5:12:48:6a:47:
59:ed:a8:47:c2:76:d5:6d:0e:8f:3c:91:ce:43:8f:
0d:11:f6:d8:be:7c:08:2f:01:26:ac:46:5d:c0:ad:
45:17:8b:7f:d9:31:76:27:82:70:53:cd:56:12:ad:
f0:be:29:5d:49:f3:51:a2:2e:39:ab:78:ea:4e:45:
31:56:a4:1b:e0:a7:1d:84:55:a0:82:f8:9f:d4:bb:
8b:f0:b4:25:6c:67:79:ae:53:5b:eb:f9:f4:48:2e:
42:ba:fa:96:5e:be:d4:78:9c:a5:bb:d3:63:f6:7a:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C9:C5:88:0B:20:EE:94:D3:99:3E:1B:0C:6A:38:F7:CF:93:E5:40
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rcnFiAsg7pTTmT4bDGo498-T5UA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.136.0/22
Signature Algorithm: sha256WithRSAEncryption
35:2e:22:bf:44:9f:41:38:62:b9:0b:91:d3:83:82:d3:5e:4c:
4a:e5:36:46:bc:7e:63:ec:3c:4b:93:a6:00:87:c6:19:d0:d4:
26:93:5b:5c:ac:0e:c5:57:44:b0:b2:38:fb:b0:5d:aa:fa:88:
50:eb:0e:c7:17:b6:da:03:f1:b1:f9:5c:f0:23:2a:4d:8b:bc:
1e:96:15:d2:c5:59:32:88:80:46:5f:68:52:29:6f:06:27:2c:
2b:14:7f:a4:cf:2d:46:d0:a5:b3:52:00:f5:fb:7b:40:2f:a5:
37:ee:3d:ed:52:82:4d:3c:6b:74:f9:cc:d2:b2:81:7a:70:b8:
da:45:4c:24:4b:11:90:58:2b:5a:a2:ed:ee:41:91:a3:62:1d:
ae:c2:41:02:ee:67:61:41:65:52:b2:9a:c8:a1:41:11:92:49:
be:4c:1d:40:83:ac:2e:c5:64:89:87:ea:de:f3:6a:1d:bc:03:
f1:28:18:d5:05:b7:f9:31:54:58:e3:23:7d:d1:1f:c7:c7:26:
e9:f6:3a:da:df:ee:14:94:08:8a:c5:70:f9:e4:b3:53:74:d5:
dc:46:13:96:04:59:c0:3b:13:20:2c:0a:19:0b:ff:af:3a:42:
d5:66:b8:67:b3:06:56:95:50:5f:e5:84:88:1d:b1:44:06:f0:
eb:b5:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org