Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vK85_oA3Vnpo8SkvEhQTGV3LdUY.roa
File: vK85_oA3Vnpo8SkvEhQTGV3LdUY.roa (raw, json)
Hash identifier: sxSbTIj6/GPfJVcpIlvoTSkA9uKxHxm0xMLXsDa0Bwc=
Subject key identifier: BC:AF:39:FE:80:37:56:7A:68:F1:29:2F:12:14:13:19:5D:CB:75:46
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B89
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vK85_oA3Vnpo8SkvEhQTGV3LdUY.roa
Signing time: Tue 29 Sep 2020 10:08:33 +0000
ROA not before: Tue 29 Sep 2020 10:08:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 119.77.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2953 (0xb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BCAF39FE8037567A68F1292F121413195DCB7546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:70:35:67:dc:a7:58:09:4a:c7:70:c3:62:
b7:34:b9:e0:b7:3e:1d:62:40:91:9b:ad:15:2d:e3:
66:24:b9:6a:9a:43:b0:4a:7e:07:0e:62:78:9b:a8:
32:a9:ff:cb:10:57:94:1f:8b:83:de:1c:7e:85:1a:
79:b6:04:21:39:b4:a5:5e:54:31:4b:c2:3c:f7:eb:
08:b0:b4:e2:68:ce:e5:50:f2:b6:b4:9d:46:32:85:
ce:71:a8:fe:14:c2:2a:73:18:ea:6b:86:ce:91:2e:
b8:8b:d2:ec:c4:c5:b6:5a:fe:bd:7d:95:c9:ab:b5:
ba:8b:06:0d:dd:ca:b1:45:7a:24:5e:d4:d7:e1:a9:
c3:3e:d1:40:c6:90:d7:e6:fb:1d:3d:bd:e6:9b:79:
fe:42:ad:8d:8a:85:5e:68:9c:65:38:44:aa:44:44:
2d:b5:81:5d:8b:4e:79:24:da:44:85:9d:47:06:61:
95:3c:78:54:b9:db:83:f0:32:a3:65:47:0e:37:ae:
94:4d:32:db:38:b7:7c:be:9b:f7:4e:c2:38:6b:eb:
a7:a1:38:1b:d0:00:2f:44:84:8a:5a:43:94:78:9d:
74:86:c2:1f:a1:0e:93:29:59:f7:3e:21:04:a1:58:
b3:31:be:6f:35:e3:54:59:3e:5d:f9:d8:99:57:29:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:39:FE:80:37:56:7A:68:F1:29:2F:12:14:13:19:5D:CB:75:46
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vK85_oA3Vnpo8SkvEhQTGV3LdUY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.132.0/22
Signature Algorithm: sha256WithRSAEncryption
56:5d:c3:51:cc:61:d6:ea:55:41:ac:fd:de:31:45:42:4b:78:
8d:47:21:ca:96:0c:ae:94:7d:b4:17:7e:40:f5:0f:69:ba:9d:
36:de:61:97:c2:5e:b6:f4:26:05:e1:78:67:0e:b4:30:e8:13:
ca:36:f3:d5:d6:d5:9a:88:f8:86:b7:c9:2c:39:38:7c:54:3d:
e4:8e:6e:d3:ef:65:2c:67:25:2d:b5:39:ae:c7:3a:3b:fd:f0:
52:4e:d4:99:cb:64:1a:93:c3:c8:45:bf:7c:91:ae:0a:c0:ca:
06:25:15:55:8e:aa:d7:d4:d4:93:47:d0:4f:27:12:b7:20:20:
4f:1e:00:ea:62:49:48:19:ba:b6:b1:0e:6e:15:33:bb:d6:b5:
69:92:ee:c9:e9:5f:73:5a:8e:c9:af:c1:79:cd:14:6b:8f:c5:
ef:14:4d:35:44:bb:eb:07:8e:04:6a:57:ea:f0:55:aa:e2:10:
d2:28:b4:ef:59:71:05:2a:53:68:d8:b0:27:6c:e2:7e:59:60:
a9:9a:c6:a5:51:a7:c0:07:22:2e:a4:8e:37:fb:90:e6:c0:01:
06:86:38:74:74:73:2e:e2:19:a7:b9:62:ae:04:71:f9:af:d9:
4d:ec:4a:33:57:0b:2b:f2:da:d2:bd:12:02:28:9a:66:b0:59:
90:8a:7b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org