Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wkgikdCyWGFAUGUtygmGrahvI_M.roa
File: wkgikdCyWGFAUGUtygmGrahvI_M.roa (raw, json)
Hash identifier: O7ByhhtUop45esj1ijg+3XoGT4Nc6O02EBeuT+b7EPA=
Subject key identifier: C2:48:22:91:D0:B2:58:61:40:50:65:2D:CA:09:86:AD:A8:6F:23:F3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0EDD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wkgikdCyWGFAUGUtygmGrahvI_M.roa
Signing time: Sun 07 Feb 2021 12:30:38 +0000
ROA not before: Sun 07 Feb 2021 12:30:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3805 (0xedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:30:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C2482291D0B258614050652DCA0986ADA86F23F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:96:e7:3a:a0:f0:fc:56:81:1b:89:52:46:
9e:57:71:9f:60:d6:d8:fe:f3:52:74:28:e8:b2:0b:
07:6e:e1:f4:6f:d1:eb:c0:69:7c:1d:5b:a1:f0:fd:
31:e8:8a:34:3b:82:73:d7:bb:f8:c2:e4:fc:53:0c:
39:80:74:b3:19:f0:a5:18:96:d3:74:36:6d:af:b8:
a4:31:da:90:3e:72:83:2b:2d:fe:a5:b3:11:3b:e5:
44:d0:61:97:77:39:f8:85:65:ca:f7:c9:a0:c5:64:
ec:99:ef:47:1e:e4:6e:94:e8:57:d0:6d:8c:29:15:
48:3f:d6:25:01:2c:24:54:cb:34:1b:e2:a1:2c:61:
87:8a:0f:a3:39:96:67:64:11:65:48:8a:ff:cb:03:
e6:6a:3a:c7:ed:1f:37:1f:0f:f6:38:2a:cf:73:5e:
6f:d7:3a:2e:6f:b3:19:e9:09:85:84:c5:a1:44:be:
a1:09:fd:84:db:96:8b:16:f0:dc:d2:e3:1a:30:a8:
f8:1a:58:c9:16:71:23:d7:a3:ad:f7:69:14:cd:ea:
ef:37:ee:9e:4b:7e:e6:fe:d0:cd:64:0f:ad:e1:6b:
4e:44:b4:8c:44:12:ec:9b:fc:18:f2:95:7e:ff:90:
f4:19:da:13:6a:7a:55:53:63:ae:e3:42:f4:08:75:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:22:91:D0:B2:58:61:40:50:65:2D:CA:09:86:AD:A8:6F:23:F3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wkgikdCyWGFAUGUtygmGrahvI_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.224.0/20
Signature Algorithm: sha256WithRSAEncryption
16:79:b3:5a:0b:ad:2d:df:d8:2a:df:96:12:4e:11:7d:00:1a:
39:fc:93:d4:1b:aa:aa:76:d2:71:67:cb:2e:7a:66:e3:59:1d:
4d:6e:f1:fc:56:41:d1:b8:46:14:2c:82:49:2f:31:61:ac:26:
91:01:f4:ed:4d:88:42:9c:79:35:30:4e:d1:45:b6:7f:98:6f:
40:f1:44:7d:46:11:02:7b:e7:0e:15:b1:45:b5:96:ab:1a:0c:
f4:ae:eb:af:16:64:86:3f:18:76:4f:eb:5e:28:b2:7d:99:ca:
4e:1c:41:9b:69:eb:2c:0f:82:7e:ab:10:ef:ba:0d:62:25:31:
f3:23:65:63:5a:5a:33:73:d4:4d:65:06:cc:d3:86:8c:05:aa:
bf:63:8d:d9:c0:d7:88:95:c9:89:56:f4:38:70:97:39:6b:34:
b2:bb:4c:29:fe:db:a8:97:f1:6a:cc:0f:55:9c:6d:14:cf:9c:
a0:e6:32:35:7e:f2:d4:b2:1d:9e:8b:31:7a:8d:f4:dc:3f:b7:
84:88:58:32:44:d5:88:04:a4:59:8d:56:14:7e:12:87:01:d5:
0f:3d:e0:db:4c:e8:e9:1a:1e:ee:95:92:0a:11:5b:c4:3c:9f:
41:5d:7d:6f:00:70:ba:7d:58:59:4b:a9:10:f7:0f:98:07:14:
e3:03:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org