Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yGey0tASfQgDXg_n4sgSVvB0z5g.roa
File: yGey0tASfQgDXg_n4sgSVvB0z5g.roa (raw, json)
Hash identifier: YStmL1BMZLXqs5VyOnRg7SDJrPS11FY7IDXw6dX73sU=
Subject key identifier: C8:67:B2:D2:D0:12:7D:08:03:5E:0F:E7:E2:C8:12:56:F0:74:CF:98
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18F3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yGey0tASfQgDXg_n4sgSVvB0z5g.roa
Signing time: Sat 22 Oct 2022 06:05:55 +0000
ROA not before: Sat 22 Oct 2022 06:05:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 119.77.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6387 (0x18f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C867B2D2D0127D08035E0FE7E2C81256F074CF98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:a3:3c:f0:b8:e8:9f:59:b8:5e:ae:bf:86:
09:2f:1f:9f:fb:00:e3:d7:b3:46:37:24:d8:1f:58:
51:79:87:18:25:0c:ce:4f:88:2d:f8:ec:da:31:8e:
3a:35:a6:42:80:f5:3f:b3:8e:be:27:1d:b8:2f:50:
c8:2a:3a:03:18:24:dd:46:d2:76:9f:37:6f:88:cb:
99:9b:bd:44:bd:df:09:ce:e1:8c:21:cb:2a:6d:6e:
68:6d:64:02:74:98:1d:83:20:94:33:03:55:75:c7:
a3:a2:d3:13:9a:38:2c:3d:21:95:ea:15:ae:6c:14:
0c:65:d1:6c:a1:c2:ba:ab:2e:d4:0d:68:81:86:f1:
a3:59:08:5a:96:28:26:65:44:f3:7b:50:f9:31:b9:
17:1f:ec:3f:27:d8:69:7e:d9:58:f0:3c:fc:df:63:
f7:fa:0b:00:be:5d:a6:c3:77:8a:e1:41:68:d4:7c:
9c:92:df:a9:2e:72:07:b2:55:16:f7:cf:1c:1a:a4:
13:7f:43:71:2c:14:ec:99:88:2a:e0:69:dd:c4:3e:
93:3b:f7:5a:bc:c9:ca:d2:6e:94:bb:1b:88:fb:df:
db:b5:22:ef:63:30:31:1e:aa:70:1a:2a:04:a6:b5:
57:63:91:63:d8:e4:5c:8c:aa:74:85:04:dc:f7:d1:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:67:B2:D2:D0:12:7D:08:03:5E:0F:E7:E2:C8:12:56:F0:74:CF:98
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yGey0tASfQgDXg_n4sgSVvB0z5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.192.0/19
Signature Algorithm: sha256WithRSAEncryption
88:c4:bd:59:23:80:5a:b8:12:ed:98:ce:a4:87:5e:93:b5:ce:
98:47:bd:12:23:42:f2:ce:f6:09:b5:54:3d:77:80:68:f6:ab:
c4:91:79:c8:76:09:a6:47:e6:94:37:85:9f:03:39:32:c9:bb:
84:6e:f9:54:8d:d1:df:de:57:52:fc:b0:e7:fb:03:72:c4:22:
f3:41:29:1e:7a:1a:14:c0:31:6b:bf:5e:ba:65:c7:ab:06:6b:
5f:47:19:cc:cf:56:8c:8b:cc:ff:5f:65:ec:cc:7f:e2:fd:36:
f2:9f:cb:6f:18:ff:78:5a:a6:9a:e1:1f:30:c2:dd:cc:d4:17:
65:4d:35:3c:f5:6d:af:af:70:71:3f:30:ca:0d:42:9d:cb:9e:
f3:da:8a:dd:53:8f:53:dd:78:50:d5:66:b3:66:1e:19:1a:d3:
5f:cc:e0:ea:d1:87:6e:6a:60:fe:1c:03:63:84:36:be:a3:26:
9b:77:8b:1f:86:37:be:9b:95:b2:14:88:e5:0d:18:13:71:32:
95:80:de:98:17:76:88:62:b1:f0:64:cd:8f:75:cb:23:8e:b9:
59:a9:db:38:41:89:f1:40:f2:da:54:3c:b0:e9:80:40:c0:13:
cd:54:d7:a2:01:0b:1e:97:e7:d9:03:50:ba:cb:96:9a:1e:4e:
da:c9:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org