Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2wtMFaxrTi4gwt1A5FovFc7iuk4.roa
File: 2wtMFaxrTi4gwt1A5FovFc7iuk4.roa (raw, json)
Hash identifier: 4m58bCnb1qVPMf6Z3rWKslULWJWBy8rxIbQrSbE5tmY=
Subject key identifier: DB:0B:4C:15:AC:6B:4E:2E:20:C2:DD:40:E4:5A:2F:15:CE:E2:BA:4E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1242
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2wtMFaxrTi4gwt1A5FovFc7iuk4.roa
Signing time: Wed 29 Sep 2021 02:54:22 +0000
ROA not before: Wed 29 Sep 2021 02:54:22 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4674 (0x1242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:22 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DB0B4C15AC6B4E2E20C2DD40E45A2F15CEE2BA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:94:b5:c2:52:30:45:52:02:26:f7:0e:87:
f4:5a:e3:82:b3:4d:c8:29:23:9e:7b:75:c0:ed:d2:
a8:11:0a:49:6a:50:5a:86:55:c2:a8:a0:cb:35:92:
c1:dc:ad:41:bc:d2:ba:53:37:12:5a:fa:9d:84:9b:
39:7c:7f:1c:f1:86:7b:7e:32:c5:78:5b:34:a4:21:
57:46:b3:d9:ca:9a:fb:d4:09:01:0d:43:1b:64:ca:
49:f5:b2:e3:65:d3:f3:24:e4:97:05:de:46:2f:ff:
76:b2:22:40:30:df:50:96:dd:16:1f:d6:39:d9:92:
61:8e:cd:4e:bd:cf:95:18:62:34:2a:08:db:5e:f2:
5d:f2:b4:48:12:41:f8:5d:75:4c:68:6c:a7:b4:d2:
e4:d4:f9:5c:16:47:f6:64:01:d1:a0:90:e5:c2:b6:
a4:ce:1b:a5:98:b7:a3:f4:45:52:90:84:aa:ea:59:
99:4e:eb:e5:b2:fd:7a:e8:d4:39:b1:4f:2b:f8:6d:
ab:74:4b:c8:af:aa:11:b1:66:8c:d9:dd:75:16:d4:
a6:4c:90:95:3d:87:73:da:8c:34:be:f4:c6:ef:10:
0d:08:9a:ab:03:f5:7a:9a:e3:37:36:4c:88:74:4b:
26:c1:e7:d7:cc:ea:fa:2e:38:03:64:fe:dc:17:e9:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0B:4C:15:AC:6B:4E:2E:20:C2:DD:40:E4:5A:2F:15:CE:E2:BA:4E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2wtMFaxrTi4gwt1A5FovFc7iuk4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.194.0/23
Signature Algorithm: sha256WithRSAEncryption
82:a3:fa:d0:8e:9f:42:9a:be:7c:89:ea:9b:3e:99:04:9b:e8:
f3:49:af:79:5c:72:7a:07:79:4b:b6:88:b1:18:81:49:48:04:
da:5a:92:65:ff:cd:fd:4b:f2:fe:63:57:91:61:40:97:50:1e:
9f:21:c8:12:8f:aa:80:24:d4:61:1c:6b:75:74:c3:b5:f6:1f:
2c:51:ab:da:37:36:39:a5:b0:96:80:75:a2:43:73:5a:6f:f7:
1f:31:76:96:6e:df:99:23:83:41:3f:74:29:0e:1b:0e:36:e9:
48:42:a5:d8:27:28:1a:39:02:57:b3:01:00:19:a8:72:46:87:
b8:b4:da:88:33:8d:57:0c:a8:d8:bf:fc:fd:ad:44:25:a9:8a:
b0:da:b2:5f:9f:58:a0:da:87:e1:f1:13:05:61:98:54:26:81:
a7:c8:40:0b:c3:7d:15:b5:b1:4f:69:03:1e:9e:a4:a6:aa:46:
2c:80:03:a8:f4:f5:9a:6d:ee:b4:cb:f5:df:a4:e1:65:ab:22:
e5:d3:6d:9c:ab:bb:31:cb:70:83:ee:39:41:4b:fc:27:13:ab:
c4:f0:fb:83:b2:ef:2f:07:ef:d0:36:a3:61:dc:48:aa:97:7b:
d8:8b:a1:63:22:56:af:d5:98:6c:55:1a:4b:89:d8:f5:da:39:
dd:32:23:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org