Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CpMkP6lkqyEE6FTAf9d9kkR1uc.roa
File: 6CpMkP6lkqyEE6FTAf9d9kkR1uc.roa (raw, json)
Hash identifier: rCZPrvxXoOZDTD7FeRWqtf/JmOuzm9tIwxjMznS/RxI=
Subject key identifier: E8:2A:4C:90:FE:A5:92:AC:84:13:A1:53:01:FF:5D:F6:49:11:D6:E7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1221
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CpMkP6lkqyEE6FTAf9d9kkR1uc.roa
Signing time: Wed 29 Sep 2021 02:54:13 +0000
ROA not before: Wed 29 Sep 2021 02:54:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4641 (0x1221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E82A4C90FEA592AC8413A15301FF5DF64911D6E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:72:ba:61:65:03:55:e6:8a:20:a5:e4:85:
bb:00:17:17:05:12:74:79:78:22:78:3e:1a:00:0a:
e9:e3:b8:4d:a9:b4:d3:09:eb:81:6b:19:58:1d:0e:
4c:7d:05:0e:52:3c:69:df:e4:ee:08:5c:9f:4b:dc:
0f:c7:71:0d:f2:4f:fa:53:d5:8c:03:b8:28:c3:90:
3b:4f:9a:c7:c7:8e:56:d7:41:c4:3a:a6:a8:c3:87:
81:1b:71:c9:51:f5:ed:85:11:f7:86:6f:a2:3f:b5:
bc:a0:22:7f:43:0f:56:1b:fe:63:61:60:cc:aa:7d:
57:53:d6:6d:01:1f:54:50:ed:c6:30:a4:20:c2:6b:
b1:50:94:31:6e:85:0e:57:1a:d0:b6:bd:0c:e1:3e:
08:b4:cf:05:83:07:09:f2:67:e6:10:b2:bc:6c:31:
15:7a:94:ec:57:5e:75:e0:38:7c:97:d1:a9:4b:6d:
e2:3f:ea:43:23:a2:08:3a:1c:af:c8:3c:45:9c:cc:
68:76:38:b2:e7:58:1c:a2:d4:04:20:77:d4:78:e1:
1c:f8:f8:7e:ae:d8:bd:6e:c3:59:c4:3d:34:cb:ec:
57:da:b4:79:b5:73:f7:40:e5:39:50:64:1c:0e:58:
2b:a9:d2:07:4c:0c:49:02:d4:09:4d:89:12:a3:d4:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2A:4C:90:FE:A5:92:AC:84:13:A1:53:01:FF:5D:F6:49:11:D6:E7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CpMkP6lkqyEE6FTAf9d9kkR1uc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.242.0/23
Signature Algorithm: sha256WithRSAEncryption
13:eb:62:3b:5a:5b:f1:83:72:ae:a2:dd:8b:15:4d:e6:8f:5f:
15:0e:77:26:4c:9a:fd:3a:50:e9:92:c6:9e:70:ab:cf:23:1c:
c7:69:33:af:30:56:20:fc:1e:ef:04:0f:2f:00:b6:9e:aa:c5:
3b:e9:bc:6c:e6:12:fa:3c:0e:a4:01:23:a9:ac:10:c7:1a:d5:
8b:51:f5:f1:c2:ac:1b:fc:bd:f1:d9:29:df:8f:45:ff:a0:cb:
b5:8a:37:bd:b2:32:95:4e:5e:98:41:70:37:44:41:ea:49:e1:
9b:98:03:2d:8a:04:e8:c1:02:32:d1:b8:59:5a:83:96:3d:8c:
f0:f3:d1:4f:15:70:77:78:53:1e:3a:55:32:36:94:31:01:17:
2c:5a:64:11:10:46:e1:bd:be:85:53:64:67:35:4d:80:a8:bd:
b6:bd:96:32:82:38:f1:69:1f:ea:d7:09:62:60:59:56:74:95:
46:55:97:cb:62:db:b9:9d:50:97:97:a3:81:b1:bf:67:3f:6c:
52:10:fa:5c:56:a3:48:42:a1:66:b2:e9:af:89:48:e7:2a:43:
07:56:06:41:9c:a4:9e:e3:42:07:34:6f:ec:df:63:1a:84:49:
b1:22:fa:1b:c0:7c:18:ce:e9:4a:df:de:2f:42:95:c3:46:3a:
40:2c:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org