Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7P_6hR2g06pY7Wl8Qp7xrKky4Fo.roa
File: 7P_6hR2g06pY7Wl8Qp7xrKky4Fo.roa (raw, json)
Hash identifier: 0ezBZQjyDW3YgIEXUVucP8s7FlRSZ1r+BlxzDLbIJJk=
Subject key identifier: EC:FF:FA:85:1D:A0:D3:AA:58:ED:69:7C:42:9E:F1:AC:A9:32:E0:5A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BB7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7P_6hR2g06pY7Wl8Qp7xrKky4Fo.roa
Signing time: Tue 29 Sep 2020 10:08:45 +0000
ROA not before: Tue 29 Sep 2020 10:08:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ECFFFA851DA0D3AA58ED697C429EF1ACA932E05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:ac:42:85:2d:bd:3a:29:76:29:96:fa:84:
a5:76:0f:a2:9f:8f:fe:c8:33:7f:8a:18:79:f3:e2:
5e:6f:30:a7:f3:fb:fd:e4:23:d8:2a:6b:30:e2:2d:
30:21:50:47:76:60:cb:9a:56:77:69:e3:93:77:51:
08:b2:1e:69:99:77:6d:e7:b0:8e:f1:80:52:f8:02:
8b:f5:d6:71:11:da:d5:db:7e:35:1d:f8:fe:24:73:
5e:23:58:b5:89:d9:68:91:74:73:0c:d0:ea:c9:8e:
6f:34:54:36:6f:b8:dc:42:d1:8e:2d:a7:58:81:4b:
03:bb:ac:a0:9c:9b:03:1b:40:16:30:9e:a3:02:83:
cc:32:33:2a:18:e6:83:c4:e6:69:94:02:e3:7d:69:
eb:92:41:ef:f8:cd:13:8e:12:00:92:e6:0d:59:5c:
50:bb:e2:9f:dc:9d:d7:ef:45:f1:9e:56:1f:ee:23:
58:a5:d9:45:d1:b3:5c:a7:22:97:bf:93:c7:01:e2:
e3:f3:36:da:73:83:1a:06:f3:81:40:40:5b:ac:44:
ab:10:54:d0:e7:9e:bb:8b:59:8f:8c:22:b1:de:a3:
5c:b1:5e:b7:d7:e0:9c:81:2b:ff:81:0e:2f:e8:40:
bc:07:9c:30:db:e6:2d:bb:57:a4:4a:32:df:c6:ea:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:FA:85:1D:A0:D3:AA:58:ED:69:7C:42:9E:F1:AC:A9:32:E0:5A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7P_6hR2g06pY7Wl8Qp7xrKky4Fo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.160.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:52:b8:0e:3c:db:4d:70:af:5d:c6:b7:bf:a0:6b:5d:fe:96:
5e:e6:5e:cd:97:c8:c3:06:1e:1f:b0:91:96:30:37:d8:30:6f:
c3:bf:da:f5:ce:83:52:5b:51:d4:55:54:66:dd:7a:6a:0c:67:
2b:dc:86:2f:87:c3:d3:fa:34:00:58:08:cc:99:10:a1:3a:33:
23:a6:76:f0:9e:c5:9c:45:f5:c2:0f:4a:0f:b7:34:b3:74:52:
ba:44:6c:b0:d1:e9:2d:83:d2:27:b0:2b:dc:07:9b:60:8a:83:
9b:f8:f4:ff:e9:7a:c7:82:3d:a7:34:ee:69:be:1f:65:48:0c:
70:ca:4e:06:1f:7d:76:7d:d6:d7:88:06:d7:79:db:f5:94:53:
2b:87:09:50:56:cb:9c:4b:c9:41:e9:70:82:2c:bc:12:16:0e:
b6:6c:17:b8:92:0d:ef:79:80:5e:42:5b:4c:c6:96:91:43:ce:
d8:d2:6a:c9:b6:93:36:21:89:24:db:c8:e6:6f:f0:f5:29:b0:
1e:69:ab:87:42:10:c9:1a:eb:d0:36:e8:22:8b:85:51:4f:10:
b3:4f:57:a9:60:95:3e:9a:dc:3a:83:4f:83:d8:8e:72:44:4e:
31:b0:16:c2:33:15:a4:8b:91:1f:68:d4:d9:58:c3:79:73:a8:
52:b3:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org