Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hS1trgJWI3xthp43OQJ9hpV39o.roa
File: 7hS1trgJWI3xthp43OQJ9hpV39o.roa (raw, json)
Hash identifier: i/CIfqzqIiTgM3LmOqbeZ/N1HzyLU4KGSUMvXkTb9WU=
Subject key identifier: EE:14:B5:B6:B8:09:58:8D:F1:B6:1A:78:DC:E4:09:F6:1A:55:DF:DA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F43
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hS1trgJWI3xthp43OQJ9hpV39o.roa
Signing time: Sun 07 Feb 2021 12:33:28 +0000
ROA not before: Sun 07 Feb 2021 12:33:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3907 (0xf43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EE14B5B6B809588DF1B61A78DCE409F61A55DFDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:ce:60:49:a8:d0:e0:52:61:68:f6:3a:2b:
55:5f:c9:62:10:48:c3:26:73:ff:2d:65:b5:93:fc:
d0:e4:87:be:9e:57:b9:a6:bc:2e:26:d4:02:99:8c:
88:9d:d4:f6:d3:8a:93:f8:85:e3:66:9b:cd:74:36:
0c:32:57:6a:ed:86:04:d4:0a:56:8f:53:89:ef:31:
1f:97:47:8c:33:3c:4f:7b:9e:a9:8b:5c:45:84:aa:
fc:2b:c6:27:68:c2:fd:0f:9f:ec:16:18:a0:15:f6:
a9:5d:27:41:fb:f6:80:5a:dc:e7:4c:32:6e:e2:54:
d8:f0:81:13:56:f4:d0:1e:3a:ad:50:24:56:a6:df:
58:b1:71:3a:8a:7d:05:bf:e1:ab:96:fc:4b:58:a3:
04:64:ae:c0:b4:44:01:5b:69:e2:e0:74:36:dd:e0:
65:66:ac:80:da:6d:cc:54:98:40:c5:51:99:ce:6c:
59:d5:5c:cc:31:85:76:05:e7:ff:8e:3d:43:13:95:
9d:35:36:48:e2:45:ca:77:91:af:d1:c0:5e:53:8b:
f5:1b:aa:6a:9a:90:a4:35:1b:2b:75:da:a2:99:df:
47:40:c7:28:f4:4f:36:d5:a8:c6:be:fc:42:56:91:
87:5d:4c:74:76:2b:b0:80:b3:b6:85:d9:65:42:f6:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:B5:B6:B8:09:58:8D:F1:B6:1A:78:DC:E4:09:F6:1A:55:DF:DA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hS1trgJWI3xthp43OQJ9hpV39o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:d0:76:b1:8e:b4:11:3f:83:dc:0d:62:67:e0:3a:78:f8:3b:
2d:fc:ae:d6:63:f9:a8:82:ad:bc:da:ff:20:2b:bf:c7:26:3a:
a2:df:7d:7a:c9:4b:85:22:77:49:38:df:74:24:9c:05:5b:3f:
83:fd:c5:6c:50:de:d1:c1:7e:ce:a6:62:31:e2:77:cb:5c:2e:
60:44:f2:fb:d6:5b:ae:87:57:14:9e:af:95:31:a7:8b:af:c1:
7a:c1:8a:c7:37:9f:90:04:ff:14:a8:70:31:62:ea:97:58:09:
a4:d0:88:ae:cd:69:19:ff:f4:c6:67:15:16:7a:16:a5:b4:f7:
0b:85:50:73:48:53:fc:68:75:31:a8:96:eb:11:47:53:f5:d0:
48:e3:94:52:6f:f7:b4:6c:f2:84:72:f6:3f:c2:57:43:7e:cc:
98:00:86:e2:5c:12:ad:0a:22:c0:4f:a4:d9:30:46:4e:b0:79:
97:c5:ba:80:50:95:b5:33:81:ec:13:a1:30:b0:2a:a9:65:fc:
cd:fb:a7:04:ac:33:22:7a:d2:91:f3:ab:6c:c9:cc:47:75:d7:
ff:e2:e7:88:d4:16:03:98:68:19:25:2e:f0:de:a9:ee:95:4f:
c6:da:f3:4d:28:41:8c:4e:d3:20:65:db:56:a5:a4:d2:93:79:
1f:1d:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org