Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQi5DuOP0HfydECO2kGwWW0_hus.roa
File: FQi5DuOP0HfydECO2kGwWW0_hus.roa (raw, json)
Hash identifier: qto/TAvsauv00vUlHHjCfV8r2ru5GievbO9HhfwYYIQ=
Subject key identifier: 15:08:B9:0E:E3:8F:D0:77:F2:74:40:8E:DA:41:B0:59:6D:3F:86:EB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BBF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQi5DuOP0HfydECO2kGwWW0_hus.roa
Signing time: Tue 29 Sep 2020 10:08:48 +0000
ROA not before: Tue 29 Sep 2020 10:08:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1508B90EE38FD077F274408EDA41B0596D3F86EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:e0:35:9a:e9:82:ee:19:5b:43:1b:16:9d:
51:6f:37:bd:3d:4b:82:50:9c:40:b7:a3:5e:6a:e5:
e0:6b:1c:38:a3:eb:41:47:b3:30:60:f1:e8:df:58:
65:ce:53:78:3f:cd:24:0e:fd:2f:d5:19:c9:63:94:
da:41:ff:5d:fa:2f:2f:a8:20:a1:e2:20:c3:e0:25:
14:29:ed:98:b6:f1:06:4b:22:61:60:1d:3e:03:12:
53:a5:15:70:63:52:5f:fa:08:ab:27:28:44:ba:25:
36:32:ef:db:92:c9:fb:b4:72:c4:a9:5e:a0:0e:71:
a8:86:e8:7f:3b:82:08:31:0a:40:44:f8:39:60:9b:
aa:9d:08:5d:44:e9:be:84:fa:ac:a7:ef:8b:99:8a:
80:dd:a1:0b:1b:90:d8:14:aa:73:3a:53:fd:ef:1a:
d3:17:45:c0:7e:c8:07:1b:36:cc:de:de:4f:3a:4b:
12:29:bd:2b:9e:21:2b:c9:b9:9d:c7:24:cb:b1:f0:
7f:9d:61:61:d5:40:8b:10:ae:8e:ca:39:1e:ea:28:
a3:42:45:a9:51:67:c9:97:bf:ef:46:f3:bc:7b:ee:
45:30:81:00:da:98:f5:c8:ae:e5:34:ce:98:c1:c4:
35:ff:da:9e:f1:4f:73:67:6a:81:f7:40:a6:cb:5c:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:08:B9:0E:E3:8F:D0:77:F2:74:40:8E:DA:41:B0:59:6D:3F:86:EB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQi5DuOP0HfydECO2kGwWW0_hus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.208.0/20
Signature Algorithm: sha256WithRSAEncryption
40:59:9e:98:09:9b:17:86:f9:9c:5d:73:84:69:d1:de:b9:28:
31:80:95:f1:ed:51:6c:ca:9c:1f:8e:78:d4:5f:33:0a:ee:a9:
70:74:f1:77:95:b5:56:25:d3:11:3e:62:d1:66:5d:f4:66:7d:
6d:46:0e:8b:28:7c:f5:54:24:d2:87:61:87:36:4e:fe:f1:51:
c3:84:96:d6:dc:1b:77:c7:ef:ea:f6:0e:e0:22:4d:38:ec:4f:
a9:c9:c1:2c:34:ba:6e:ef:cc:68:f4:35:98:fb:71:d2:e6:72:
5f:b4:65:bc:dc:b7:48:47:bc:b7:b4:0f:81:e3:9c:f7:69:1a:
28:20:60:15:68:a9:76:92:cf:cd:d4:d5:71:50:8c:1e:bb:e1:
c8:23:92:b4:bc:51:00:e7:6f:29:3d:f1:fa:92:fa:b2:a0:44:
9e:85:6c:73:f3:8d:3f:94:83:d8:b9:32:bd:c2:54:e9:e5:80:
a3:4b:41:13:d5:8d:4d:ee:48:72:4e:38:9c:7a:de:2f:3a:e1:
c1:dc:89:01:d0:68:07:16:79:6d:d3:40:1e:9b:10:52:ec:e4:
a5:42:d0:75:18:2a:5c:f0:95:ed:f2:4c:26:46:29:01:69:00:
9d:f5:02:26:e0:b7:12:d4:11:16:38:52:86:a1:e8:86:ee:e2:
e9:e4:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:35 2023 by rpki-client on console-ams.rpki-client.org