Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GsWyA6GWL5PVZvmCDd2OCl9DQ9g.roa
File: GsWyA6GWL5PVZvmCDd2OCl9DQ9g.roa (raw, json)
Hash identifier: gtJpRXrioZgA+IdAOVcAliNHC8Qohe/ZiASeF5SelfI=
Subject key identifier: 1A:C5:B2:03:A1:96:2F:93:D5:66:F9:82:0D:DD:8E:0A:5F:43:43:D8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1252
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GsWyA6GWL5PVZvmCDd2OCl9DQ9g.roa
Signing time: Wed 29 Sep 2021 02:54:27 +0000
ROA not before: Wed 29 Sep 2021 02:54:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4690 (0x1252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1AC5B203A1962F93D566F9820DDD8E0A5F4343D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:2a:3a:29:d6:7b:07:ce:3d:68:82:8c:43:
ff:f5:77:eb:93:b9:23:a0:59:ce:89:cf:40:88:f1:
34:d0:d1:e2:6a:7a:7a:dd:ad:cf:7c:16:cf:70:54:
77:c3:8c:49:cf:d7:72:b7:28:0e:22:f0:c2:47:30:
78:17:9e:0f:f0:55:12:3f:38:61:0b:fa:7d:5a:96:
bf:21:ce:5a:ab:3f:d7:aa:07:61:c2:17:43:25:36:
b3:c2:f9:e8:5e:32:7e:8a:5b:2c:fd:93:67:88:3e:
db:e2:85:8c:1e:64:34:5d:06:e1:b9:dd:24:57:c9:
c9:a2:a4:f1:dd:01:8e:3f:f8:1a:16:39:c6:b0:0f:
c1:95:33:ac:3c:1d:de:41:34:1b:a2:df:0e:1d:b6:
aa:21:ac:42:1b:77:1b:40:ca:b8:f5:39:f2:f4:45:
a9:a1:51:f9:5f:ab:81:53:45:e7:f8:55:ae:93:88:
d8:21:46:99:ca:3f:5c:93:93:cd:69:94:dd:04:0d:
2f:e3:f5:eb:f6:13:50:4a:51:53:1f:16:0f:ad:3f:
b7:c9:bf:1d:37:a4:20:81:d6:c4:e3:ac:4e:16:0f:
dc:dd:09:63:16:c0:3d:48:ac:e5:b1:39:06:03:eb:
c4:09:bd:d9:66:e6:35:6f:08:f6:bc:8c:03:c0:36:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C5:B2:03:A1:96:2F:93:D5:66:F9:82:0D:DD:8E:0A:5F:43:43:D8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GsWyA6GWL5PVZvmCDd2OCl9DQ9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bf:f9:61:e0:58:78:a1:0a:a6:9b:84:9f:37:5f:b2:a7:cf:
1c:2e:4d:d4:c6:c3:79:62:3d:64:2f:32:dd:a5:3e:f0:08:0d:
25:13:7c:72:d7:c7:bb:ee:97:7f:2f:42:13:7b:e5:d6:d9:97:
a8:c5:40:3c:c6:55:ea:b2:2d:f6:4a:39:fe:7e:81:a8:e2:3e:
c3:4e:a3:74:90:e7:03:fd:37:64:20:71:8c:31:08:12:dd:98:
ed:23:3d:53:0a:3d:71:7e:c1:2d:c3:66:52:63:00:f0:15:5f:
bf:63:37:ad:8d:f8:b4:74:be:e2:e2:79:43:a3:d5:3f:91:7d:
a0:34:ac:be:4b:7e:d1:24:0a:f7:be:cc:0a:da:95:30:a1:bc:
0b:40:7f:41:7f:84:56:48:d7:fe:14:24:ce:e3:a1:11:e6:ea:
ec:a1:b1:a3:e4:d4:55:9f:99:86:31:5c:9d:d6:12:3b:eb:af:
3e:7b:05:e4:e6:2b:2a:c2:d4:95:bf:f3:0f:1a:c7:7c:9e:84:
5a:ae:2c:9f:f2:c8:c8:b2:ae:95:06:94:b2:e9:ea:eb:6e:ab:
4f:17:4c:5c:8e:69:88:e9:7f:e1:2e:84:80:f7:2f:19:1c:c3:
c9:c4:f9:a5:86:8e:01:c5:ea:bd:e9:1a:f0:bc:53:c2:e3:0d:
1e:6a:90:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org