Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HJdiqEMwcPCIsPOhDChlEY9-OBU.roa
File: HJdiqEMwcPCIsPOhDChlEY9-OBU.roa (raw, json)
Hash identifier: ZY1w3HLAHlOjpYBwuwNEHhwu3mGdQ11dFvCE7Fo+Q5A=
Subject key identifier: 1C:97:62:A8:43:30:70:F0:88:B0:F3:A1:0C:28:65:11:8F:7E:38:15
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1215
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HJdiqEMwcPCIsPOhDChlEY9-OBU.roa
Signing time: Wed 29 Sep 2021 02:54:11 +0000
ROA not before: Wed 29 Sep 2021 02:54:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4629 (0x1215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1C9762A8433070F088B0F3A10C2865118F7E3815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:be:ec:bb:ee:91:4a:ec:e8:ae:fa:f4:36:
07:e9:54:d1:38:0e:cc:df:ce:bf:4b:69:42:08:a8:
2e:ce:28:74:58:58:87:0b:fe:67:29:a7:84:60:d2:
5b:e6:89:e7:6b:23:14:bd:06:03:8c:c1:c9:9a:c5:
b3:da:54:9c:d4:ca:bf:ec:3e:b0:ed:a3:2b:d8:af:
61:89:6b:6f:ba:ff:46:8d:35:2c:d3:4c:c9:0a:6b:
2d:52:34:50:59:b0:78:01:08:50:25:f6:a9:c1:d8:
06:3d:85:9f:e6:57:1d:88:26:26:85:b0:c3:95:30:
d3:a9:dd:05:b3:95:b5:0c:ea:6f:d9:eb:8d:69:95:
35:4e:b3:b8:7a:17:f2:14:0a:d7:06:10:2d:26:d8:
49:85:ba:76:0b:56:fb:16:e0:c4:b2:82:b0:bd:3b:
82:a3:70:17:96:77:e0:98:e4:e4:ca:f9:72:b7:b2:
7b:eb:d9:73:a4:97:46:14:eb:09:4f:3f:28:be:8c:
6f:4c:d7:4c:0e:16:f7:7a:50:4a:9d:31:86:ad:7e:
92:a4:80:aa:2e:7f:46:3e:59:58:5b:d8:50:e9:82:
16:a5:42:45:d5:f9:57:6f:6b:5d:25:b1:87:d1:b0:
0e:64:64:e2:96:bb:fe:78:f3:86:67:09:ec:05:c1:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:62:A8:43:30:70:F0:88:B0:F3:A1:0C:28:65:11:8F:7E:38:15
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HJdiqEMwcPCIsPOhDChlEY9-OBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.160.0/20
Signature Algorithm: sha256WithRSAEncryption
78:68:c5:06:84:be:df:c8:c3:63:51:ca:99:a0:59:40:57:72:
ed:bb:a4:a0:5d:7d:ce:41:59:4b:1b:e3:de:fc:33:d0:32:ef:
3c:2a:f4:f4:01:d1:60:35:22:1b:72:ad:c7:7f:35:f1:da:d6:
a4:af:38:1c:4d:d5:0f:39:cf:c2:fb:84:12:0f:83:4b:f5:db:
a4:5b:3c:f3:ff:16:05:db:4f:f7:b4:53:47:61:57:86:ac:a6:
7f:e9:ab:b7:b8:99:4e:be:32:a6:15:c2:db:6b:b3:59:0f:61:
39:59:c2:3e:c0:70:a6:a5:6d:cc:51:3c:86:66:17:2f:9c:a7:
8f:d6:b3:3b:12:45:2c:df:8d:d2:98:ef:2f:f3:c6:10:bc:04:
16:ec:c2:35:f6:32:c1:e5:e3:28:99:59:62:8a:ea:a2:42:61:
67:f1:12:87:af:02:a6:8c:5b:a1:41:b8:27:a7:aa:81:e2:0f:
0f:b1:09:fd:bb:31:a3:17:ad:cb:69:c8:31:dd:e0:e7:33:5f:
d4:ce:a0:31:f4:23:2a:25:d0:9d:cf:c3:28:c9:9a:20:68:33:
06:69:e1:9c:91:68:2b:c5:56:f7:94:c3:97:ec:70:38:bf:91:
6e:5d:e6:9b:80:fd:6b:80:f3:f3:ef:b7:63:d6:b0:d5:00:6d:
2a:e7:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:23 2025 by rpki-client