Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ILtB40oodyJ3VC-qCIf5T2W7Ujo.roa
File: ILtB40oodyJ3VC-qCIf5T2W7Ujo.roa (raw, json)
Hash identifier: ZYKQCcmzkbGuTbRxJQ8JOmSMWXYWU16ZBfM4SZyK9Ok=
Subject key identifier: 20:BB:41:E3:4A:28:77:22:77:54:2F:AA:08:87:F9:4F:65:BB:52:3A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BBE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ILtB40oodyJ3VC-qCIf5T2W7Ujo.roa
Signing time: Tue 29 Sep 2020 10:08:48 +0000
ROA not before: Tue 29 Sep 2020 10:08:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3006 (0xbbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=20BB41E34A28772277542FAA0887F94F65BB523A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:c1:b9:57:22:a0:ca:e8:73:e8:dc:47:5d:
93:b6:b7:e2:65:4d:68:68:64:32:e0:2d:6a:44:af:
12:57:9c:c3:86:c7:72:10:28:d3:d8:2b:d8:d1:0a:
ce:67:d3:fe:b0:18:62:1a:69:29:2a:ff:76:b0:b1:
58:44:3e:e3:49:02:b7:49:50:05:d8:60:fc:8f:3a:
4b:cb:9a:6c:d4:52:84:45:de:3f:f9:d8:cb:76:09:
1c:de:2c:9e:14:55:c0:e4:fd:44:dc:24:ed:0e:c5:
99:f8:cf:84:3d:c9:1f:b6:4b:0d:c9:bf:90:c1:69:
dd:b4:9b:a5:c8:04:47:66:b6:d6:ed:40:93:66:df:
af:08:9a:06:c7:5b:de:1a:fd:d0:ae:88:c6:d2:4c:
bd:c2:d3:23:c9:80:d9:e1:87:d3:f2:a0:85:00:ce:
3c:38:30:c3:e6:bf:91:b9:e3:46:8d:60:46:1a:66:
cd:3c:98:bc:ff:0e:3a:05:2d:fc:5b:dc:43:1d:51:
30:bc:36:44:f9:ea:d7:74:fd:56:2e:86:6a:97:0e:
2d:15:c5:2a:bc:7e:35:85:5b:50:37:14:3c:36:71:
40:13:7d:4f:0e:cb:fc:41:e5:a2:d0:6d:5b:97:4c:
96:0b:70:d5:64:67:a3:53:c3:9f:33:6e:57:d7:4c:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:41:E3:4A:28:77:22:77:54:2F:AA:08:87:F9:4F:65:BB:52:3A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ILtB40oodyJ3VC-qCIf5T2W7Ujo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.200.0/21
Signature Algorithm: sha256WithRSAEncryption
60:38:b5:46:66:de:33:87:3e:cb:a0:45:32:6d:ba:3d:01:88:
d4:1e:b2:03:68:41:aa:54:44:83:86:92:14:c1:4b:38:97:c1:
40:cb:5f:b1:df:75:ed:a5:04:be:60:6f:1f:67:7a:37:67:c0:
8b:02:32:cf:10:6e:23:02:13:8f:12:0b:16:27:b6:ec:73:28:
e4:b9:24:54:10:50:56:c1:94:d1:6c:8d:69:2a:50:35:57:ed:
c2:d8:5b:59:85:5e:55:95:7f:7d:5a:41:6b:e6:30:08:64:e4:
90:8a:e5:56:93:84:d9:79:6c:94:6c:e9:5b:30:45:b2:68:bf:
6b:e6:07:fe:42:e2:01:08:14:47:e5:d5:e9:32:e3:31:0c:c7:
28:5a:e2:a7:15:89:69:34:c9:51:73:30:84:9a:01:97:88:c9:
a6:86:5c:89:54:a1:4e:b2:51:45:70:a1:12:a3:86:bb:ee:9a:
61:3c:e7:d0:3c:83:4f:c2:fa:ba:b1:ac:6f:69:59:04:1e:fd:
f3:ff:96:92:17:64:32:04:d2:46:1c:11:78:e2:c9:6f:84:aa:
e1:dd:b3:ca:0b:a9:2c:bf:08:d3:dc:e4:de:b5:1e:7a:95:a4:
ef:31:db:8f:44:fe:86:8d:e1:40:28:d1:35:ff:97:61:e9:50:
f9:20:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org