Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNxUixYU2_f7tcHRTkAnnxxevn8.roa
File: LNxUixYU2_f7tcHRTkAnnxxevn8.roa (raw, json)
Hash identifier: vACBgnCvKVA3s1g8NYwLCQEif091MQw07Mkd5VfHgjo=
Subject key identifier: 2C:DC:54:8B:16:14:DB:F7:FB:B5:C1:D1:4E:40:27:9F:1C:5E:BE:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1314
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNxUixYU2_f7tcHRTkAnnxxevn8.roa
Signing time: Wed 29 Sep 2021 02:55:21 +0000
ROA not before: Wed 29 Sep 2021 02:55:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4884 (0x1314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2CDC548B1614DBF7FBB5C1D14E40279F1C5EBE7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:a4:b5:ea:20:e5:dd:24:d3:fd:cf:2b:05:
99:12:95:92:4d:d2:17:7f:76:80:e8:18:0d:3c:99:
23:ad:07:30:94:7f:bf:59:76:26:67:85:b7:b2:99:
fd:ba:65:16:2f:7b:82:23:1e:9b:d3:91:7b:48:35:
cf:b1:b7:48:a0:f8:f3:b2:1f:ec:fb:a0:c8:30:2d:
ae:a6:ab:1c:cb:a1:b6:91:25:e8:16:02:a8:69:ca:
11:8d:24:f1:44:50:6d:06:cf:fe:49:5c:8a:8c:99:
e2:a7:63:c0:54:be:47:1e:df:68:23:27:cd:f7:50:
51:7b:8f:2e:18:2f:5c:48:3c:90:0f:e1:d1:da:7d:
97:66:c5:b1:d4:bf:3b:43:fe:b4:d2:d6:28:2d:92:
bc:4a:a1:db:ef:c8:48:58:9f:3d:6a:41:7e:5b:9c:
b6:de:2c:4d:3b:10:80:71:87:b5:a7:8e:67:39:09:
ab:33:ae:f7:e0:32:65:2b:52:5e:f2:7c:09:88:ef:
2c:77:85:e7:de:97:8b:27:9c:ee:13:3f:99:d7:0a:
c5:ce:c2:d5:9d:45:70:0c:f3:16:23:ab:0a:2f:41:
01:76:13:e4:e8:db:02:53:be:8c:74:85:eb:22:01:
18:2b:04:76:b2:d3:32:2a:b2:47:0b:9a:3b:b8:54:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:54:8B:16:14:DB:F7:FB:B5:C1:D1:4E:40:27:9F:1C:5E:BE:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNxUixYU2_f7tcHRTkAnnxxevn8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.188.0/24
Signature Algorithm: sha256WithRSAEncryption
07:72:4e:dc:0c:7e:3a:08:18:69:62:18:2f:aa:9b:b4:df:49:
7b:17:a5:3a:b7:ca:d4:03:8e:b1:ac:f1:99:3f:0a:a1:1d:3a:
f5:35:5f:0f:3b:d9:14:95:b7:5f:5e:ef:11:b8:da:40:de:da:
73:50:f4:b3:d6:b0:b3:fc:4e:de:93:3a:b3:37:19:e0:5d:e1:
2a:33:df:02:4b:42:c3:ec:7c:02:ac:52:92:a4:de:ed:c9:66:
68:60:25:04:e7:27:c0:6b:30:40:76:c3:a6:8a:55:25:c4:7a:
be:de:99:24:78:15:29:0f:b3:20:da:b7:be:b3:7c:39:0d:3e:
f3:ea:e4:ca:a5:0c:7f:c2:13:b5:ac:39:1a:fc:72:02:0d:b3:
95:84:b0:ac:63:cc:34:f4:12:97:06:96:75:79:fc:89:aa:ce:
4c:7b:22:d8:cb:a4:d7:25:47:ed:82:8c:fc:4d:0a:88:d1:22:
b6:00:f4:48:7e:10:f2:2b:cf:54:b2:c0:b0:13:11:8e:53:f9:
da:78:95:7c:a6:2e:de:fc:a9:6f:5d:47:fa:31:81:fb:72:a7:
f0:f4:b3:d2:9e:42:22:04:58:80:86:6e:9e:4c:cc:84:49:a2:
2b:3b:c2:b1:5f:6f:7f:74:bc:b6:af:27:4e:04:4a:93:87:53:
ac:6c:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org