Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M-wr4hAAGf_xRLJYn7eURUQN-vc.roa
File: M-wr4hAAGf_xRLJYn7eURUQN-vc.roa (raw, json)
Hash identifier: uPVQHwmrXmIvWBVZe5lxgk5oIyJwZ+fOzV6tPzDoavE=
Subject key identifier: 33:EC:2B:E2:10:00:19:FF:F1:44:B2:58:9F:B7:94:45:44:0D:FA:F7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1121
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M-wr4hAAGf_xRLJYn7eURUQN-vc.roa
Signing time: Sun 07 Feb 2021 13:13:49 +0000
ROA not before: Sun 07 Feb 2021 13:13:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4385 (0x1121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:13:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=33EC2BE2100019FFF144B2589FB79445440DFAF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:cc:be:71:66:82:9f:4e:1e:9e:7a:8f:2d:
f5:78:be:32:a6:71:99:49:7c:ff:28:c8:b4:9a:b0:
53:02:d7:05:90:04:7f:72:91:d6:67:25:a2:b1:f0:
8d:83:2c:5e:06:39:3c:6b:f7:0c:2a:a7:cc:ac:1e:
d7:a4:f9:39:98:cf:2d:bd:f3:a4:a1:fa:c4:e1:92:
03:a9:96:64:e6:e1:93:15:6b:70:50:e4:e6:f7:d8:
27:78:79:88:24:d9:3e:97:78:de:74:25:2c:08:d0:
93:e1:82:47:28:81:e9:d0:24:c2:32:b1:91:54:1e:
61:c7:6f:88:8c:43:71:59:3e:fc:ac:01:f3:8e:91:
0c:68:2c:96:37:6c:fb:82:68:75:23:d3:e5:ca:3c:
e9:cd:4d:4d:f0:84:af:4d:14:36:3e:37:a9:64:0e:
61:25:8e:b5:71:00:db:ed:fb:ce:ae:4e:5b:0a:76:
e9:60:d6:68:f6:76:ab:18:4b:50:34:da:30:4b:92:
39:86:18:2a:71:83:28:b1:51:a5:a3:35:27:9b:73:
6b:23:3b:28:5c:3f:16:05:0b:28:6c:e5:e1:8f:09:
32:c1:05:bc:a6:64:f8:3f:38:19:0a:66:f5:56:44:
2d:0f:61:66:16:15:3f:0f:53:f2:7a:38:13:b4:ec:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EC:2B:E2:10:00:19:FF:F1:44:B2:58:9F:B7:94:45:44:0D:FA:F7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/M-wr4hAAGf_xRLJYn7eURUQN-vc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.188.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:67:a3:57:df:46:fd:48:88:42:03:97:98:e8:61:a8:e5:24:
97:0c:c9:f1:82:51:90:63:92:53:33:97:9e:43:60:2e:7c:75:
be:e4:82:89:50:b1:0c:9a:57:55:3f:4d:ac:e3:bf:d7:26:b0:
78:15:0e:58:79:75:3e:4e:c3:6d:9f:4f:ec:88:d5:4d:17:20:
31:6e:e1:8b:ac:87:9e:47:29:cb:78:96:67:3e:00:97:13:d8:
db:f6:62:31:84:7b:fb:bc:47:d4:49:6e:08:ba:40:d3:1c:e5:
94:34:56:46:58:01:40:3a:c2:d5:1f:b8:eb:b0:90:01:0a:7a:
1c:a7:63:5d:54:28:12:27:f7:90:5e:4d:e1:d7:b6:b9:f8:c9:
16:0b:e9:e3:9a:45:ae:c5:6b:75:56:b4:8d:e9:9e:b3:77:f1:
2f:03:b8:59:3b:33:d8:ce:ec:e0:eb:42:48:72:7d:a4:db:55:
3f:bd:70:25:c8:ad:e1:63:ad:1b:82:bf:97:4a:2e:3b:0a:d6:
03:76:79:c2:be:1f:f4:26:de:35:60:35:df:b7:2e:91:6a:7b:
8d:47:3e:59:5d:5e:07:89:f6:9d:18:0a:33:46:9f:7a:da:1d:
d5:d9:1f:1e:c6:06:a7:a1:d3:0f:f7:a0:b9:d9:55:d1:a0:bf:
fc:91:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org