Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MGvgcy4OjmCOVpG2lHBP42KTvc4.roa
File: MGvgcy4OjmCOVpG2lHBP42KTvc4.roa (raw, json)
Hash identifier: 4qgmHOPk5pjVqhm3rs0GIL+XSX+NgkhpdUjSLUqH3QU=
Subject key identifier: 30:6B:E0:73:2E:0E:8E:60:8E:56:91:B6:94:70:4F:E3:62:93:BD:CE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ECB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MGvgcy4OjmCOVpG2lHBP42KTvc4.roa
Signing time: Sun 07 Feb 2021 11:56:06 +0000
ROA not before: Sun 07 Feb 2021 11:56:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3787 (0xecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 11:56:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=306BE0732E0E8E608E5691B694704FE36293BDCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:91:e3:4e:2e:16:e5:92:b2:0e:ee:63:de:
08:a2:09:8f:49:49:ff:81:92:8a:7d:bf:ab:10:38:
85:24:45:5e:c9:3a:14:70:1e:f4:bf:8a:6b:37:ff:
d9:de:5c:53:00:33:e8:63:a3:9d:89:90:e1:fb:cf:
88:37:38:d4:e6:47:0a:b4:78:a7:d6:1e:2a:86:ee:
f5:50:70:c4:31:af:c5:64:5e:2f:4d:22:e8:e4:bc:
6c:3b:17:b5:92:47:0b:9c:a9:5d:2e:5d:77:8b:96:
d3:82:1b:d4:4c:0c:2f:4b:fd:ee:ce:57:c4:b3:fd:
36:a6:ff:f4:ab:23:0a:44:79:de:09:97:04:47:db:
57:e7:58:2e:34:ab:b0:89:03:e6:38:13:1b:29:1e:
7d:44:a9:f8:74:6f:a2:d8:32:e1:3f:f2:4f:21:6e:
2d:91:66:08:ec:dd:0d:84:48:fb:0a:67:b5:d1:e6:
0c:04:b7:0b:04:c1:3e:7d:33:16:06:ce:58:a3:7e:
74:53:80:a8:ec:4a:b4:c2:22:f9:10:81:df:ab:99:
e2:28:36:91:aa:95:b7:f8:2f:6a:54:50:45:cf:5d:
17:84:6d:c0:39:24:c3:6a:bc:e4:5a:2f:53:2c:ce:
b7:79:ff:e2:dc:8d:bb:ff:96:e4:1e:bc:0d:3e:7f:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6B:E0:73:2E:0E:8E:60:8E:56:91:B6:94:70:4F:E3:62:93:BD:CE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MGvgcy4OjmCOVpG2lHBP42KTvc4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.128.0/22
Signature Algorithm: sha256WithRSAEncryption
18:0a:be:01:50:7e:f8:99:fd:c0:74:16:c5:57:51:fa:5c:2f:
8e:8f:85:cc:f1:85:4c:ff:48:46:ba:cd:fe:1a:5f:45:da:ba:
b8:fa:cf:9a:cc:2d:0a:04:fb:3a:ae:a3:a1:18:24:f7:29:cf:
58:28:ac:df:0f:36:58:35:4e:3f:f6:32:32:3f:1f:fe:30:a3:
1c:3c:a5:d6:7e:10:2a:92:5d:82:01:a1:57:11:48:70:95:62:
7b:fc:84:ca:ed:6b:ee:9a:dd:dc:04:57:c4:61:2c:62:b1:1a:
97:2e:a0:21:02:3c:3a:56:f2:cd:8a:36:5a:ce:31:aa:5a:05:
4f:8b:4b:24:7f:21:d9:aa:30:e6:a0:cc:d7:3d:e5:1e:d8:49:
12:99:94:0b:47:3f:65:39:b4:aa:87:cd:88:02:f7:46:33:81:
03:eb:bc:c9:3c:5a:0e:b6:74:b7:eb:46:e2:82:b0:8a:b0:d2:
be:69:1f:da:77:a8:9e:e0:3f:c8:07:3d:46:d5:3c:70:6b:43:
06:c4:9f:71:a7:06:96:d3:1c:a5:6a:20:36:d3:dd:28:b9:cd:
6a:2d:7f:ab:80:b7:6a:78:87:cc:68:ad:05:ee:01:a6:e9:db:
38:56:42:0f:1a:27:b6:92:f2:8e:80:da:a1:64:cd:36:e8:57:
bc:d0:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org