Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MWfG1EAVHlpyZqezqRmoFaWvH1w.roa
File: MWfG1EAVHlpyZqezqRmoFaWvH1w.roa (raw, json)
Hash identifier: QbXzo6vFOgPCHIt+E9vGyFVw/YEy5gE3+4r4okFTZ5A=
Subject key identifier: 31:67:C6:D4:40:15:1E:5A:72:66:A7:B3:A9:19:A8:15:A5:AF:1F:5C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1251
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MWfG1EAVHlpyZqezqRmoFaWvH1w.roa
Signing time: Wed 29 Sep 2021 02:54:27 +0000
ROA not before: Wed 29 Sep 2021 02:54:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 119.77.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4689 (0x1251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3167C6D440151E5A7266A7B3A919A815A5AF1F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:36:53:0e:3b:c2:c8:51:ea:f6:11:4c:2b:
e0:f4:ae:cc:fb:95:c1:03:de:73:41:b5:be:ba:99:
94:51:6e:d8:4d:83:a8:c4:08:80:10:17:35:2f:0b:
2c:1a:6f:88:8c:05:4f:86:c6:b8:6e:a1:d2:d9:4b:
50:fb:19:21:39:b4:07:f1:72:71:6c:31:6c:04:37:
6b:3c:8a:e5:a4:16:c8:f1:a2:d4:87:d2:6c:48:7e:
8b:a9:c4:a7:c5:b6:81:da:64:cb:2a:ba:80:7c:cb:
5b:ab:ee:c0:86:ab:84:3b:cf:2c:e3:e1:89:08:43:
da:e7:c3:62:7f:fa:12:80:ac:3b:55:8d:29:a6:fd:
98:3b:6a:e1:dd:7e:c5:68:34:f6:34:7c:84:7b:06:
9b:78:18:ba:e0:1a:c1:f8:8d:c2:b2:be:6c:1d:d5:
90:cb:de:77:88:37:4e:02:e2:46:22:bd:e8:36:ca:
c4:08:9c:a7:c6:51:32:6a:88:c9:c5:ec:84:26:1f:
d9:70:9a:a0:8b:33:db:ef:37:4f:d9:b8:42:5b:5d:
e7:d3:35:87:cd:6f:89:85:d7:3c:73:52:ad:78:e7:
cf:55:ab:31:42:2b:37:f9:9b:a7:12:5d:fe:79:e1:
b1:6d:9d:2e:46:e9:b7:3f:70:96:d0:11:61:6b:a6:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:C6:D4:40:15:1E:5A:72:66:A7:B3:A9:19:A8:15:A5:AF:1F:5C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MWfG1EAVHlpyZqezqRmoFaWvH1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:d4:67:b8:89:c8:a5:62:72:52:78:00:d1:54:39:70:a9:a2:
74:f7:c8:b5:b3:c9:99:e1:db:a7:99:93:2d:cc:97:15:1c:78:
b8:76:cc:3b:79:e1:01:5a:eb:c5:3a:87:97:72:09:b0:0d:eb:
cc:23:d4:47:24:04:25:17:e0:4b:b6:6d:14:23:51:48:4b:3a:
79:70:a7:1d:34:8d:59:1e:81:4b:22:d6:1c:2a:5a:de:cf:1a:
5d:e2:cf:60:73:7f:0d:89:c6:df:e9:5b:31:af:a6:4c:67:d8:
ea:5e:b7:ca:46:5d:10:6d:53:fa:19:f3:a3:ca:20:93:6a:3a:
e2:18:f8:1d:c0:c9:de:ac:25:a4:ef:3e:53:1f:7e:1c:81:6a:
0c:67:bc:cb:91:61:b1:1b:7f:c4:a4:c7:4b:a8:4b:76:de:13:
18:d4:fc:4a:8d:d3:91:80:fe:b2:bf:a2:9b:65:6e:59:e7:3b:
3b:6b:11:ba:60:60:c3:f4:ce:80:f0:34:3c:bb:6a:60:e9:68:
db:7d:a8:b5:19:25:9e:87:50:cf:98:4e:10:24:6f:71:6d:53:
9d:07:e8:a7:bf:7c:37:5e:6e:95:aa:0b:6f:d2:87:5e:ed:b1:
21:b8:19:7b:a4:37:1d:f3:e2:f2:a4:b9:20:97:35:86:90:f7:
ab:5d:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org