Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mxl6dgczlpdLd8PpGDpbL2YNQpE.roa
File: Mxl6dgczlpdLd8PpGDpbL2YNQpE.roa (raw, json)
Hash identifier: ydJIZZ0vUTi3nyVvEe7eYEXKnzSkMtdTFhIXtwayhiY=
Subject key identifier: 33:19:7A:76:07:33:96:97:4B:77:C3:E9:18:3A:5B:2F:66:0D:42:91
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F3F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mxl6dgczlpdLd8PpGDpbL2YNQpE.roa
Signing time: Sun 07 Feb 2021 12:33:24 +0000
ROA not before: Sun 07 Feb 2021 12:33:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3903 (0xf3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=33197A76073396974B77C3E9183A5B2F660D4291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:f5:3a:b5:4d:af:3e:9e:29:53:54:a6:6f:
c5:98:8f:d6:32:f4:90:e2:48:56:5c:2c:59:60:8e:
e1:f0:21:fa:b0:5b:97:e9:01:2c:71:43:1e:d0:88:
4b:f9:4c:f8:8b:69:13:98:1a:cf:3d:75:b6:56:85:
54:56:6b:be:69:88:56:0f:ac:1e:31:b6:1c:e9:51:
3b:9b:07:b8:0c:08:97:a5:83:13:96:2d:63:fa:26:
97:f2:58:ec:a8:bb:e6:ab:c7:c2:92:07:2b:3a:6d:
b4:48:09:f6:e4:84:e0:13:5a:2b:43:88:f7:98:16:
5f:1e:fe:0d:62:a4:08:03:d8:bd:3f:c9:5f:ff:ed:
4e:b5:e9:c1:2b:21:c6:04:68:2e:22:6a:05:1b:22:
e5:53:09:de:26:54:93:5c:41:9a:4b:07:d2:c6:92:
8c:14:65:c0:92:c3:7e:1a:d1:d5:b0:28:43:d4:9a:
45:c6:26:02:26:a7:f0:3e:90:81:8b:4d:9e:90:1d:
32:f8:92:4e:fe:21:27:3d:b3:57:b4:ea:47:01:ee:
e6:65:2f:62:d5:3a:b0:e5:e6:8b:ee:db:71:1a:42:
54:b8:ba:5f:4d:fa:53:3e:8c:a3:25:a5:8a:20:43:
c0:74:ba:73:98:6d:32:14:4b:37:7a:36:80:fa:dc:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:19:7A:76:07:33:96:97:4B:77:C3:E9:18:3A:5B:2F:66:0D:42:91
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mxl6dgczlpdLd8PpGDpbL2YNQpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
37:46:0d:66:b9:6b:94:3c:38:f4:0d:24:37:68:58:fd:e6:7d:
63:38:c9:c4:27:da:88:0b:f2:9b:7d:03:14:da:63:2b:16:9c:
d0:68:69:a6:0a:e9:6e:b5:e0:93:51:88:f4:e4:35:80:eb:cf:
ea:c0:fe:aa:f4:fa:fb:85:3c:53:3f:a3:7b:b6:0d:36:dd:0e:
09:a3:2b:10:0e:0b:09:ae:1b:b6:1e:bb:31:c8:fd:aa:11:23:
46:e5:41:9b:e7:f4:a3:23:b1:39:8f:87:9f:30:01:a7:88:62:
e9:a0:08:c0:f5:f8:b7:29:da:20:8f:57:47:c1:15:1c:74:c0:
dc:98:51:cc:72:c8:c4:ad:85:67:7c:cc:6c:24:db:aa:63:22:
ab:36:18:51:ef:ba:ee:41:41:0b:c0:b4:46:cc:92:ac:a8:c5:
db:64:6b:f5:e8:53:30:ae:d7:a6:81:7d:cf:1c:77:2e:2b:d9:
17:97:ff:31:33:3f:ff:10:e4:f0:05:00:67:3d:18:18:ac:fe:
c4:72:f9:c5:79:26:4b:61:a7:57:a4:06:f1:91:5a:d8:38:5c:
3c:78:e7:87:eb:ae:93:44:4c:3e:1c:d0:75:d1:e7:84:f2:08:
a8:4f:bb:16:4a:81:dc:68:57:86:bf:e3:c0:ed:b3:ed:68:9f:
2d:2d:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org