Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONWgDnd_hcXM8vrASin7mEf2aIs.roa
File: ONWgDnd_hcXM8vrASin7mEf2aIs.roa (raw, json)
Hash identifier: 7hyQsBHPLPuvv2HXuml0g3ksCuii6LKG2fUTw4A80cQ=
Subject key identifier: 38:D5:A0:0E:77:7F:85:C5:CC:F2:FA:C0:4A:29:FB:98:47:F6:68:8B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BB9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONWgDnd_hcXM8vrASin7mEf2aIs.roa
Signing time: Tue 29 Sep 2020 10:08:46 +0000
ROA not before: Tue 29 Sep 2020 10:08:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3001 (0xbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=38D5A00E777F85C5CCF2FAC04A29FB9847F6688B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:3e:44:0f:2d:da:90:85:89:d6:d1:f1:21:
e7:9b:13:11:79:7c:c5:70:26:9c:64:c3:42:71:a1:
99:f3:bc:92:55:b2:19:bc:9d:f8:a7:14:1a:d1:90:
1d:f8:33:7a:79:47:24:c0:24:6a:cd:d4:60:d2:c1:
f7:ec:01:46:4f:ae:33:f2:94:40:f5:ed:da:91:5d:
fc:e0:e9:96:a7:e5:08:47:7f:23:ac:09:fb:69:13:
6b:47:a2:cf:bf:20:eb:87:b1:f9:54:1c:a9:f3:71:
63:c3:5b:88:f3:1c:dc:03:84:23:fa:18:4b:74:b8:
5b:27:81:3f:bf:bd:a7:0f:39:59:53:3f:7d:5b:ea:
19:bb:34:99:7e:a8:a8:78:f0:41:cc:c6:0c:a8:25:
fb:48:fa:da:96:42:18:01:8e:4a:a8:be:b3:3e:6f:
b3:00:97:2c:2e:cb:22:02:20:55:1a:9b:0f:ee:40:
de:a1:94:f3:21:f2:0a:c1:8a:81:aa:71:ee:60:a2:
6f:30:4c:28:3b:52:86:65:51:65:0e:9d:72:ab:d3:
fb:9c:bb:65:5c:c9:8c:e7:ed:3c:2e:fa:d3:05:26:
51:8c:dd:e6:e6:f9:fc:24:04:16:77:b4:05:77:0c:
10:8a:b5:e6:f1:74:0a:e1:9c:93:4e:94:74:51:0a:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:A0:0E:77:7F:85:C5:CC:F2:FA:C0:4A:29:FB:98:47:F6:68:8B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONWgDnd_hcXM8vrASin7mEf2aIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.194.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:84:f7:29:c2:c5:d8:f9:ae:13:9d:a1:66:e1:2a:a6:0e:e2:
27:8d:d7:b9:de:56:7e:2b:21:3f:b4:0f:83:31:db:c9:57:1a:
9b:dc:bc:27:d4:72:90:01:b4:50:80:2e:42:68:e7:9b:72:d0:
72:ba:45:28:53:75:58:a6:92:fd:b8:ed:64:0e:ec:50:02:1b:
f8:3e:84:dd:ff:04:23:9b:0b:52:c3:a5:87:b7:df:ee:f0:a2:
88:ca:87:00:8c:e6:80:3f:ed:fe:e1:12:d5:cc:c7:98:7d:1f:
22:33:ef:ec:d6:e7:d9:b9:91:57:86:bd:03:b1:fc:a9:17:9a:
be:3d:17:41:e7:a5:12:aa:46:87:08:85:08:68:28:8d:33:db:
47:a9:12:0e:1d:31:f4:c7:c6:e1:87:1e:e8:28:80:42:6a:23:
09:4f:f5:dc:1b:da:12:d1:f9:a4:c0:33:5b:58:b6:c2:41:6a:
93:50:68:35:ac:70:94:26:46:1c:33:9f:b1:29:85:a4:34:03:
87:11:74:e4:b3:c8:dc:23:5c:03:dc:a5:0c:43:e6:02:f1:64:
e5:4a:9c:39:49:a6:32:8a:0b:d4:da:0a:c6:27:0a:2a:79:68:
a9:3b:1b:56:a4:21:af:2e:cb:45:5a:4e:07:fe:e4:38:64:5a:
0f:51:46:05
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM4RDVBMDBFNzc3Rjg1
QzVDQ0YyRkFDMDRBMjlGQjk4NDdGNjY4OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8sz5EDy3akIWJ1tHxIeebExF5fMVwJpxkw0JxoZnzvJJVshm8
nfinFBrRkB34M3p5RyTAJGrN1GDSwffsAUZPrjPylED17dqRXfzg6Zan5QhHfyOs
CftpE2tHos+/IOuHsflUHKnzcWPDW4jzHNwDhCP6GEt0uFsngT+/vacPOVlTP31b
6hm7NJl+qKh48EHMxgyoJftI+tqWQhgBjkqovrM+b7MAlywuyyICIFUamw/uQN6h
lPMh8grBioGqce5gom8wTCg7UoZlUWUOnXKr0/ucu2VcyYzn7Twu+tMFJlGM3ebm
+fwkBBZ3tAV3DBCKtebxdArhnJNOlHRRCjZpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUONWgDnd/hcXM8vrASin7mEf2aIswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09OV2dEbmRfaGNYTTh2ckFT
aW43bUVmMmFJcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF3
TcIwDQYJKoZIhvcNAQELBQADggEBADyE9ynCxdj5rhOdoWbhKqYO4ieN17neVn4r
IT+0D4Mx28lXGpvcvCfUcpABtFCALkJo55ty0HK6RShTdVimkv247WQO7FACG/g+
hN3/BCObC1LDpYe33+7woojKhwCM5oA/7f7hEtXMx5h9HyIz7+zW59m5kVeGvQOx
/KkXmr49F0HnpRKqRocIhQhoKI0z20epEg4dMfTHxuGHHugogEJqIwlP9dwb2hLR
+aTAM1tYtsJBapNQaDWscJQmRhwzn7EphaQ0A4cRdOSzyNwjXAPcpQxD5gLxZOVK
nDlJpjKKC9TaCsYnCip5aKk7G1akIa8uy0VaTgf+5DhkWg9RRgU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org