Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QdBCURYod7UrFo-hHUDWSrcQE2Y.roa
File: QdBCURYod7UrFo-hHUDWSrcQE2Y.roa (raw, json)
Hash identifier: 68udxtuPJR0WyPW08xLiR/hWcZZ0iQuTrV4dIPh4VeQ=
Subject key identifier: 41:D0:42:51:16:28:77:B5:2B:16:8F:A1:1D:40:D6:4A:B7:10:13:66
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ED3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QdBCURYod7UrFo-hHUDWSrcQE2Y.roa
Signing time: Sun 07 Feb 2021 11:56:51 +0000
ROA not before: Sun 07 Feb 2021 11:56:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3795 (0xed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 11:56:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=41D04251162877B52B168FA11D40D64AB7101366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:2e:93:6d:23:85:a6:d9:1e:2e:52:15:d8:
d8:3f:e6:5d:5b:5b:da:6a:b1:1e:8a:66:98:65:46:
6c:85:2c:b4:07:27:4b:be:63:91:d0:7a:48:f9:11:
b8:ee:5b:86:b9:08:c6:61:7e:e0:4b:60:d8:55:3e:
c5:e0:d3:17:54:20:c1:90:08:0b:b4:97:96:0f:b0:
1c:62:21:25:4e:cd:37:9c:30:72:99:e3:8e:1b:0d:
2e:a2:b1:77:d0:71:73:74:b1:97:7f:f7:5a:ce:6d:
17:26:fa:1a:23:dc:a4:fa:9c:89:6b:ae:1a:e3:d1:
65:d5:94:8d:3a:d9:7f:09:1a:b1:cd:2f:ec:85:d2:
b9:78:8a:66:99:99:e5:6e:4e:7d:fb:21:c8:a0:ba:
48:cc:62:7b:fd:e1:04:6d:54:89:99:58:1a:6b:9d:
f6:69:60:e2:60:15:96:ec:a4:ef:c9:49:95:aa:8b:
4a:08:cc:7b:64:a7:2c:93:fc:9a:71:1d:c7:e3:b0:
f8:c0:dd:8f:29:c0:3d:fb:b3:42:9f:34:16:25:ab:
c7:58:59:de:30:b5:f7:79:da:64:65:90:66:cb:b5:
9c:90:d1:63:c8:77:a9:42:af:52:f3:52:db:64:2b:
7f:a8:1b:cd:68:ce:7c:d3:62:f5:6a:02:b1:ac:da:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D0:42:51:16:28:77:B5:2B:16:8F:A1:1D:40:D6:4A:B7:10:13:66
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QdBCURYod7UrFo-hHUDWSrcQE2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.192.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bd:b5:3a:80:6a:51:fb:45:40:94:5c:6f:ff:45:b0:2b:18:
dd:56:7c:8e:f7:54:c1:62:52:e2:f6:f8:2f:47:46:33:eb:b9:
cb:7f:91:c0:04:43:3e:3d:9e:99:36:91:d7:d6:c3:d7:e8:da:
18:23:9d:bb:b4:99:5d:a0:e3:9f:58:b6:e1:f6:02:d6:99:bc:
91:43:96:ad:38:a1:53:e7:31:9f:c4:e4:ad:3c:78:3a:3e:25:
cc:17:cb:96:f8:9d:9e:2c:68:99:e5:03:c3:d4:26:bc:ce:ae:
91:12:06:2b:cb:49:55:8d:6d:07:33:66:e3:fa:bc:01:a9:78:
7d:eb:55:ce:f7:1e:20:9e:06:52:ad:00:5b:78:cb:a7:97:fc:
34:6a:1b:f7:21:e4:98:e1:2e:8c:59:00:ec:a8:d3:d1:0b:56:
e0:8a:c6:8f:83:cb:9d:81:4a:63:d0:13:f0:ec:9d:4d:eb:81:
25:53:ba:36:91:29:e3:58:e5:52:ec:25:58:e7:af:8e:ac:53:
cd:1f:9f:a3:e1:df:9f:9f:0d:95:7a:2e:c5:76:02:97:57:52:
ca:d9:bc:f0:3b:43:f6:d7:9b:c0:e9:20:0d:01:5c:58:6e:c2:
1e:a8:66:0a:2b:ef:fa:93:10:78:8d:52:45:d1:ea:40:a6:87:
48:6c:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org