Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SrA_YIJQZjWwmPr9BMUzbUaSpuc.roa
File: SrA_YIJQZjWwmPr9BMUzbUaSpuc.roa (raw, json)
Hash identifier: O2cEMAFNwLioe3Xan+Kpo8NyePU62jpX/nXE8kRmpcg=
Subject key identifier: 4A:B0:3F:60:82:50:66:35:B0:98:FA:FD:04:C5:33:6D:46:92:A6:E7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0EDB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SrA_YIJQZjWwmPr9BMUzbUaSpuc.roa
Signing time: Sun 07 Feb 2021 11:57:05 +0000
ROA not before: Sun 07 Feb 2021 11:57:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3803 (0xedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 11:57:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4AB03F6082506635B098FAFD04C5336D4692A6E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:b6:c4:53:db:57:87:f2:63:60:fa:3e:1a:
63:4a:6d:57:03:59:15:e0:b8:98:68:b0:42:36:dd:
d7:d7:40:01:c2:ad:e6:4a:c1:d9:6f:e2:f6:18:b6:
d7:b5:f2:33:8a:78:8f:f2:61:6d:10:e2:5c:17:ae:
49:fc:3c:17:77:d4:44:84:43:32:36:74:a1:00:d2:
88:85:a6:4d:89:4a:8c:af:80:cd:36:22:19:3a:2d:
41:eb:56:ff:70:0f:ff:5f:69:05:d9:d8:02:b0:7e:
a0:df:b7:34:69:e4:5b:f9:57:e2:f6:d6:36:ae:5d:
d5:d5:97:fa:c9:8e:98:2e:37:0b:67:b6:f3:f3:d9:
7c:bd:44:1c:a3:3e:fb:2b:7a:b0:85:fa:d7:89:05:
81:ea:81:af:a5:ee:cd:da:aa:51:b4:3d:b9:9a:3d:
e4:1e:b9:41:b8:6a:e0:94:3a:56:e1:4e:a1:14:d7:
f7:8d:c8:9d:ae:fc:34:cb:73:c7:1f:5b:6e:e7:3f:
79:06:fc:8b:ef:a3:45:62:39:ee:c1:07:cb:6d:48:
f3:59:53:91:60:6c:1c:4e:12:d4:a6:8f:b7:9d:40:
31:55:61:10:42:34:cb:c1:f2:24:47:4e:71:6f:c3:
24:84:f8:f2:ec:0f:df:18:9a:17:76:c5:21:f3:bf:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:3F:60:82:50:66:35:B0:98:FA:FD:04:C5:33:6D:46:92:A6:E7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SrA_YIJQZjWwmPr9BMUzbUaSpuc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.200.0/21
Signature Algorithm: sha256WithRSAEncryption
64:6f:ac:70:8b:84:91:14:5a:20:bb:76:99:f8:a7:47:65:af:
47:a2:9c:e1:85:e7:66:a9:eb:4c:77:bd:1d:00:66:d0:e3:9a:
b2:22:2d:2f:de:10:9a:44:ae:80:3a:cd:56:52:19:a3:16:70:
54:48:80:cf:a6:5f:e5:96:1c:89:38:07:3d:c0:4d:78:bb:6b:
04:bb:34:b9:7f:5e:2c:4f:3b:78:42:92:8a:d6:0e:70:75:f1:
fb:d8:c4:97:d0:2d:0a:3c:9f:d2:40:29:83:15:48:1f:68:00:
4d:fa:ad:c5:57:c9:5d:2e:f3:b8:b2:70:e7:5a:14:70:c2:87:
29:67:1e:67:af:b6:72:f6:b0:ce:b8:3b:d2:85:c2:cd:ff:72:
27:c9:b0:ad:5c:49:30:1c:a1:a0:ad:2e:34:a7:09:7c:fb:f5:
00:97:3b:44:10:dd:26:a9:ab:18:ea:bf:5a:1e:f7:d0:54:85:
37:03:a0:bb:38:8d:d9:85:9a:49:3e:b6:e1:b0:85:f8:84:dc:
fb:76:4c:85:7f:5a:f1:39:9b:8e:0c:78:05:2e:66:de:6c:98:
05:53:75:70:1e:91:50:91:11:da:fd:8f:75:f3:7f:70:3f:69:
45:10:c8:fd:2c:eb:dc:c3:98:33:03:66:7a:99:31:12:77:77:
6c:db:b4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org