Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TiC_4dGPUWphlhPEP4ND0hpZwXU.roa
File: TiC_4dGPUWphlhPEP4ND0hpZwXU.roa (raw, json)
Hash identifier: cuK7ZjT65I3aARfZ3ItGy8r126wNGXm67k3VPAwaocA=
Subject key identifier: 4E:20:BF:E1:D1:8F:51:6A:61:96:13:C4:3F:83:43:D2:1A:59:C1:75
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10FF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TiC_4dGPUWphlhPEP4ND0hpZwXU.roa
Signing time: Sun 07 Feb 2021 12:57:53 +0000
ROA not before: Sun 07 Feb 2021 12:57:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 119.77.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4351 (0x10ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:57:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4E20BFE1D18F516A619613C43F8343D21A59C175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:7e:8b:f9:c2:ba:43:ef:95:ec:14:d6:cd:
34:15:fd:6f:13:e6:68:15:2b:8e:e7:cd:bd:64:c0:
bb:82:88:eb:e3:e9:a2:f6:3b:2a:be:5a:91:23:77:
22:ee:38:20:31:f1:38:6b:c1:71:19:3f:0a:1f:c4:
93:b4:fc:cb:ff:5b:e7:7a:20:5a:67:4c:77:02:f8:
bb:c2:cc:3f:14:14:bb:3f:c5:5e:05:83:90:3b:b2:
cb:12:da:df:a1:0d:3a:d7:d9:68:63:1e:79:1e:06:
d0:46:38:43:e9:71:e3:d8:e2:b7:3f:b3:6d:9f:9c:
70:98:03:e9:02:f8:cb:ce:32:51:8d:df:b7:4f:ef:
ab:21:79:68:99:e6:ef:1e:70:f7:57:a9:b4:56:05:
f3:d7:80:1c:3d:52:c9:4b:6d:28:c8:03:9f:32:ca:
a2:47:d0:e8:3a:c9:e0:9c:5f:d2:ea:39:3b:ff:b6:
6e:a0:f4:fe:0d:92:ad:75:2d:5d:81:9b:27:27:33:
23:0e:88:5b:0e:31:32:b4:92:b1:f7:72:86:e5:84:
d4:24:da:40:d7:af:b0:a8:77:df:7e:5c:71:ea:18:
e2:37:de:0e:6d:7e:83:12:74:fa:47:5c:fe:56:2a:
f6:8a:20:81:73:eb:d9:c4:6b:05:8d:72:a3:42:55:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:20:BF:E1:D1:8F:51:6A:61:96:13:C4:3F:83:43:D2:1A:59:C1:75
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TiC_4dGPUWphlhPEP4ND0hpZwXU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.188.0/22
Signature Algorithm: sha256WithRSAEncryption
46:9a:c2:c1:35:6d:eb:35:2d:fa:48:c9:72:2f:30:9e:12:2c:
0d:65:e5:f3:7b:1d:7f:a0:16:95:36:99:7c:16:81:cb:1f:e6:
20:a8:cc:b2:58:77:34:20:86:21:2b:23:47:15:16:95:51:d7:
6d:b1:34:8e:83:34:02:3a:e6:f2:1f:57:43:16:77:c9:fa:f0:
55:ad:08:f2:e6:05:2a:27:f9:2b:ff:98:84:1b:66:8a:a7:ab:
66:99:4d:92:79:bb:46:cc:67:e1:e4:13:b1:07:b5:fa:30:53:
b1:ad:26:41:ae:87:aa:d9:d2:2d:70:1d:5e:73:d8:57:cb:60:
64:66:f1:ff:90:6c:d3:db:b1:7c:43:88:60:48:3b:e9:6c:c9:
d4:e2:25:c1:fa:a6:c5:4e:aa:2d:a3:da:9f:b4:b8:24:1c:50:
d4:cf:d4:7d:97:70:a8:ed:dd:2a:76:06:fa:52:c7:c5:c4:68:
d4:88:d0:76:43:4e:82:e9:08:45:af:bd:59:3f:45:a9:d9:25:
8d:b4:b2:d8:1c:42:5e:e9:d7:1b:93:00:d9:a7:e6:f2:67:0f:
f7:7f:86:ec:21:d4:eb:17:49:a9:39:6a:6f:9e:79:e5:c3:96:
8c:98:e5:70:24:e0:06:ed:33:c5:9b:99:6f:97:88:fa:6f:85:
ac:3e:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org