Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Tw70OLkCIGhYvkSLjKtuTZUzvRY.roa
File: Tw70OLkCIGhYvkSLjKtuTZUzvRY.roa (raw, json)
Hash identifier: Jy13qugGX7K4F2mDUE9VvcVn85OurVyiCOr3AIvwDvc=
Subject key identifier: 4F:0E:F4:38:B9:02:20:68:58:BE:44:8B:8C:AB:6E:4D:95:33:BD:16
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B96
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Tw70OLkCIGhYvkSLjKtuTZUzvRY.roa
Signing time: Tue 29 Sep 2020 10:08:36 +0000
ROA not before: Tue 29 Sep 2020 10:08:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 119.77.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2966 (0xb96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4F0EF438B902206858BE448B8CAB6E4D9533BD16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:51:2f:a4:e6:26:dd:ab:b7:58:cd:32:c4:
07:90:30:77:0c:1e:96:84:90:35:54:b4:3c:63:a8:
57:fc:f9:64:d1:0b:f7:e3:72:e0:58:b7:f8:83:44:
da:8f:14:e9:b8:46:aa:c0:7a:15:39:bf:1c:b0:b7:
7c:77:ce:32:4e:bb:dd:b6:3f:ad:ca:c3:55:9c:c4:
c6:69:48:b1:97:1a:c0:e9:a6:c5:aa:6b:48:7b:a2:
9a:bd:e9:43:27:87:b9:41:ca:e9:c4:ce:7e:15:02:
91:93:be:52:3f:b2:46:03:35:b7:e5:6f:b7:96:94:
1a:70:55:74:25:d9:9f:e7:11:10:63:a2:d2:09:f0:
cd:2a:f0:30:4c:5f:ac:51:d5:5f:b5:f5:8a:0a:a2:
53:10:c0:3b:a4:bb:ab:f8:76:b7:6b:9d:71:24:bc:
e6:35:06:65:59:9c:1a:01:18:18:a9:53:8f:08:9b:
8d:df:e1:1c:a1:c6:ec:8a:19:2d:a5:05:52:85:bd:
48:de:e7:42:d6:36:81:c0:c4:26:69:06:1b:b3:08:
c3:d5:5a:b2:b9:23:c7:ee:08:9a:97:47:a0:23:50:
12:02:0c:5a:2b:c2:13:e5:ba:37:3c:27:a7:f3:ff:
06:75:54:22:d9:6c:b6:ea:e1:9a:0d:41:31:f2:8f:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0E:F4:38:B9:02:20:68:58:BE:44:8B:8C:AB:6E:4D:95:33:BD:16
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Tw70OLkCIGhYvkSLjKtuTZUzvRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.136.0/21
Signature Algorithm: sha256WithRSAEncryption
69:da:9c:b7:19:e6:8e:f7:56:1f:f8:94:6e:9d:27:49:8a:0c:
cf:c2:1e:61:23:6b:eb:e5:95:91:a5:c1:d8:61:7c:8c:4b:fc:
06:1e:26:f4:30:fa:b1:ec:ce:cc:33:1c:19:55:bc:c7:b4:6a:
0c:b3:39:4e:f9:ca:10:c7:e9:55:49:c3:11:bd:a4:d8:df:71:
28:3f:40:e0:f6:31:05:88:22:ea:e7:97:81:23:c2:95:56:f8:
ff:c4:c0:78:fd:1c:77:91:cb:c7:ce:e0:5b:89:72:3c:df:ba:
38:a7:87:3c:06:0f:6d:82:59:88:32:1b:14:c0:09:f9:d6:f7:
fc:bb:77:8b:3d:5a:83:2a:d9:6c:8a:d6:ec:2c:9b:5c:0a:30:
bb:01:04:37:b5:4f:4f:72:d5:4e:df:e5:d6:c0:15:ca:1a:e1:
93:3c:6f:f3:29:95:05:a5:e8:93:fc:69:8f:06:03:db:51:d3:
ae:e7:e4:72:1f:c4:d4:1c:66:49:38:0e:f1:29:7b:f3:fa:f0:
30:35:ad:46:52:57:fc:cd:3e:31:93:be:a4:31:b0:f9:3a:79:
79:2e:dc:8b:d9:03:38:ed:0e:49:0c:b4:8a:38:78:a0:d5:95:
88:68:2a:2e:03:f0:ae:cb:08:66:9e:c8:dd:b5:48:c7:c0:3e:
8c:dc:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org