Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y8xyqd_J_gW-FUmMQDXl262iWAo.roa
File: Y8xyqd_J_gW-FUmMQDXl262iWAo.roa (raw, json)
Hash identifier: 1RBiMat/8TTLv2mihKXZYADmWq/Wqo5F3HR9nHVeLh4=
Subject key identifier: 63:CC:72:A9:DF:C9:FE:05:BE:15:49:8C:40:35:E5:DB:AD:A2:58:0A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BB3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y8xyqd_J_gW-FUmMQDXl262iWAo.roa
Signing time: Tue 29 Sep 2020 10:08:44 +0000
ROA not before: Tue 29 Sep 2020 10:08:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2995 (0xbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=63CC72A9DFC9FE05BE15498C4035E5DBADA2580A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:c5:57:4a:8c:4b:b4:c6:8c:be:5a:8a:68:
7a:82:db:75:1c:87:10:4c:ef:74:ac:03:31:31:8c:
14:1c:23:80:d5:77:ee:31:05:50:7a:11:2d:d1:67:
8c:e4:34:1b:9b:56:e9:db:9f:2c:be:4c:ab:61:ad:
ba:d7:ea:59:a9:12:b7:f8:dd:62:29:c0:96:1b:73:
63:8e:50:03:f5:aa:ae:fa:ec:ce:54:9b:b2:df:49:
70:fb:30:86:b3:72:04:df:71:8f:75:18:3d:67:de:
d2:88:41:cf:6a:58:7b:bb:0d:bc:05:f2:e8:1c:fc:
9b:17:da:77:44:07:e3:9f:9d:25:1b:46:42:86:7f:
1e:77:7d:09:0f:db:c8:df:14:ce:0e:4d:68:99:e2:
fd:b2:f9:f3:8d:8a:84:dd:3c:d3:78:ca:2a:53:72:
c3:1d:f0:4b:08:4a:f5:b5:4b:8d:50:fb:9d:51:bd:
4a:9e:7f:fb:37:45:5f:3f:d8:f3:f8:68:1a:e5:60:
48:e0:b5:3b:c4:43:42:95:a3:8d:74:e7:41:e6:60:
35:11:4b:10:72:08:9e:66:ce:96:13:78:1f:50:2d:
71:9f:16:96:d2:b7:c2:bc:81:5f:3a:7d:29:f4:8a:
7f:39:de:7d:21:16:78:b7:d5:9a:d4:0e:0d:e1:c7:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:72:A9:DF:C9:FE:05:BE:15:49:8C:40:35:E5:DB:AD:A2:58:0A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y8xyqd_J_gW-FUmMQDXl262iWAo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.128.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a2:86:cf:60:9f:b9:44:42:0e:ba:df:cc:af:d6:26:0f:1a:
88:5f:48:ab:fc:aa:c7:ea:21:38:6b:fd:81:93:70:e6:78:7a:
31:fb:d2:33:b0:07:6a:b5:b8:53:d2:f2:88:35:35:0d:71:8d:
bf:ef:e9:bf:79:60:09:98:1f:54:c5:13:43:32:98:33:43:ac:
e0:6c:36:3e:83:db:dd:c0:a5:4b:dd:03:a8:5d:9b:c9:d1:9c:
54:f8:77:49:b2:7f:4b:be:6a:9a:b4:92:90:fb:b2:13:21:a8:
95:f2:84:ba:76:38:7b:47:6e:cd:19:49:95:36:0b:6e:f8:ed:
d3:96:a8:68:e2:8d:d2:84:d3:ef:b8:e0:4a:da:a7:69:f8:54:
5d:a6:f5:83:a6:07:f7:1a:8e:97:db:38:34:6a:b5:7a:07:57:
fa:fe:12:2c:f4:c8:68:fe:45:5e:37:e7:7b:1b:bc:7f:39:36:
ae:f2:0a:e2:48:b6:f9:c2:9f:13:3b:8f:60:ba:e2:1e:c1:c6:
62:14:97:22:eb:39:dd:cd:e3:8d:5a:79:8a:b2:80:e1:f5:6a:
09:31:83:e6:83:20:a5:5b:1d:2b:03:ef:c5:51:14:12:36:d2:
c3:d7:6c:ca:72:2d:69:37:94:0b:cb:91:e5:b5:95:94:0b:5d:
e8:df:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org