Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YdgTIFSP3NVsWPeMNhQstCqCrnE.roa
File: YdgTIFSP3NVsWPeMNhQstCqCrnE.roa (raw, json)
Hash identifier: mu7AZmsLyTioXI8EoKj9svmuASLXTncYBHp01B1K9zw=
Subject key identifier: 61:D8:13:20:54:8F:DC:D5:6C:58:F7:8C:36:14:2C:B4:2A:82:AE:71
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ED5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YdgTIFSP3NVsWPeMNhQstCqCrnE.roa
Signing time: Sun 07 Feb 2021 11:56:56 +0000
ROA not before: Sun 07 Feb 2021 11:56:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3797 (0xed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 11:56:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=61D81320548FDCD56C58F78C36142CB42A82AE71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:f8:07:73:cf:12:9a:64:ff:54:37:5e:78:
9f:33:47:18:7d:23:16:89:b5:0b:58:63:11:8b:b8:
b4:e1:cf:f0:ad:dc:a9:be:38:16:3e:55:56:36:b1:
f0:c5:40:62:2a:17:91:4e:19:21:2e:be:d2:8c:d2:
58:55:08:b0:6d:64:ef:5c:52:cc:98:e6:e7:16:79:
3e:5f:f1:88:23:f2:8c:c6:e4:36:aa:89:e7:95:b2:
10:51:4b:27:92:0c:3a:76:7a:eb:0a:4d:10:7f:cd:
f3:ab:de:e5:d2:00:1a:e9:ca:f3:63:77:d3:21:6b:
a9:bc:5d:ff:c5:64:56:da:79:38:b9:08:df:c5:1e:
5b:62:e9:2d:a6:fc:de:d3:61:d3:4d:f4:9a:82:13:
13:26:fc:06:05:89:60:a2:0e:d0:d7:57:6e:a6:ca:
6d:e2:28:a5:9d:c2:4e:39:90:4c:ee:ca:6f:b9:09:
58:b1:da:a6:a5:78:9e:99:9e:fd:f2:97:94:06:a7:
eb:61:81:52:e5:69:3b:8f:05:0a:f9:5b:5e:fe:e9:
15:0f:16:3a:2f:b7:89:0b:27:fe:9d:84:5d:55:ec:
71:cc:c5:3c:eb:19:07:43:35:80:74:fe:9e:fe:c5:
0d:71:6c:ba:38:4c:e3:f0:75:3d:57:a9:7e:27:ef:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:13:20:54:8F:DC:D5:6C:58:F7:8C:36:14:2C:B4:2A:82:AE:71
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YdgTIFSP3NVsWPeMNhQstCqCrnE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.197.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d1:ac:b5:db:5f:21:5b:8c:c8:67:ce:80:d2:23:53:a3:a4:
01:31:db:f5:db:47:c4:62:55:e4:01:47:23:1b:56:a0:91:4d:
be:c7:2a:ef:8f:6b:56:35:29:50:c8:b5:20:ee:29:78:5c:66:
f3:0b:50:78:20:27:90:a5:5b:1b:a4:34:85:7e:2b:17:a2:15:
2e:38:51:4e:69:2d:97:5f:2e:e4:2d:75:af:d2:53:1d:88:76:
48:37:8a:8d:52:af:fe:c2:8c:88:fc:87:4a:4d:e9:2f:c5:b3:
33:d8:0c:40:8f:72:1d:9e:42:00:ed:f4:9b:fd:d2:ce:25:ec:
a5:4f:8e:71:e1:db:a2:b6:8f:27:4a:92:30:48:52:17:63:8c:
2e:46:0f:62:8a:eb:bf:ba:af:34:3b:6e:30:ed:51:2c:c0:ce:
f7:a9:ae:26:3e:b8:05:af:94:b9:21:11:f4:a7:f0:26:d3:40:
6c:a2:c7:54:0b:11:19:c9:b4:bc:e6:25:60:01:db:e6:3e:9a:
a4:af:4d:7d:53:42:cd:d0:ab:99:66:d0:63:d1:fc:4b:8a:ff:
23:ed:d1:6f:f0:b8:ed:40:80:6d:bc:27:a0:5a:db:fe:84:1a:
7a:1d:d5:44:d8:d0:4e:d7:77:d5:3a:74:99:ec:3d:fc:5f:cf:
19:df:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org