Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhY-aMlDSXP99_KcxUYSFrdXVNk.roa
File: fhY-aMlDSXP99_KcxUYSFrdXVNk.roa (raw, json)
Hash identifier: 1Lm0mofTQ2lzUlqmACkaZFAPV10sliLY2xVqFuLYxSI=
Subject key identifier: 7E:16:3E:68:C9:43:49:73:FD:F7:F2:9C:C5:46:12:16:B7:57:54:D9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1943
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhY-aMlDSXP99_KcxUYSFrdXVNk.roa
Signing time: Sat 22 Oct 2022 06:06:18 +0000
ROA not before: Sat 22 Oct 2022 06:06:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 119.77.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6467 (0x1943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7E163E68C9434973FDF7F29CC5461216B75754D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:1d:df:a6:85:fa:aa:d8:31:c4:b2:c6:c2:
f8:c5:7c:9a:5c:2c:1b:53:bc:9b:d1:de:51:25:28:
2a:b5:56:d5:66:3e:4d:e6:49:7e:28:b1:95:5d:8d:
1d:9f:90:42:cf:14:54:68:a9:7a:be:79:8b:81:a2:
ba:ab:8f:38:1d:c5:91:99:77:eb:93:a2:19:a5:f8:
76:06:43:10:6c:c6:a1:60:0c:2f:8f:ee:91:ea:3e:
36:58:91:bc:63:12:01:23:dd:68:be:a9:50:dc:f3:
c4:28:ae:fb:a6:22:3f:b4:e3:ce:2a:1d:a1:45:d4:
90:89:95:fa:d7:06:36:62:ad:50:f6:40:8e:ed:af:
49:97:c5:b1:2c:bf:62:2c:63:cb:a0:53:84:e3:bc:
77:7f:28:29:22:47:88:fd:04:07:c8:bd:58:84:c1:
bb:d4:d9:82:a4:55:0a:4e:56:b2:2f:72:27:4e:7e:
f1:6f:de:fb:5c:38:3f:45:2d:19:c4:f9:f5:3e:46:
02:bb:7d:87:c0:45:d5:78:56:2a:f9:84:af:71:e3:
d8:b0:10:d1:d2:9a:42:c7:56:15:17:23:37:55:e8:
00:ed:40:d2:64:8e:d8:06:51:79:5c:ac:3d:55:2c:
5f:ee:2b:68:7e:3f:b8:69:13:59:0d:60:d2:fc:8c:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:16:3E:68:C9:43:49:73:FD:F7:F2:9C:C5:46:12:16:B7:57:54:D9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhY-aMlDSXP99_KcxUYSFrdXVNk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.132.0/22
Signature Algorithm: sha256WithRSAEncryption
45:fb:2c:70:2e:85:b8:3c:18:8b:ca:f4:b8:d6:31:f3:42:2e:
94:82:24:9f:d6:ba:7a:d4:9d:07:d7:5e:e9:1b:fb:f1:8d:d1:
7e:2a:27:2d:5c:06:19:31:0a:e4:be:7b:f1:91:49:5f:3f:a0:
0f:9c:17:de:64:7a:5f:1c:23:65:26:82:34:85:a8:bf:e1:f5:
ee:9d:65:6a:a1:a2:aa:61:03:7a:0e:7e:fe:04:ed:dd:43:8d:
84:c0:82:20:8b:55:86:f0:72:6e:5e:39:da:d7:08:46:85:93:
55:3c:d6:df:f9:bb:a2:ed:cc:ac:a3:15:87:9a:d8:47:6c:28:
c8:d5:06:1b:31:1a:e6:06:39:3e:59:fa:af:70:9f:b7:03:a1:
75:89:0a:5b:20:f9:5e:07:36:f3:5d:c3:ea:40:52:17:0d:25:
d3:f5:68:d9:99:44:d5:02:ca:2f:fb:46:2c:d6:a7:06:09:82:
df:fc:1e:5b:85:c2:fc:69:e5:da:a5:23:4d:23:6b:8b:15:ba:
eb:fd:dc:26:1e:cf:ae:b8:9d:43:9b:d1:12:09:9d:9c:89:2e:
21:92:17:9e:5c:e2:ae:9d:9c:56:30:70:c3:3d:65:63:8e:3b:
80:14:5d:c1:2a:fe:21:04:a7:45:01:c1:55:fd:9c:43:b1:7f:
d3:6c:eb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:02 2025 by rpki-client