Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fsWO0p0ERu1hX8dPYR4WgDdKzP8.roa
File: fsWO0p0ERu1hX8dPYR4WgDdKzP8.roa (raw, json)
Hash identifier: jiZZwWR2DSwTsMW8J/2bsIW0wZoy/GDLPWVlqeFBj0A=
Subject key identifier: 7E:C5:8E:D2:9D:04:46:ED:61:5F:C7:4F:61:1E:16:80:37:4A:CC:FF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 111F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fsWO0p0ERu1hX8dPYR4WgDdKzP8.roa
Signing time: Sun 07 Feb 2021 13:13:46 +0000
ROA not before: Sun 07 Feb 2021 13:13:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 119.77.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4383 (0x111f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:13:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7EC58ED29D0446ED615FC74F611E1680374ACCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:fb:9e:32:3b:bd:7f:54:a0:c3:20:8d:1b:
74:aa:a9:2e:94:e8:b0:c3:f7:41:b6:97:11:dd:1a:
be:30:7b:a7:87:5f:21:4f:f2:3d:d3:a3:a8:90:6e:
33:3a:ab:9b:da:18:1d:8b:6e:9e:7c:ac:dc:b5:11:
74:ff:a4:87:66:45:87:77:f2:5e:e0:08:5a:10:a7:
e1:4f:47:26:08:ac:0d:1f:5d:32:6c:1e:65:c6:f7:
85:c0:92:d9:5d:e5:69:9a:f3:f6:c6:97:a4:33:d5:
23:a7:ba:66:85:a3:c1:4c:92:a9:c4:98:14:69:89:
52:82:6c:87:27:41:52:0d:1a:98:c1:4d:82:5f:cb:
96:c8:be:61:75:6d:9c:b8:4c:33:1f:23:d3:3e:d6:
a7:b3:22:33:cd:98:52:60:f1:6d:1a:60:0c:90:4d:
96:80:88:a1:71:a4:3c:57:24:ab:a3:9c:7e:11:92:
0a:7e:48:40:dc:c3:f7:d3:33:b3:91:2e:92:62:c4:
1d:d1:41:8d:49:b2:c5:93:61:fd:b9:c4:a6:30:27:
d5:ec:43:ad:1c:17:60:a2:d0:e9:52:0a:13:61:9d:
e9:bc:35:62:21:8c:f5:be:d5:99:3c:93:9f:16:20:
76:e6:8c:09:e8:00:34:50:a7:72:06:01:1e:71:f9:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:8E:D2:9D:04:46:ED:61:5F:C7:4F:61:1E:16:80:37:4A:CC:FF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fsWO0p0ERu1hX8dPYR4WgDdKzP8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.140.0/22
Signature Algorithm: sha256WithRSAEncryption
29:e9:6f:53:80:cf:e7:b0:9e:07:52:98:9a:bd:1b:16:93:96:
f3:3f:4b:cf:41:c0:0f:6b:03:ea:2c:20:02:05:c5:5e:44:1c:
2d:a8:33:33:c7:1e:e8:86:d0:b5:22:59:ec:50:f8:71:fc:4e:
6a:13:03:97:af:3f:06:44:03:25:b3:81:dd:1b:4d:fa:8e:33:
8f:2e:a2:be:04:f4:c4:df:65:04:7f:e1:21:87:20:e9:df:b8:
01:e9:c5:f0:46:39:ff:a4:95:94:2a:80:c7:71:ec:95:cd:6c:
a3:cc:e6:54:bf:a8:b9:f3:30:31:57:d8:52:d5:ed:c0:c6:f1:
5f:ca:06:42:52:33:a1:4e:17:42:bd:82:5e:51:fe:b0:f5:6f:
c8:48:fa:b3:ce:3e:d2:a5:67:b8:cd:88:bb:ea:c8:db:8c:ab:
cb:77:ef:fa:5e:5c:b0:b6:bf:f4:f8:18:71:5d:eb:a1:4a:09:
15:07:e4:24:a6:36:81:46:a5:31:43:f0:fe:10:10:d6:49:04:
9e:3f:da:44:61:95:09:df:04:19:38:6c:a5:a7:f3:f8:40:8d:
70:1b:ce:ed:33:78:08:5f:10:e3:20:a4:0d:33:d3:61:55:75:
cb:c1:ed:50:b5:1e:d9:2c:47:0b:e9:31:2f:10:b9:79:0d:35:
0c:0f:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:37 2025 by rpki-client