Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJAtijdCT1gnSWqExzQluP1s-qE.roa
File: hJAtijdCT1gnSWqExzQluP1s-qE.roa (raw, json)
Hash identifier: DraS6KSw4rq4CndR12lYAfPGzO83zhBTqNQrdQ6MU2w=
Subject key identifier: 84:90:2D:8A:37:42:4F:58:27:49:6A:84:C7:34:25:B8:FD:6C:FA:A1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D31
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJAtijdCT1gnSWqExzQluP1s-qE.roa
Signing time: Thu 14 Jan 2021 07:23:39 +0000
ROA not before: Thu 14 Jan 2021 07:23:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3377 (0xd31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:23:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=84902D8A37424F5827496A84C73425B8FD6CFAA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:1a:53:75:0b:ec:51:3d:57:66:ab:8b:94:
81:f7:a1:18:46:f6:49:25:18:ff:77:7d:1b:7e:d8:
32:bd:63:65:c0:90:9a:5b:1a:88:c5:46:12:39:74:
e6:76:89:b6:27:b7:8f:69:53:35:10:0a:48:14:1a:
fe:c8:78:dc:48:a6:81:6c:2b:6a:94:b3:99:f9:8a:
c4:3a:b3:48:b1:06:c2:d9:ba:a7:5c:bc:d3:ec:33:
90:25:69:49:c5:ad:91:7b:66:e0:57:7b:1d:4a:37:
bd:49:2c:95:18:3f:d3:51:5b:4e:52:28:d6:e0:c9:
4b:1c:77:1d:fd:01:c3:2b:1d:1c:4b:78:93:fb:c4:
2e:6c:10:22:b5:65:0b:04:42:e2:a0:f7:24:2e:7e:
f2:d0:8b:9c:28:4c:7b:ab:a2:e7:8e:64:14:89:ca:
a4:ef:39:8b:a3:d6:d7:8d:db:57:43:11:55:a2:d1:
f7:f8:28:b8:7d:5f:38:f0:93:2d:2e:4c:44:51:5e:
f0:6a:25:59:d4:1a:31:f2:4d:6f:f5:fe:77:6c:f9:
10:07:36:4c:18:58:25:1c:32:34:3e:9b:43:f0:0e:
79:af:c5:41:c2:2b:79:d5:89:1a:a7:50:2e:a4:6f:
b8:1b:18:00:59:1c:0d:2c:8c:6d:0b:c4:9b:46:a5:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:2D:8A:37:42:4F:58:27:49:6A:84:C7:34:25:B8:FD:6C:FA:A1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJAtijdCT1gnSWqExzQluP1s-qE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:66:da:b5:92:b6:9d:86:d8:e7:18:22:95:18:9c:40:63:52:
3d:64:b7:25:f4:f1:82:5f:f4:9e:86:c5:54:bc:42:21:00:76:
50:8d:e3:9f:05:2f:04:c9:4b:5e:d8:77:74:58:58:f2:28:34:
9d:4b:86:c4:81:c5:48:e1:a2:6d:5c:95:7b:7f:8d:bb:59:2d:
a7:77:d9:e2:31:4d:d4:15:cd:d1:75:26:db:5e:65:1b:a3:91:
a8:76:ec:91:93:01:44:96:a7:e0:c7:54:f4:8a:b7:0e:a6:aa:
05:9b:a9:3f:f1:5b:e5:9b:ef:17:e5:da:a1:54:0f:c6:7c:f9:
24:13:a9:20:aa:de:00:5b:26:79:90:70:61:fa:8b:7d:f7:e5:
50:b2:de:2d:15:76:9a:61:8f:a1:0d:a1:bc:51:f3:b1:02:12:
72:c9:ea:0e:68:53:18:51:fd:51:0b:75:38:ad:03:94:d3:75:
e2:04:65:7b:4b:6d:32:0b:e3:b7:1f:a3:43:ee:38:7d:16:10:
d4:df:dd:ff:30:ee:c9:be:29:fb:25:ac:e8:54:0d:27:26:aa:
e7:96:7d:8b:b0:52:30:a9:7d:16:5b:39:30:0c:14:3c:b0:ad:
d9:f5:f5:23:63:13:1c:30:b3:ab:df:c6:d4:bc:fd:0d:6e:31:
0e:c9:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org