Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m7DS4achbqwlDRJjrmjNCcTbVrA.roa
File: m7DS4achbqwlDRJjrmjNCcTbVrA.roa (raw, json)
Hash identifier: QTSHEsjXBeBRlsbZ6k8IWUCMEU4tyhO/QMHIHnqvUa4=
Subject key identifier: 9B:B0:D2:E1:A7:21:6E:AC:25:0D:12:63:AE:68:CD:09:C4:DB:56:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 110D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m7DS4achbqwlDRJjrmjNCcTbVrA.roa
Signing time: Sun 07 Feb 2021 13:03:19 +0000
ROA not before: Sun 07 Feb 2021 13:03:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4365 (0x110d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:03:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9BB0D2E1A7216EAC250D1263AE68CD09C4DB56B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:30:81:78:f7:b4:f0:c0:ef:f0:17:c9:8b:
59:8d:2e:45:5e:53:95:3c:8b:cd:71:55:f3:73:0f:
71:4e:0d:6c:41:49:a7:88:c2:68:d3:8f:4e:31:f0:
9f:88:4b:f7:9b:93:45:4d:bb:ad:de:2d:c4:c0:83:
0b:3d:db:c3:86:91:b1:c1:bc:1b:14:17:62:ec:be:
34:56:b4:9d:01:53:d4:85:a7:e8:b2:f0:42:cb:0b:
85:46:08:42:39:ff:fa:6b:4d:35:c5:e1:86:8c:93:
c1:67:82:33:22:da:93:6b:72:d5:94:02:36:e3:31:
9d:58:c9:ff:f0:1f:84:8e:0c:90:2a:c1:fb:bf:fd:
64:41:3a:70:31:e1:85:dd:7e:fc:1e:c5:2d:92:1b:
14:46:68:b5:b0:25:f8:fe:85:a3:1f:ef:ca:f4:4f:
b8:8e:57:3c:2d:9d:24:ad:5d:0f:21:d5:87:3a:27:
7d:fe:1e:b6:7c:85:6b:a8:c7:e5:b3:ea:7d:ac:32:
76:24:8e:de:ac:ad:50:30:a6:28:b2:87:97:d8:bd:
dc:83:62:d8:82:c3:7d:17:d8:39:56:9e:ba:76:fe:
1e:65:f7:bf:ef:6b:47:3a:e0:d5:70:11:50:d4:d6:
cf:15:e3:45:74:22:9e:41:f8:5d:1f:09:85:3c:57:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:D2:E1:A7:21:6E:AC:25:0D:12:63:AE:68:CD:09:C4:DB:56:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m7DS4achbqwlDRJjrmjNCcTbVrA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:02:73:4c:87:21:ad:91:03:96:56:52:4d:cc:ef:3a:bb:37:
35:0b:71:4e:02:7b:64:ae:d2:f1:b6:12:db:08:24:d2:ec:39:
8a:2f:fd:48:77:da:33:5f:15:09:58:3d:f7:c2:b2:fe:69:cc:
da:a8:c6:91:70:22:92:75:b8:c9:d1:e1:7f:a9:32:1d:f3:6f:
d4:ea:f3:da:e2:36:7e:22:46:90:8c:a3:7c:14:0e:10:ee:e7:
4d:5a:97:7f:2e:7e:d6:e3:aa:b8:67:26:7d:8f:2e:61:69:71:
b3:f5:f5:2b:0c:fd:1c:0a:32:1d:ca:b4:20:74:85:03:98:31:
a4:a4:84:3f:1f:cb:c4:a3:2c:91:4f:2e:58:d6:d9:e1:a3:1a:
3d:1b:64:ae:28:9e:b7:05:38:84:66:77:12:fd:22:0e:cb:7c:
d5:b4:90:a0:45:4d:70:6c:c3:d1:cd:33:32:5b:dc:1c:28:86:
e8:1d:12:80:90:bd:6f:ee:67:d0:8d:5b:1e:a9:8d:41:11:29:
1f:cc:80:90:f4:61:a6:38:dd:b3:21:18:1f:45:49:14:c6:ef:
98:72:2b:ac:49:7a:4a:dd:0f:ac:48:af:b8:42:9b:53:0f:82:
1e:7d:4e:cf:e4:df:f3:e3:8a:5d:1d:80:ee:51:98:bf:05:07:
de:6e:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org