Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mPl5QhypmA4pUUgUMwSF5cohsi4.roa
File: mPl5QhypmA4pUUgUMwSF5cohsi4.roa (raw, json)
Hash identifier: v4l5Pndxc7Fwt7dedttfvI2A7X+l5rxWhap2PPRTHmI=
Subject key identifier: 98:F9:79:42:1C:A9:98:0E:29:51:48:14:33:04:85:E5:CA:21:B2:2E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ECD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mPl5QhypmA4pUUgUMwSF5cohsi4.roa
Signing time: Sun 07 Feb 2021 11:56:07 +0000
ROA not before: Sun 07 Feb 2021 11:56:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3789 (0xecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 11:56:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=98F979421CA9980E29514814330485E5CA21B22E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:0b:50:38:5f:55:ef:b4:2c:8b:66:2c:4c:
a0:17:94:a6:5e:d7:ee:0a:2b:23:0b:58:7b:32:44:
16:49:d5:10:a2:8a:96:63:3c:a1:e4:62:6e:bd:69:
ad:71:e1:c5:0f:69:c2:74:d8:b6:1c:5f:ad:fe:3f:
73:b9:af:35:be:dc:fa:48:85:f9:fd:01:a4:9c:cb:
e5:2e:97:50:58:6d:f2:9e:8e:5c:3b:f1:3f:56:a4:
3b:83:fc:cc:73:71:bf:c2:56:55:df:d3:d2:d9:9d:
19:a2:a3:91:ca:c6:87:f1:f7:e9:67:d3:d2:47:89:
88:77:29:a7:ee:2d:e7:b3:72:3c:3f:ec:55:3e:2b:
cf:09:55:ad:76:86:e1:f2:a8:fd:09:61:70:c0:2a:
0e:56:a8:cc:91:02:3e:e7:51:83:84:1e:61:09:c4:
34:4a:46:e5:43:8a:94:db:cc:d8:2d:ef:90:35:a0:
22:27:74:06:cf:63:01:58:3e:1a:ad:0e:83:cf:20:
ee:fc:f5:78:32:f8:58:74:68:0a:d8:4e:8a:20:ef:
ce:ec:b6:f3:18:ca:ce:49:cf:56:83:17:a2:f9:8a:
2c:d0:e7:ec:ca:21:55:3b:6a:5e:66:dd:7e:4b:12:
49:03:6c:96:3c:e5:4d:38:76:af:44:2b:b0:c0:70:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:79:42:1C:A9:98:0E:29:51:48:14:33:04:85:E5:CA:21:B2:2E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mPl5QhypmA4pUUgUMwSF5cohsi4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.144.0/20
Signature Algorithm: sha256WithRSAEncryption
47:d5:f1:36:06:14:5b:b0:0c:8e:cf:7a:43:2f:c3:2d:36:8a:
ee:6c:bd:a8:bf:64:81:22:77:d9:29:cc:ef:52:8d:dc:46:0d:
79:d0:4a:49:df:23:07:e9:04:f1:45:44:3f:b4:48:d2:1b:41:
57:33:02:12:97:26:8a:6c:f4:56:6e:78:42:d0:fd:32:af:14:
4b:be:66:c6:3c:f4:35:54:75:74:35:ab:78:75:b5:09:cb:29:
35:45:06:f2:6c:36:87:25:97:91:34:75:62:6d:a1:d8:91:7e:
7a:2f:a5:1c:5d:68:1b:f6:a7:eb:6f:1d:3d:b9:2d:e7:0e:17:
e6:96:be:60:f3:ba:12:35:22:32:13:4d:c1:cd:ec:35:0d:4a:
b7:9f:8a:90:15:c9:12:98:1e:f2:23:f1:f6:bf:5f:36:24:be:
e4:84:e8:70:c8:d8:77:99:16:6c:a2:cd:65:dd:95:1b:e6:4c:
d5:64:70:9a:a6:7c:d6:a8:d5:2c:05:37:8f:c9:f5:68:1e:87:
3f:e8:a7:c2:be:8e:04:33:9c:8b:b0:09:ba:1f:56:81:3d:b1:
f3:ab:ff:15:23:bc:3a:3e:0b:d0:3c:11:05:cb:ff:ea:94:17:
2f:4f:90:ce:d4:14:6c:e0:03:7a:ff:40:01:3a:d0:bd:94:15:
90:29:61:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org