Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ngl7zFI_nPbHzoB82l9b67GmQo4.roa
File: ngl7zFI_nPbHzoB82l9b67GmQo4.roa (raw, json)
Hash identifier: hsTlljjWjaQD7rvnIIrPSAY42TGPcHIAmSNzPXSqPzY=
Subject key identifier: 9E:09:7B:CC:52:3F:9C:F6:C7:CE:80:7C:DA:5F:5B:EB:B1:A6:42:8E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 102D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ngl7zFI_nPbHzoB82l9b67GmQo4.roa
Signing time: Sun 07 Feb 2021 12:43:25 +0000
ROA not before: Sun 07 Feb 2021 12:43:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4141 (0x102d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:43:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E097BCC523F9CF6C7CE807CDA5F5BEBB1A6428E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:70:37:20:af:63:b8:9d:51:18:86:b3:1d:
f3:8e:4c:ca:91:42:ad:8b:0d:ed:e4:0d:52:bd:08:
5b:8e:30:90:2f:4b:9b:c7:d7:de:a9:cf:fe:d0:77:
c1:8e:8a:d0:3a:88:e1:fe:81:d0:93:52:99:c2:75:
b2:9f:85:e6:ea:94:de:11:05:2d:7e:61:3f:e3:63:
af:a6:ee:93:ff:b8:1f:ba:1f:b3:34:10:fe:0a:5b:
64:6e:25:b3:5f:7f:0e:f0:53:17:97:5c:f8:2c:8d:
4e:03:63:06:02:ae:14:99:a2:02:92:f0:93:2e:7a:
ca:25:21:ea:d3:3b:da:88:60:f1:4a:2a:60:ed:6b:
47:4c:9d:42:29:77:30:21:f8:79:07:cb:04:94:ff:
85:2e:58:35:e6:67:e1:6d:6f:47:31:9d:53:a8:83:
28:30:48:8c:51:d8:de:1e:1c:dd:4a:a4:e6:d0:db:
68:fa:06:84:96:60:9c:98:ae:ca:a2:0b:93:b1:13:
54:6e:96:f9:4d:ff:84:7e:77:2e:47:45:ab:90:17:
f6:92:ae:83:3d:eb:e9:72:dd:b1:86:97:36:2b:5f:
cb:c8:51:3a:19:7b:d0:10:cb:b6:c3:81:99:d8:a9:
a9:d4:50:ae:82:00:fb:7f:ad:c1:ae:34:34:af:2d:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:7B:CC:52:3F:9C:F6:C7:CE:80:7C:DA:5F:5B:EB:B1:A6:42:8E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ngl7zFI_nPbHzoB82l9b67GmQo4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.208.0/20
Signature Algorithm: sha256WithRSAEncryption
28:4f:81:4a:15:37:59:b7:88:e7:cc:11:a8:51:54:2a:b7:6e:
07:9e:37:2c:3d:3c:aa:81:52:ce:cf:d6:69:a2:77:ee:f9:c9:
8d:c1:86:e7:08:27:cb:75:a2:3a:d1:6e:d9:e2:e6:0c:36:19:
6f:60:78:37:7d:be:b5:9e:c9:1a:8c:49:a6:9c:76:7e:7b:b0:
cc:9b:c8:a8:17:e0:e9:6e:3d:06:1a:bc:5b:ba:fe:67:2c:58:
71:ee:e0:bd:ff:e3:47:61:59:e2:4c:ff:2b:f9:6d:a6:e0:e3:
81:cd:8e:32:8d:a1:6c:8a:0e:ab:dc:02:f0:ae:34:cb:62:ab:
7d:91:88:43:24:d9:d2:cc:ce:e3:cc:fb:b5:38:01:70:7e:fa:
3a:96:49:44:87:00:ae:38:eb:66:f0:af:94:b0:3e:59:7a:8b:
f7:c2:ad:bb:5a:54:59:23:97:01:26:59:ab:2e:92:8d:b5:a5:
51:8c:1b:a0:58:34:8e:f7:ef:a3:e9:13:5e:ae:f4:c3:af:ce:
57:a2:d4:b0:be:c7:44:8b:e4:f7:0c:68:2c:b3:2a:56:cd:aa:
29:6c:57:db:70:e1:d4:af:ce:30:f5:bd:0c:b8:2a:22:10:6b:
33:4f:96:07:d5:c0:d1:fb:ff:7d:28:bb:e2:69:e2:47:ba:1e:
c2:24:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:18 2025 by rpki-client