Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o7PMOT-T6hnMRSOgQYcyGdB4S2k.roa
File: o7PMOT-T6hnMRSOgQYcyGdB4S2k.roa (raw, json)
Hash identifier: JYa52RAe588Nh4tOMTqRN1uqFqskKIWKriXFU2C+NJg=
Subject key identifier: A3:B3:CC:39:3F:93:EA:19:CC:45:23:A0:41:87:32:19:D0:78:4B:69
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BC2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o7PMOT-T6hnMRSOgQYcyGdB4S2k.roa
Signing time: Tue 29 Sep 2020 10:08:49 +0000
ROA not before: Tue 29 Sep 2020 10:08:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A3B3CC393F93EA19CC4523A041873219D0784B69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:7e:ab:fa:3e:91:66:e2:9a:52:43:5f:4e:
33:65:33:64:2b:4b:f2:39:a9:06:93:02:63:32:52:
3f:86:5e:d4:41:d9:84:b2:0e:70:88:07:36:61:55:
7e:f1:98:50:42:bf:65:c9:39:f7:ab:5b:4d:f8:67:
0d:df:53:fa:9d:1c:a0:bf:fd:f4:ae:4b:64:42:de:
00:a1:c9:2f:89:44:23:b5:64:7f:3c:4e:8e:27:52:
05:14:f3:60:db:72:c1:bb:70:6b:cd:e5:7a:44:eb:
46:10:46:df:78:51:ac:96:3e:6c:87:2d:da:f0:d5:
8c:8b:3d:72:cd:a3:82:71:b4:d5:d3:5a:26:58:60:
f3:f1:b0:85:cb:7d:69:cf:67:56:41:87:eb:3b:72:
e1:76:63:7b:a7:3b:27:f5:1e:53:2a:14:6c:6a:2d:
b4:3f:6b:be:68:14:c6:1b:0a:77:26:31:c3:a4:8f:
9c:e7:44:1c:89:be:2e:3d:8d:51:c4:28:28:72:f6:
ec:89:a1:bf:45:4b:29:15:3c:95:c7:b1:c5:45:45:
f1:60:e8:6e:e6:ea:a2:df:50:26:6e:79:0e:d7:94:
84:30:f7:f0:c3:88:0b:77:3c:89:6c:9c:b8:64:38:
b0:90:eb:9d:f5:75:19:db:4e:b0:6d:50:52:98:64:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:CC:39:3F:93:EA:19:CC:45:23:A0:41:87:32:19:D0:78:4B:69
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o7PMOT-T6hnMRSOgQYcyGdB4S2k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
35:16:c2:8f:58:38:ef:93:8a:de:3d:60:6a:06:e7:94:3f:7e:
ac:ab:7e:d8:60:d1:12:37:b7:1d:3e:2c:b2:cb:72:1b:ff:64:
98:28:44:3c:3a:62:60:4b:7e:c3:cc:ff:e1:60:c2:1a:f6:e1:
5d:7f:61:23:21:8b:cf:7b:0a:61:8f:ca:1a:15:47:00:bd:ed:
6f:2b:7d:e5:e8:93:f1:92:a0:a7:65:4b:fb:ca:78:d9:cb:34:
01:75:a0:1e:23:53:dd:2a:95:9d:76:bb:f0:9d:c4:a4:c1:b9:
6c:38:86:6e:87:48:d2:35:71:1d:f7:3a:34:86:4b:2e:df:29:
3d:ad:44:8b:67:ab:1c:cc:29:9a:fe:cc:21:b3:d3:77:7c:55:
c0:f2:16:ea:19:5f:52:00:85:c0:1e:35:54:ef:43:90:11:37:
7e:e2:c6:d0:5b:ed:05:58:d7:e3:8d:61:4e:b2:98:56:8b:52:
a5:8c:5a:41:6f:62:2b:3e:d6:04:a7:48:7b:31:1b:4b:b1:e4:
13:89:ee:df:56:d6:01:72:60:f9:9c:02:f3:26:0e:6f:68:ea:
0a:98:29:e4:d9:f0:96:c9:91:8c:8e:f7:99:c7:49:0f:5e:68:
4d:a2:20:42:39:8c:fa:2e:84:c9:43:55:77:db:71:ad:c8:a6:
f7:22:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org