Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oEZX0C2QcnGA91soWbjl2yxMMbc.roa
File: oEZX0C2QcnGA91soWbjl2yxMMbc.roa (raw, json)
Hash identifier: +vD3ZuHy9hY0HmPzN+3PaPYnJpj12xjA/6J0Ta7+t98=
Subject key identifier: A0:46:57:D0:2D:90:72:71:80:F7:5B:28:59:B8:E5:DB:2C:4C:31:B7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1123
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oEZX0C2QcnGA91soWbjl2yxMMbc.roa
Signing time: Sun 07 Feb 2021 13:13:52 +0000
ROA not before: Sun 07 Feb 2021 13:13:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4387 (0x1123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:13:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A04657D02D90727180F75B2859B8E5DB2C4C31B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:4e:e0:5a:76:d9:58:53:43:bd:7a:e9:fc:
ae:69:ba:26:04:9e:ad:50:3b:c4:41:80:b8:ef:54:
11:33:0f:5a:ee:81:79:82:a3:ee:72:0d:31:0c:f7:
7e:a5:66:15:16:e8:a3:83:55:3e:3f:21:a8:8e:12:
ad:cb:55:32:8e:f0:7c:58:91:53:98:6a:74:ba:03:
6b:99:ae:fd:44:ee:58:1e:68:81:3f:8a:7e:45:ac:
c8:aa:44:cf:30:b4:96:e9:73:6f:94:d2:9e:a9:77:
38:9f:8e:cc:e2:4b:86:f7:0c:b8:08:78:a0:9a:30:
22:29:f0:a2:6b:cb:bb:e6:ff:c3:69:ac:5e:02:60:
3a:ff:27:17:6f:5e:ed:71:f8:2e:9d:df:1b:75:98:
6a:75:d9:01:f0:3a:14:8f:35:c5:2f:4a:96:eb:f3:
ce:d9:cd:53:20:59:cb:29:8f:1f:7f:e7:c7:da:e7:
0f:ff:c2:9f:a2:53:48:6f:58:2e:ac:6c:3a:e3:18:
38:f8:4f:9a:de:46:17:e0:78:e7:9d:c3:3f:4d:e2:
30:d3:4b:5b:42:21:2a:39:d9:02:6f:ec:d2:f5:3d:
6c:ce:00:ef:72:78:ba:d7:f3:cc:52:c6:6e:37:09:
87:ff:a1:38:32:17:c7:c4:92:16:06:7a:30:c9:7d:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:57:D0:2D:90:72:71:80:F7:5B:28:59:B8:E5:DB:2C:4C:31:B7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oEZX0C2QcnGA91soWbjl2yxMMbc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.189.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f0:c0:da:37:2c:d2:79:51:da:14:1a:ff:af:aa:f5:ca:18:
7e:85:f9:94:85:89:52:56:c3:69:64:cd:84:26:7e:7a:fd:fe:
d1:d6:41:38:fa:55:fc:fe:12:27:cc:c1:96:ab:69:3f:4c:60:
99:5b:6e:99:04:eb:5f:31:07:ab:6a:a0:5c:03:72:e5:ee:d6:
f8:c0:33:11:9a:90:6f:9c:61:60:99:55:cb:bd:16:7f:e1:21:
ea:20:3e:61:1c:e8:a5:b8:3e:f6:10:52:3f:09:86:34:4a:a3:
ab:eb:ae:39:76:9e:19:e4:be:9b:cd:57:65:93:26:58:2f:80:
d4:ef:d9:31:55:48:60:ff:4c:97:67:38:27:a9:de:0f:c2:a6:
75:d6:85:82:14:3a:b0:f9:b1:0f:10:87:f3:f8:2d:57:d1:9f:
e8:62:fa:9c:b9:d5:a4:01:9e:e8:58:6e:13:b2:1f:a1:1c:60:
50:e8:75:37:3e:3c:8c:a6:b4:d6:f9:da:d5:e6:7d:cd:19:4a:
2e:d5:18:e8:58:cc:6a:cd:aa:e6:76:2a:15:b1:ad:3b:74:9b:
7f:60:ce:38:0e:d3:43:4f:1f:a0:bc:f1:1e:0e:bc:65:f0:56:
32:72:00:69:33:ae:ba:31:8b:9d:0f:09:10:26:4e:d9:f5:fa:
cc:66:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org