Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tCTutZkb8qhJNsUzxy4niy7_LmU.roa
File: tCTutZkb8qhJNsUzxy4niy7_LmU.roa (raw, json)
Hash identifier: QusbStfbHfl/vM3bmQn1EIQefVCuV3fBHuc3gonto2s=
Subject key identifier: B4:24:EE:B5:99:1B:F2:A8:49:36:C5:33:C7:2E:27:8B:2E:FF:2E:65
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ED9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tCTutZkb8qhJNsUzxy4niy7_LmU.roa
Signing time: Sun 07 Feb 2021 11:57:00 +0000
ROA not before: Sun 07 Feb 2021 11:57:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 119.77.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3801 (0xed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 11:57:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B424EEB5991BF2A84936C533C72E278B2EFF2E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:d0:e1:9f:27:35:3e:76:03:aa:5e:19:bb:
b6:68:3c:ea:ae:40:d4:1a:d2:5e:3e:1a:c8:5e:e4:
5b:63:1d:18:54:e3:5c:9e:cf:4b:72:e0:a8:d7:de:
4d:a5:75:c4:68:10:25:16:8b:25:2e:c2:34:3c:3e:
71:fd:ee:10:6a:68:3a:bc:d5:50:5c:fb:55:76:79:
58:e9:ad:ae:26:77:07:8e:19:f6:28:42:12:f3:e8:
36:fb:08:e4:0c:99:67:5c:24:84:26:33:28:57:21:
5d:16:70:ce:e3:e8:18:4f:0c:25:9b:75:4b:ee:d6:
d4:f4:43:a4:73:a7:fe:40:f4:8b:71:f5:5e:57:66:
e4:96:5c:7c:83:b3:41:0d:54:d0:68:7c:21:94:1c:
70:2f:57:c8:7f:a7:f9:25:4e:28:1c:78:48:65:72:
02:7e:e8:aa:ed:14:72:5c:d6:c9:b4:0a:94:2f:24:
35:6d:82:1e:a4:7d:6e:10:8c:04:e5:86:20:bf:22:
b2:39:f7:0a:83:b5:70:85:29:c1:69:48:b0:5f:91:
b6:9f:92:1f:2f:a1:cc:02:23:34:2e:6a:8f:92:49:
35:58:4c:a5:fe:33:18:ad:d2:15:85:81:6d:4d:62:
15:0d:20:7d:c7:64:cf:30:5b:1e:fc:6e:f9:c0:43:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:24:EE:B5:99:1B:F2:A8:49:36:C5:33:C7:2E:27:8B:2E:FF:2E:65
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tCTutZkb8qhJNsUzxy4niy7_LmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.199.0/24
Signature Algorithm: sha256WithRSAEncryption
43:9d:28:8e:bc:c5:f6:b1:4b:d6:0f:21:4f:7b:68:37:37:9a:
68:15:09:59:27:8c:d7:0c:9e:69:24:f9:bc:87:cc:1e:9b:5c:
44:f4:11:cc:bd:b3:4c:bb:a8:20:19:e8:67:60:74:7c:48:19:
0e:80:c6:dd:63:d3:70:2d:1f:88:0d:a7:12:96:8d:ff:24:0f:
38:94:30:bf:b8:93:13:2d:6a:ed:2a:c1:7e:bb:d5:f9:59:3c:
f7:d9:18:66:d3:e7:58:88:fe:c9:44:fa:9c:41:e5:3d:a1:52:
02:9e:fb:61:11:11:37:27:f2:ea:cb:fc:ec:7d:36:7c:33:8d:
08:18:13:23:1f:f8:e9:7f:a9:e8:07:f8:8b:e6:55:31:a9:e8:
2e:ed:9a:5d:4b:90:4e:e4:86:fe:e1:68:81:6d:09:5b:51:17:
07:0c:c7:ec:90:c1:d6:43:1a:88:1a:3c:c8:81:a1:1f:71:10:
a0:9d:16:c2:1c:39:25:03:91:6c:14:4d:71:4d:9c:55:f0:5d:
86:fb:86:3c:1f:65:be:1e:10:fa:58:4e:36:12:5b:2c:b3:4e:
1d:fe:cf:3d:9a:1d:33:cf:8e:07:01:7b:e9:0e:6c:48:ad:49:
e1:87:d5:4d:e6:12:4b:d2:77:d6:3c:38:67:b9:67:83:f3:14:
9c:d5:a1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org