Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x6aGCV6jFbwh9kceyQMMSLDhZbM.roa
File: x6aGCV6jFbwh9kceyQMMSLDhZbM.roa (raw, json)
Hash identifier: Wfm5V7nNCc8vUpQISS1pw5TLOcEIgMfILzY3QpoHkEo=
Subject key identifier: C7:A6:86:09:5E:A3:15:BC:21:F6:47:1E:C9:03:0C:48:B0:E1:65:B3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1344
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x6aGCV6jFbwh9kceyQMMSLDhZbM.roa
Signing time: Wed 29 Sep 2021 02:55:34 +0000
ROA not before: Wed 29 Sep 2021 02:55:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4932 (0x1344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C7A686095EA315BC21F6471EC9030C48B0E165B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:48:d9:c7:35:a8:97:fd:e3:f9:65:9b:68:
0f:0a:ac:8c:55:48:bd:f3:c9:6a:26:53:54:b4:be:
e4:3a:df:43:f2:9a:27:54:cc:45:38:6f:14:c9:64:
6b:6e:04:da:fd:1d:ff:f6:39:2a:65:6f:da:10:eb:
7e:80:7c:9a:1a:70:84:c7:15:e9:94:0d:c3:98:0b:
61:18:bd:ec:ab:f4:29:ca:7c:23:b4:8e:0a:5a:d7:
09:03:18:90:80:76:61:a3:96:41:b4:d8:14:dd:a9:
ce:b2:37:28:10:88:d0:3a:60:4c:45:e6:da:2f:d8:
98:d4:d0:86:42:fa:25:56:71:80:6b:ba:10:64:cd:
97:f2:32:2c:f6:44:58:b5:9a:60:42:23:6e:45:f0:
9a:2b:f5:68:b1:75:e3:a9:cf:a4:b5:d9:31:99:4f:
0c:4c:41:d7:46:4a:c5:36:f3:87:a6:4f:e1:c3:32:
63:bb:d1:0c:61:3a:ed:64:6b:65:a1:75:36:13:ab:
ee:fe:7c:bc:71:9b:c3:88:8c:43:df:ed:0a:cd:bf:
55:d8:42:78:1a:19:e4:86:02:16:50:45:52:cb:2d:
6c:6d:29:4b:52:5b:f3:50:29:08:b3:5a:4a:f2:0d:
1a:fe:8e:25:51:8d:0c:3f:9d:85:70:6a:ee:bc:f1:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:86:09:5E:A3:15:BC:21:F6:47:1E:C9:03:0C:48:B0:E1:65:B3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x6aGCV6jFbwh9kceyQMMSLDhZbM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.189.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2a:08:ec:f1:8f:69:10:f3:97:4f:75:6f:e1:c9:31:a3:a8:
a0:e9:3f:62:19:02:de:68:e6:5f:ac:cf:f8:c9:8f:ce:06:3c:
91:e1:5b:24:f6:5b:7b:4f:a9:24:71:3d:9a:02:68:24:90:ae:
93:f4:88:7e:aa:ae:11:72:cc:ac:1c:d1:31:ca:9a:ae:50:74:
f3:16:c3:98:cd:1c:5f:43:9e:58:6f:47:b3:0e:14:f9:15:93:
3d:5f:1e:e3:c9:e3:d8:92:86:1f:e7:7f:49:62:fa:03:24:7d:
0d:44:b5:b4:58:ca:3e:e3:e2:61:7b:b9:1b:6c:36:f1:35:d3:
56:49:af:ac:fc:7f:b3:68:a9:f0:37:98:d0:4e:4d:29:9a:8e:
12:31:63:ea:07:a8:72:77:17:8b:19:20:89:6e:ce:7c:e8:07:
27:31:4e:d8:e6:22:5d:35:d7:27:70:97:56:c1:cc:35:c0:9d:
30:3e:f4:7b:26:59:29:cd:ae:99:c4:dc:16:db:d5:1d:ef:6e:
28:d7:56:b9:00:04:8f:2b:df:3f:b5:9e:e6:68:d0:8c:55:9c:
ec:01:6e:34:30:2d:20:c5:8d:bc:67:53:d7:fa:64:6c:90:c4:
0b:03:55:1b:74:bb:69:5a:24:7c:76:20:cc:a4:42:20:c7:8e:
d5:cb:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org