Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-SPoFa8BpHfvyxA1hujo9JjgwsQ.roa
File: -SPoFa8BpHfvyxA1hujo9JjgwsQ.roa (raw, json)
Hash identifier: 1sXUT5WNZ2dtV6wQ/GiHl7DoJFZIW7tGjdcm27BbmPM=
Subject key identifier: F9:23:E8:15:AF:01:A4:77:EF:CB:10:35:86:E8:E8:F4:98:E0:C2:C4
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0AF8
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-SPoFa8BpHfvyxA1hujo9JjgwsQ.roa
Signing time: Sun 07 Feb 2021 12:47:47 +0000
ROA not before: Sun 07 Feb 2021 12:47:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 19551
IP address blocks: 124.108.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2808 (0xaf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 12:47:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F923E815AF01A477EFCB103586E8E8F498E0C2C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:5a:b9:d8:cc:fa:a8:df:c0:54:fe:45:c9:
98:97:22:1b:b5:4b:4a:10:d7:33:aa:2a:1c:fd:de:
92:a2:8f:0c:78:ea:d8:7f:2b:42:81:ad:8a:eb:d4:
ca:25:72:26:3a:63:24:68:a4:ea:d8:de:08:c1:3d:
fd:6d:22:7d:77:b2:84:2a:4b:f0:ef:91:9b:32:db:
53:35:4d:65:fe:69:0c:40:0a:84:b0:f0:ed:a5:42:
19:be:a9:d4:19:de:78:2b:a8:c6:a1:84:ad:85:c0:
7e:5c:81:4f:d2:84:c0:8c:b4:85:75:57:a9:af:7d:
bb:4f:86:4f:eb:25:71:98:04:32:dd:30:d7:ce:16:
1c:0f:42:b0:25:33:c3:29:1a:8b:ad:a3:13:f3:c5:
19:16:14:27:ce:ba:b8:06:1f:b0:55:80:58:0b:10:
b4:42:a9:1b:3e:c7:0d:d0:21:49:72:b0:b8:3e:f6:
4e:b4:e8:10:61:37:01:e1:48:96:d0:fb:b6:f9:63:
db:a5:9d:29:c1:23:9b:e7:1a:e0:00:c6:37:ca:70:
20:92:4f:40:0e:19:b4:f2:1b:c2:21:2b:5c:73:24:
2a:7c:a4:be:ab:19:e7:a7:1f:cc:32:9a:48:ef:45:
04:d1:15:b2:81:ca:4f:84:46:b9:6f:2b:28:3d:29:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:E8:15:AF:01:A4:77:EF:CB:10:35:86:E8:E8:F4:98:E0:C2:C4
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-SPoFa8BpHfvyxA1hujo9JjgwsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.160.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6e:33:4d:1b:58:b2:4e:1d:11:a0:76:26:73:80:f3:2b:72:
f7:d9:7f:4c:c6:45:d1:f5:bf:28:cb:c3:75:91:1a:47:02:c7:
1d:15:d6:4f:2e:4c:99:c0:ae:bf:d8:ea:95:e7:7b:1a:0b:97:
64:f8:d8:c4:93:f4:2d:de:ce:59:50:63:f9:79:d8:08:5c:7d:
11:29:4a:ab:66:66:51:b9:1a:98:95:56:63:ab:10:4c:17:fd:
38:a7:e2:9f:ba:d3:93:17:61:2e:ea:b5:ea:cd:8c:7a:a9:c4:
e2:a4:1c:b4:61:82:cf:e9:bd:c2:87:4b:7c:de:b2:5c:3c:2a:
f8:6d:35:64:82:97:7c:92:c1:98:83:ec:06:ae:f9:a8:68:4e:
76:02:e0:d5:ac:c9:9c:3d:70:b3:12:7f:d5:25:e6:58:37:e9:
b8:99:6e:cd:2b:31:6b:b7:77:5d:ee:0a:73:f6:b1:4f:91:cf:
52:04:17:6d:d6:ee:69:87:d5:ae:16:f9:82:38:b4:a2:d2:c7:
e5:74:d1:6a:8f:5a:88:28:b6:79:ae:8d:81:63:6c:97:2d:54:
3d:d2:31:f5:3d:4e:d3:46:5f:f0:85:3c:0d:fc:55:cd:d8:e0:
88:ce:ec:52:16:a8:af:0e:51:d5:71:41:c6:a1:76:0c:a5:e6:
74:47:a2:60
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MjQ3NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEY5MjNFODE1QUYwMUE0
NzdFRkNCMTAzNTg2RThFOEY0OThFMEMyQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/j1q52Mz6qN/AVP5FyZiXIhu1S0oQ1zOqKhz93pKijwx46th/
K0KBrYrr1MolciY6YyRopOrY3gjBPf1tIn13soQqS/DvkZsy21M1TWX+aQxACoSw
8O2lQhm+qdQZ3ngrqMahhK2FwH5cgU/ShMCMtIV1V6mvfbtPhk/rJXGYBDLdMNfO
FhwPQrAlM8MpGoutoxPzxRkWFCfOurgGH7BVgFgLELRCqRs+xw3QIUlysLg+9k60
6BBhNwHhSJbQ+7b5Y9ulnSnBI5vnGuAAxjfKcCCST0AOGbTyG8IhK1xzJCp8pL6r
GeenH8wymkjvRQTRFbKByk+ERrlvKyg9Kc1JAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU+SPoFa8BpHfvyxA1hujo9JjgwsQwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvLVNQb0ZhOEJwSGZ2eXhB
MWh1am85Smpnd3NRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AHxsoDANBgkqhkiG9w0BAQsFAAOCAQEAl24zTRtYsk4dEaB2JnOA8yty99l/TMZF
0fW/KMvDdZEaRwLHHRXWTy5MmcCuv9jqled7GguXZPjYxJP0Ld7OWVBj+XnYCFx9
ESlKq2ZmUbkamJVWY6sQTBf9OKfin7rTkxdhLuq16s2MeqnE4qQctGGCz+m9wodL
fN6yXDwq+G01ZIKXfJLBmIPsBq75qGhOdgLg1azJnD1wsxJ/1SXmWDfpuJluzSsx
a7d3Xe4Kc/axT5HPUgQXbdbuaYfVrhb5gji0otLH5XTRao9aiCi2ea6NgWNsly1U
PdIx9T1O00Zf8IU8DfxVzdjgiM7sUhaorw5R1XFBxqF2DKXmdEeiYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org