Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-ozx2qZd95lKsDpqV3xDuRihRmw.roa
File: -ozx2qZd95lKsDpqV3xDuRihRmw.roa (raw, json)
Hash identifier: vuFLeOupHctCnOD/9QQsY49xatVYmM02FzkHVwJazTk=
Subject key identifier: FA:8C:F1:DA:A6:5D:F7:99:4A:B0:3A:6A:57:7C:43:B9:18:A1:46:6C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B36
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-ozx2qZd95lKsDpqV3xDuRihRmw.roa
Signing time: Sun 07 Feb 2021 13:10:50 +0000
ROA not before: Sun 07 Feb 2021 13:10:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.35.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:10:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FA8CF1DAA65DF7994AB03A6A577C43B918A1466C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ed:37:35:6c:1f:ee:ba:7c:32:e7:97:a9:70:
a5:32:20:a0:dc:b0:7c:32:97:28:88:54:c1:8a:b4:
59:d0:23:9f:0a:d1:c2:b9:5f:d7:b8:60:d3:5b:8e:
1b:a2:12:10:43:79:e3:a4:f9:fd:b6:78:f7:cd:0b:
d3:73:b2:f6:64:9b:f2:4c:86:92:db:ea:71:cb:a4:
07:ad:f5:97:71:79:0d:3e:86:2d:b6:2f:a1:a9:83:
d7:a5:c9:b0:fb:12:8c:b4:e9:3c:21:08:2d:13:9d:
40:a0:cd:b9:25:27:ed:79:6d:d9:f4:12:e7:c9:17:
fd:cd:d5:ec:d4:ad:4b:2b:76:11:ec:7f:ff:72:12:
6d:0f:53:2e:17:a4:22:35:70:88:bc:6b:0e:0f:0b:
35:b0:d1:8c:f3:25:1d:ca:ab:73:3f:e8:18:f3:a8:
1c:bd:0c:09:db:50:60:00:0b:e7:70:bc:24:f6:86:
a2:9a:f2:8b:e2:de:70:7b:bd:14:2b:76:6b:9a:e3:
46:a8:89:0e:d8:60:0e:da:ea:2c:07:97:a9:e4:b3:
14:52:47:3d:64:84:33:6f:dc:02:a4:a1:be:7a:22:
bf:14:6e:5c:b4:7d:b2:05:3d:5a:1f:a4:08:90:59:
47:de:8f:a0:aa:71:e6:67:f1:6f:90:50:87:b3:82:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:F1:DA:A6:5D:F7:99:4A:B0:3A:6A:57:7C:43:B9:18:A1:46:6C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-ozx2qZd95lKsDpqV3xDuRihRmw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.35.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9a:0d:29:03:74:ab:48:98:ab:b7:8f:e6:3b:19:fa:5f:47:
5e:9c:db:23:39:62:e2:7f:e3:94:da:01:8d:2a:e5:14:1e:76:
42:74:de:2c:af:eb:a7:15:39:7d:4a:1a:97:49:ea:b9:e5:77:
8f:d2:62:ac:8a:0d:f4:cd:6d:de:af:07:37:2b:5a:ce:18:f9:
93:9b:bd:0f:44:63:50:ad:c6:21:ed:75:81:45:fa:29:57:31:
a7:13:24:0a:6b:8d:e3:95:cb:f5:b1:ae:00:9d:bc:1b:64:cb:
89:83:91:d0:7e:e7:d5:49:0c:65:ee:c1:d3:76:db:bf:74:07:
44:52:61:b0:f8:15:c1:41:a3:8b:88:b8:ba:fd:a5:c0:63:b7:
0b:19:07:f6:f9:60:b4:84:10:c7:c8:26:f7:c1:aa:a0:9d:7b:
20:15:a7:5b:43:2a:69:ce:77:a4:85:27:75:30:cc:cf:2d:85:
b9:62:36:e6:87:db:f3:e4:72:c7:03:36:51:f8:02:c1:ae:1e:
3e:18:81:01:6b:a8:f0:9e:58:4b:66:25:b7:29:3a:6f:ca:2d:
ed:76:bd:3d:75:05:52:03:46:0b:6c:79:8c:24:3a:52:21:76:
de:05:68:92:eb:a0:e4:a4:89:29:f5:1a:57:60:cb:b3:b7:fa:
52:2c:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org