Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/10TncGbWwm82llXXIXNepRHWy_M.roa
File: 10TncGbWwm82llXXIXNepRHWy_M.roa (raw, json)
Hash identifier: 7wdqBM8FbT4kxrZv9nDMT+QJvRsRf52Y/Pil8Jm0lAo=
Subject key identifier: D7:44:E7:70:66:D6:C2:6F:36:96:55:D7:21:73:5E:A5:11:D6:CB:F3
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0831
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/10TncGbWwm82llXXIXNepRHWy_M.roa
Signing time: Tue 29 Sep 2020 09:57:52 +0000
ROA not before: Tue 29 Sep 2020 09:57:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131611
IP address blocks: 124.9.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097 (0x831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D744E77066D6C26F369655D721735EA511D6CBF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:07:b7:70:53:5b:32:e0:2e:83:1d:2c:55:
0d:42:95:84:a4:cd:da:03:be:e4:ad:a8:3e:a8:5f:
3b:bc:7a:14:fe:3d:0d:9b:ca:7d:aa:40:69:2e:ba:
1f:e1:d2:30:29:5c:05:7c:ae:2c:e0:ee:d9:cc:d7:
c7:6a:73:e6:2f:61:84:bb:8d:14:d7:7a:79:f7:0d:
d2:c8:8e:48:d1:61:fa:dd:8d:0e:16:ae:4a:70:61:
a9:f8:76:1a:49:b1:85:98:ce:b7:02:3b:f2:3b:de:
c3:2e:22:1a:28:35:37:3f:db:c3:d0:98:80:fe:51:
64:8a:ae:4a:db:3a:74:a4:76:59:4a:5f:96:10:33:
20:09:bc:dd:d6:7b:08:56:3e:8c:cc:3d:53:94:fc:
74:7d:30:e0:90:8d:02:5b:c5:84:c8:e4:11:4f:61:
ec:1b:d5:b0:ef:fc:24:2e:d5:5c:86:8b:83:5a:e3:
92:3f:60:9a:f8:3a:1a:73:67:cd:d3:b9:d0:bd:07:
08:5f:d3:e1:e6:ab:56:c5:b8:ef:aa:89:8b:ed:dd:
a0:97:6e:8a:02:e1:82:03:17:e2:8c:c6:0f:0c:88:
64:bb:48:25:60:c3:7b:b7:48:b8:a5:12:86:67:3c:
26:7a:af:e0:fd:20:0b:5f:c6:ba:48:7a:2d:90:b7:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:E7:70:66:D6:C2:6F:36:96:55:D7:21:73:5E:A5:11:D6:CB:F3
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/10TncGbWwm82llXXIXNepRHWy_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.9.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:96:7d:d2:c7:fc:c6:42:cb:27:ec:1a:d4:ce:fa:7c:d8:7a:
ec:6f:46:31:9f:cb:02:89:68:e5:95:04:b7:6e:3e:88:c9:b4:
71:c1:f1:de:68:12:6a:05:3a:ea:be:8b:49:51:c4:ab:5e:99:
46:87:c3:c4:ac:d8:74:63:e3:20:86:d5:fb:cc:34:38:ea:16:
bf:9a:f5:6f:a6:8d:3d:0e:27:ee:0f:4b:3e:d5:fa:7b:1c:3c:
5d:97:9e:90:5c:1f:2f:b1:bd:7a:3d:a2:27:9c:70:84:51:f5:
b8:26:ce:1f:61:ba:70:fe:32:8f:3e:90:a2:3e:64:84:65:2d:
7d:4f:83:1f:5b:5e:50:a7:89:93:1d:b6:d7:32:8d:1c:7f:19:
27:bf:20:16:dc:c6:6f:ef:fe:df:c0:10:ed:f8:ed:07:20:04:
9a:1b:cc:3d:4d:26:96:44:a9:00:40:7c:2e:94:9e:fd:c2:46:
56:18:a6:6a:25:9e:44:1d:50:5b:b2:51:57:37:e4:3f:ee:d0:
3f:19:45:29:3d:3c:ab:1e:bd:f4:1b:de:fa:ba:10:09:5e:cb:
2d:ab:ed:e9:e3:b5:26:78:d0:ef:bc:8c:78:b1:b1:ed:71:ae:
be:48:9d:fc:03:2d:be:15:11:01:31:38:e2:c5:2d:b2:4f:c5:
3d:0f:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org