Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1V0Dq_lLOcr3KmY-EDehZddJLek.roa
File: 1V0Dq_lLOcr3KmY-EDehZddJLek.roa (raw, json)
Hash identifier: F2wlWttUZnLqirMEJ2ekfT3cUUAmdvlwDVLgC7b31dg=
Subject key identifier: D5:5D:03:AB:F9:4B:39:CA:F7:2A:66:3E:10:37:A1:65:D7:49:2D:E9
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0966
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1V0Dq_lLOcr3KmY-EDehZddJLek.roa
Signing time: Wed 16 Dec 2020 01:59:53 +0000
ROA not before: Wed 16 Dec 2020 01:59:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 60.199.193.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 16 01:59:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D55D03ABF94B39CAF72A663E1037A165D7492DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d9:95:75:83:f1:9f:b3:55:2c:17:dc:a4:e4:
e0:aa:c9:30:f2:49:40:0a:68:ff:f0:1b:24:c6:ca:
b2:db:6e:f6:49:3b:28:77:c6:70:e3:4f:61:47:35:
d0:01:22:9f:18:42:a6:f8:48:69:9a:5f:1a:95:9a:
fd:db:22:79:3c:32:93:75:9d:e1:a0:60:57:cd:89:
96:8f:ff:9e:45:0b:8f:80:fc:0d:8c:2f:43:cc:c3:
20:59:8c:8e:5b:f5:56:bc:28:58:5a:15:62:6d:60:
33:68:12:9d:74:94:6f:b2:ba:a7:16:27:54:ed:a9:
e3:8d:a6:dd:0c:de:ce:78:5d:45:e5:de:52:3f:71:
03:4a:82:91:39:68:f3:a5:17:6a:59:d5:fd:e5:e7:
ba:e0:8e:ff:94:12:b8:72:b7:bc:90:d5:62:10:95:
a4:1b:8e:84:ae:bb:dc:93:74:21:2e:14:c8:d1:81:
67:86:a6:92:97:b6:73:f0:89:ce:09:e8:7c:87:37:
2b:e3:7f:81:11:7d:7b:ad:8b:b8:ef:08:16:c1:16:
13:2c:a2:e0:46:2b:53:91:08:55:45:3c:ce:94:fa:
67:02:ad:f7:ca:76:ee:1c:18:84:b9:5d:66:ea:a2:
52:ec:3e:f2:7a:8c:bd:a7:6c:b1:d0:43:a5:10:45:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:03:AB:F9:4B:39:CA:F7:2A:66:3E:10:37:A1:65:D7:49:2D:E9
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1V0Dq_lLOcr3KmY-EDehZddJLek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.193.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d7:06:e1:c8:f0:87:4a:88:7a:46:a4:4c:57:da:42:18:cb:
6a:89:c1:75:5b:5f:ed:0c:c5:85:e4:18:0a:17:01:18:74:7f:
2a:ec:3d:12:54:a2:ef:23:26:92:e7:70:5b:9c:46:a5:b2:ef:
b4:36:89:d7:92:b0:17:71:74:ed:29:76:a7:78:9a:b1:e5:03:
23:81:ee:cb:67:ff:05:dc:7d:96:b6:3d:e4:a7:df:49:6e:ca:
1a:c1:be:3e:bd:f3:b1:f5:3d:62:4c:c9:8e:ae:6b:0f:87:6e:
71:ff:75:7b:00:46:06:e0:4b:ef:07:66:c9:43:25:74:85:d6:
e7:05:4e:df:00:1b:b1:14:f4:6d:9f:68:9d:ca:29:0e:ca:a8:
11:c6:16:b0:a7:b0:60:a8:4e:8f:10:60:96:09:84:3e:16:45:
fd:9d:54:dc:eb:20:d5:ed:ad:03:96:b4:a7:0b:2a:c1:81:28:
86:57:20:4f:84:58:46:b6:e9:ec:7c:cf:86:f2:e0:91:55:5e:
3d:94:8c:6e:65:41:ea:a5:80:2b:0b:19:67:80:d6:e6:35:7d:
d5:cb:a5:32:5a:29:63:68:57:5f:7d:e0:c4:50:38:6d:94:e7:
4c:83:f4:3d:e6:77:dd:ab:8f:aa:5f:a5:2c:56:46:f1:30:ca:
81:40:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org