Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1cg2AONsnD8po_r2CerufyTmml0.roa
File: 1cg2AONsnD8po_r2CerufyTmml0.roa (raw, json)
Hash identifier: jKalB+tPJQwCUWtJwFEjbPMghYOh8vQjd8vqiDEjfMw=
Subject key identifier: D5:C8:36:00:E3:6C:9C:3F:29:A3:FA:F6:09:EA:EE:7F:24:E6:9A:5D
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0AC6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1cg2AONsnD8po_r2CerufyTmml0.roa
Signing time: Sun 07 Feb 2021 11:40:23 +0000
ROA not before: Sun 07 Feb 2021 11:40:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17213
IP address blocks: 60.198.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:40:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D5C83600E36C9C3F29A3FAF609EAEE7F24E69A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:82:a6:44:9d:01:fc:f1:2b:a8:15:b1:88:
57:03:d3:8a:13:d5:79:75:95:8b:4c:66:26:86:49:
0f:f4:72:5a:39:4d:0a:b9:f0:ff:11:11:06:7c:5d:
5f:03:ce:61:51:ee:dd:cc:70:d8:0a:54:0f:f7:dc:
1a:61:57:02:69:86:7a:3a:31:2f:ac:3a:05:31:cb:
28:60:96:48:90:f2:15:ac:62:29:55:47:d7:bc:56:
ae:df:33:99:c0:f6:69:52:67:39:d8:66:05:ab:26:
b6:be:cb:99:6d:ad:f9:4f:6d:8d:53:72:30:e3:09:
ff:08:46:92:5e:49:61:8a:dd:ad:f4:ad:5d:ff:38:
4f:c8:23:29:ef:a9:c1:8d:ec:76:c0:59:36:e4:be:
eb:66:9d:2c:05:3b:bd:34:8e:36:ed:d9:fc:3d:63:
99:40:11:89:ed:e6:05:dc:00:58:6a:0e:29:3d:5c:
b9:32:5a:96:9f:8c:5e:ee:af:13:e8:89:b8:d1:72:
af:ff:98:39:ea:48:65:2a:7c:f9:5d:d0:e3:42:27:
a3:bd:8b:52:04:3b:bd:2b:06:ad:6f:46:d5:48:d0:
2f:4f:98:f2:0e:1a:91:35:e7:68:31:dc:a5:6e:e5:
b6:c9:a8:82:7a:ef:03:72:36:2c:c7:21:71:7c:0e:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:36:00:E3:6C:9C:3F:29:A3:FA:F6:09:EA:EE:7F:24:E6:9A:5D
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1cg2AONsnD8po_r2CerufyTmml0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.153.0/24
Signature Algorithm: sha256WithRSAEncryption
15:40:83:31:b1:61:9b:c0:ff:44:b1:4a:a1:51:f5:93:73:de:
ae:ef:2f:77:5d:71:db:11:b5:f9:67:71:ef:d6:f2:ee:d6:21:
f8:90:d3:a0:4f:a8:77:c8:94:24:b1:98:30:c1:4a:e2:6f:bc:
34:02:31:cc:7c:27:14:b3:b7:85:81:c6:15:66:d6:db:7d:32:
93:c1:c3:26:a7:53:53:ee:9c:70:69:ed:22:d4:d3:06:d3:12:
f6:66:51:24:8e:89:c3:b6:9c:3f:a9:dd:79:b9:66:fd:a4:f0:
d7:d3:82:b7:c2:3f:f6:b0:35:b6:8f:a6:29:b2:67:7e:be:21:
1d:1b:c5:8d:79:c8:94:29:d5:59:a1:9c:3d:e4:92:6f:84:6e:
10:9a:b5:d9:f7:1b:e5:54:d3:0f:14:f5:9e:48:83:f9:84:f2:
3b:b2:9d:57:3d:41:97:bd:f9:98:75:dc:18:34:c8:ca:97:25:
b9:b3:3f:b7:1d:7e:4a:e7:f4:1d:bf:e3:9c:93:b4:37:2a:78:
19:82:a5:38:0d:66:91:9d:65:80:2b:af:75:eb:88:12:9b:78:
9c:ed:72:c4:bf:e2:e3:d7:51:19:b1:ad:c3:c7:83:df:42:d2:
b2:b0:ec:94:b0:93:f1:8e:8f:b0:50:9a:bc:74:b6:08:ca:d2:
4d:ad:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:15 2025 by rpki-client