Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2iEPgoGcdO9qJaN71f_vdKKM9bE.roa
File: 2iEPgoGcdO9qJaN71f_vdKKM9bE.roa (raw, json)
Hash identifier: slH28W9AvSTINKeZ4zn16wDUWcedtULh4Ug2HQDO1x4=
Subject key identifier: DA:21:0F:82:81:9C:74:EF:6A:25:A3:7B:D5:FF:EF:74:A2:8C:F5:B1
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0812
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2iEPgoGcdO9qJaN71f_vdKKM9bE.roa
Signing time: Tue 29 Sep 2020 09:57:44 +0000
ROA not before: Tue 29 Sep 2020 09:57:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.67.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DA210F82819C74EF6A25A37BD5FFEF74A28CF5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:93:c8:b7:88:d2:ac:68:52:99:08:50:c5:
1e:4f:b9:09:95:d7:6d:fe:d2:65:a1:70:56:85:6f:
55:77:8c:7e:f9:84:14:d1:5f:f5:32:19:3c:4a:ff:
58:ed:9f:19:44:f7:06:94:2d:09:96:f5:2a:88:e6:
e7:3b:a3:67:4c:90:0d:72:54:6d:e8:5f:17:1c:13:
3c:5d:14:db:49:00:77:05:f0:f4:f3:3c:ff:73:d0:
fd:14:bb:a4:d1:d0:d0:16:a6:68:28:4d:da:6f:d3:
0f:b4:d3:b4:be:55:3c:cb:54:2d:e5:e3:bd:0c:48:
52:04:d5:d8:2c:c8:73:c7:3b:96:10:65:aa:5d:62:
76:03:bc:27:b7:b3:a4:3b:96:82:bd:65:68:37:92:
b2:e0:1e:5c:f2:76:89:fd:c4:b3:22:88:14:a0:28:
e6:51:06:dd:f5:76:11:13:00:a0:e3:99:6e:12:38:
75:07:d5:45:e5:a7:db:57:b2:e0:c8:04:71:27:a1:
77:64:bb:1b:bf:b9:c5:f8:9c:c0:55:3e:9e:1d:25:
60:84:bc:40:12:35:f9:77:f9:26:13:e3:d1:8e:52:
6c:39:60:0b:1f:38:8f:7f:67:52:81:2f:60:43:0f:
02:43:d0:b2:67:fe:07:ab:2b:7f:d8:2c:8d:d6:57:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:0F:82:81:9C:74:EF:6A:25:A3:7B:D5:FF:EF:74:A2:8C:F5:B1
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2iEPgoGcdO9qJaN71f_vdKKM9bE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:69:48:2c:f8:c8:b5:48:cc:82:c5:ab:15:d4:d0:45:df:de:
cf:73:e8:2c:56:1b:c0:ed:2e:20:5a:84:e6:3a:ad:3d:39:a4:
7e:2f:55:40:e5:e0:a5:98:dd:8f:c5:22:2c:de:73:3e:7f:b1:
a6:48:69:80:73:4b:50:e5:2b:fa:56:46:26:4b:d6:aa:17:40:
66:43:29:2d:58:85:aa:8b:a2:3e:c8:8b:4f:79:4f:fb:09:c7:
8a:ca:01:ea:b3:ab:91:5d:2f:fe:2c:72:f5:c5:c9:3c:2d:2a:
c5:af:e4:57:31:37:02:b9:16:97:56:34:38:30:88:c0:dd:31:
58:6e:a2:8f:22:49:19:c3:3a:f2:46:c3:60:05:ef:b1:82:9c:
63:2b:ee:ce:af:26:17:9d:08:35:64:e8:28:55:53:3c:5f:53:
6c:3e:e1:b6:5d:bb:76:00:4b:1b:ee:cd:a9:9a:25:96:6a:ad:
3c:b9:37:73:96:21:9e:95:36:e8:87:3e:dc:07:35:fc:cc:1c:
96:fa:25:fc:1a:3d:7c:36:11:05:1d:94:ed:4e:85:fc:0a:d4:
f2:48:58:c2:74:bc:c0:6e:74:97:99:64:65:e9:07:47:73:7b:
4d:3e:c0:e9:b0:09:a2:94:10:fe:ee:50:db:cf:d9:06:d2:bb:
f4:d2:ec:f0
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMDA5Mjkw
OTU3NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERBMjEwRjgyODE5Qzc0
RUY2QTI1QTM3QkQ1RkZFRjc0QTI4Q0Y1QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFspPIt4jSrGhSmQhQxR5PuQmV123+0mWhcFaFb1V3jH75hBTR
X/UyGTxK/1jtnxlE9waULQmW9SqI5uc7o2dMkA1yVG3oXxccEzxdFNtJAHcF8PTz
PP9z0P0Uu6TR0NAWpmgoTdpv0w+007S+VTzLVC3l470MSFIE1dgsyHPHO5YQZapd
YnYDvCe3s6Q7loK9ZWg3krLgHlzydon9xLMiiBSgKOZRBt31dhETAKDjmW4SOHUH
1UXlp9tXsuDIBHEnoXdkuxu/ucX4nMBVPp4dJWCEvEASNfl3+SYT49GOUmw5YAsf
OI9/Z1KBL2BDDwJD0LJn/gerK3/YLI3WV84VAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU2iEPgoGcdO9qJaN71f/vdKKM9bEwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMmlFUGdvR2NkTzlxSmFO
NzFmX3ZkS0tNOWJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BNJDkDANBgkqhkiG9w0BAQsFAAOCAQEAK2lILPjItUjMgsWrFdTQRd/ez3PoLFYb
wO0uIFqE5jqtPTmkfi9VQOXgpZjdj8UiLN5zPn+xpkhpgHNLUOUr+lZGJkvWqhdA
ZkMpLViFqouiPsiLT3lP+wnHisoB6rOrkV0v/ixy9cXJPC0qxa/kVzE3ArkWl1Y0
ODCIwN0xWG6ijyJJGcM68kbDYAXvsYKcYyvuzq8mF50INWToKFVTPF9TbD7htl27
dgBLG+7NqZollmqtPLk3c5YhnpU26Ic+3Ac1/Mwclvol/Bo9fDYRBR2U7U6F/ArU
8khYwnS8wG50l5lkZekHR3N7TT7A6bAJopQQ/u5Q28/ZBtK79NLs8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org