Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3ArbtLFA2zngGu_xP-4esTWu3a0.roa
File: 3ArbtLFA2zngGu_xP-4esTWu3a0.roa (raw, json)
Hash identifier: e/G2d1s7+PJ64LUP9GZzJGR8rNv9PoNhLNY0KX9tHK4=
Subject key identifier: DC:0A:DB:B4:B1:40:DB:39:E0:1A:EF:F1:3F:EE:1E:B1:35:AE:DD:AD
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 07FC
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3ArbtLFA2zngGu_xP-4esTWu3a0.roa
Signing time: Tue 29 Sep 2020 09:57:37 +0000
ROA not before: Tue 29 Sep 2020 09:57:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17213
IP address blocks: 60.198.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044 (0x7fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DC0ADBB4B140DB39E01AEFF13FEE1EB135AEDDAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:ac:9a:87:c0:26:24:2c:8b:83:fb:49:91:
14:7b:f6:a1:49:86:74:9f:5e:7d:5b:68:27:8f:16:
80:ec:d0:41:62:ad:0c:05:c0:22:ad:31:ab:8e:aa:
c4:1b:16:08:0b:e2:64:2b:5d:9b:f9:5c:53:a8:1d:
78:f8:ed:1d:11:e5:7f:0f:9b:31:a2:ca:60:4a:01:
b0:41:22:1d:6d:c0:b3:99:1c:72:a5:e2:a8:b2:c5:
45:4c:96:dd:c4:d6:2e:98:02:bb:43:bc:16:a9:8a:
fa:f1:13:84:89:9c:9f:e7:03:cd:04:bf:3d:fb:02:
69:1e:87:ad:ba:60:41:3d:dd:38:cb:2a:72:70:ef:
44:ff:53:95:5f:1b:51:ca:41:e7:38:0f:20:26:1c:
0f:3b:21:89:15:c6:56:63:d4:81:0c:39:8b:9d:60:
1f:81:16:d7:e2:60:03:ce:fc:6f:58:67:23:ab:c6:
27:0d:eb:b5:c5:f9:50:5b:2e:3e:7a:90:94:13:c9:
ab:70:5e:6a:dc:26:fb:a9:58:1d:fe:e0:d5:db:bc:
77:9b:fc:88:89:c4:03:90:5e:f0:ea:ef:d5:3e:c2:
8d:7a:21:5d:78:dc:e3:77:ce:56:58:e6:b4:2e:b0:
bb:81:e3:ca:b8:d7:9c:a7:0b:bf:2a:da:45:0e:9e:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0A:DB:B4:B1:40:DB:39:E0:1A:EF:F1:3F:EE:1E:B1:35:AE:DD:AD
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3ArbtLFA2zngGu_xP-4esTWu3a0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.153.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ad:91:4e:50:fb:7b:68:9b:09:07:47:43:0c:e2:a3:70:e3:
59:54:c3:58:85:b6:57:91:17:bb:3f:30:65:5a:c7:60:e8:ab:
e4:cb:39:19:20:3a:49:46:02:a7:87:36:6b:b0:ab:8a:9f:9b:
49:ea:25:d4:a5:00:7b:d4:a5:ad:54:fe:1b:73:ed:84:6a:9b:
ec:d2:a2:d4:13:4f:64:1c:02:d0:0b:e3:cd:7a:a1:f6:ab:de:
e2:aa:bd:8f:e1:21:ab:ca:8b:98:48:f4:5f:f3:2f:da:8a:21:
5b:9a:e0:ef:d1:c1:19:93:7e:b1:79:5e:f8:e0:20:92:f1:21:
d1:7b:52:dc:0f:5b:f5:0f:ff:2c:e5:d1:dd:55:37:67:0f:90:
77:50:31:6d:4d:2f:38:7b:65:e8:ed:3c:c0:65:7f:5d:fe:61:
f7:0f:bc:00:22:25:05:58:b6:22:77:9d:e0:0e:04:f2:c3:c7:
d4:57:97:08:74:08:40:ef:ae:b3:96:b5:76:d2:81:e6:9b:a7:
38:56:ed:28:62:be:b9:d6:f2:83:76:76:2b:ac:a3:2a:d4:c3:
e4:bb:6e:ce:f3:95:fd:c0:ca:70:29:e3:c5:ab:e7:25:f1:f1:
5c:2a:1a:78:39:4f:96:50:d9:fe:7b:e1:65:99:e6:f2:72:ca:
de:49:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org