Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5TfQkN6BNJSAuvTqQuVgVit7nCI.roa
File: 5TfQkN6BNJSAuvTqQuVgVit7nCI.roa (raw, json)
Hash identifier: s7Qf/IGvu4jPnlUiqQ1OU0AvGc3W2JEe86zK3wWXfWM=
Subject key identifier: E5:37:D0:90:DE:81:34:94:80:BA:F4:EA:42:E5:60:56:2B:7B:9C:22
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5TfQkN6BNJSAuvTqQuVgVit7nCI.roa
Signing time: Thu 15 Sep 2022 02:47:30 +0000
ROA not before: Thu 15 Sep 2022 02:47:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 124.12.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E537D090DE81349480BAF4EA42E560562B7B9C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:a4:32:2c:fd:4d:48:1a:fa:d0:b0:04:d0:
45:a6:27:3d:44:af:b2:bc:87:18:ce:95:27:58:e9:
d4:50:92:fb:47:35:c8:a6:bf:c7:f9:cb:0b:8a:e0:
b3:ef:2d:ee:d1:31:42:ec:70:eb:f2:d0:f4:67:f9:
e2:0d:e1:9d:a7:d0:8e:f5:9b:07:5d:de:f0:71:49:
61:f5:49:ca:60:f1:a2:6c:9e:d1:81:a4:20:10:8c:
bd:12:0f:e6:c2:b3:b8:9c:10:94:35:24:4a:7a:15:
06:01:af:2f:a7:2b:13:d9:32:19:6a:c4:e9:c1:91:
6a:3e:e6:fc:9d:c5:e2:17:cd:07:e1:26:07:8f:c1:
27:cd:9f:4f:3d:a5:46:b0:64:cc:d9:92:87:1f:db:
12:05:f9:06:b3:e0:1a:41:eb:30:c4:ad:47:f7:f8:
15:04:63:10:b3:b0:98:41:be:20:ad:f5:a0:23:d8:
5a:be:b0:bd:54:f4:6e:e2:d4:45:80:c3:29:63:f8:
59:de:e5:76:37:84:2b:25:e0:8f:30:24:67:12:01:
53:31:90:ed:32:ed:58:a4:bb:dc:a9:e5:e8:28:41:
42:5b:f5:31:64:3a:7f:98:a8:ed:75:7e:aa:c7:ab:
4d:a5:e3:c2:d2:20:d0:be:98:6f:2d:41:ee:9c:6a:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:D0:90:DE:81:34:94:80:BA:F4:EA:42:E5:60:56:2B:7B:9C:22
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5TfQkN6BNJSAuvTqQuVgVit7nCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.12.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:72:12:b9:07:c0:e6:77:bd:65:dd:4c:72:8b:01:71:74:0b:
85:08:01:63:7a:c1:c0:fe:cb:92:46:7a:d4:2e:96:d6:7d:b0:
7e:ec:d3:bf:34:74:77:59:11:a7:ae:9a:4b:9c:f1:e0:42:2d:
43:61:32:21:fa:e3:3d:db:b9:73:fc:5d:da:af:8f:0a:e3:ae:
89:cc:c3:50:f1:f4:78:78:90:ed:28:2b:be:63:86:9a:fe:0d:
97:df:40:ea:ad:a2:5e:ad:df:4a:9a:da:3d:cf:40:8e:d3:a9:
d1:3e:dd:5d:1e:eb:f9:a1:ee:d7:1f:de:34:5d:9b:43:cd:00:
85:68:08:cc:82:3c:ec:f2:96:ff:18:aa:7b:cc:6e:36:e9:99:
04:9f:35:b8:c6:9a:9e:4d:ff:b1:e5:c7:26:f7:f3:53:58:f6:
67:c0:7b:0e:19:d1:41:3f:dd:ae:90:06:d5:58:b8:d2:6f:bd:
50:f4:92:ed:1a:d1:04:2e:e5:3a:c7:92:5d:37:d1:64:8e:79:
08:09:b1:88:75:ae:93:04:6d:0a:c6:d2:c5:74:8d:11:56:cb:
3a:64:23:76:57:e7:dd:3a:64:2e:ae:b7:de:0c:aa:03:2f:bc:
97:ce:e7:13:70:8b:66:cf:6e:7f:27:1e:eb:6b:51:9f:ab:3f:
13:2b:45:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org