Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5y9SAvWZJse3rnGyBBdXHaK1Zlw.roa
File: 5y9SAvWZJse3rnGyBBdXHaK1Zlw.roa (raw, json)
Hash identifier: AWhoFRk01ZKbBxG6FLmEUFVbWLclo3PFkC7rHrVj9ac=
Subject key identifier: E7:2F:52:02:F5:99:26:C7:B7:AE:71:B2:04:17:57:1D:A2:B5:66:5C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5y9SAvWZJse3rnGyBBdXHaK1Zlw.roa
Signing time: Thu 15 Sep 2022 02:47:02 +0000
ROA not before: Thu 15 Sep 2022 02:47:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131628
IP address blocks: 175.99.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E72F5202F59926C7B7AE71B20417571DA2B5665C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:49:96:8a:dc:93:4f:be:19:ad:22:de:05:
a5:e5:be:9a:f7:46:cf:8d:94:d6:ca:3d:47:f1:de:
b2:15:9b:fc:de:c1:7a:f5:2b:80:63:ed:45:64:c3:
0b:18:f5:40:89:fc:cb:ca:aa:b0:18:b2:89:24:d1:
27:41:4e:d9:cc:ae:53:91:ef:0b:09:31:7f:e8:34:
d3:e2:93:ac:ad:45:af:63:1c:50:ee:5f:a8:b6:26:
e4:95:ca:09:fe:b9:43:54:a7:e3:63:99:52:a2:ec:
44:9e:4e:ca:d3:99:e5:94:6f:fb:b1:85:30:16:22:
45:97:21:43:dd:48:75:32:ac:56:84:29:d2:75:be:
22:18:0b:a0:d9:18:ba:a7:e6:17:0e:56:39:a7:96:
2f:80:f5:39:56:4e:14:6b:09:60:5b:cb:bd:f7:a6:
af:8e:17:72:1d:06:ac:cf:1d:68:48:99:27:e5:09:
0e:77:38:46:6f:ba:0d:48:43:c8:78:e1:c5:77:95:
f4:67:09:70:4b:38:21:c0:86:6d:f5:80:81:66:09:
a4:e3:03:66:11:f7:fc:51:db:67:4f:81:8f:5f:af:
68:d5:50:04:e0:79:88:40:f2:0d:26:ee:aa:c8:29:
5f:e8:6a:0e:53:b0:28:8b:22:b5:06:82:94:df:e1:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2F:52:02:F5:99:26:C7:B7:AE:71:B2:04:17:57:1D:A2:B5:66:5C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5y9SAvWZJse3rnGyBBdXHaK1Zlw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.224.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0c:20:a1:ef:46:94:4c:ae:83:9f:ba:78:01:8a:76:8c:cc:
b5:db:71:07:5e:bc:60:58:3b:75:dd:1d:20:ce:01:7c:df:90:
40:54:1a:79:c1:de:55:4f:f0:a2:61:9e:7b:66:ce:28:b2:22:
77:f7:3c:80:ca:7f:b6:7a:29:3c:14:13:d9:b4:15:61:fc:1b:
46:7d:b9:af:28:5b:bb:96:0f:3f:e6:f3:f7:f5:4d:17:92:fe:
45:d8:e4:fd:55:3c:fc:13:b7:ee:88:04:03:17:97:27:2b:eb:
20:8c:ed:75:54:53:4c:01:f4:b5:32:14:f9:16:b6:88:6c:6e:
55:84:18:a5:28:4f:79:3f:29:3b:7d:d5:09:6a:08:ee:62:16:
3a:cd:6d:1d:e1:25:80:25:7c:c7:90:cb:fa:65:ca:1b:1e:14:
d4:e0:b3:59:0a:e9:9a:59:1c:5f:15:b7:98:29:25:bd:12:a2:
d9:ee:67:9a:6d:33:ed:75:83:28:aa:c5:57:8f:b7:71:e4:9f:
55:da:4c:27:79:cd:e1:c2:39:8b:bc:16:2b:e5:3b:15:93:5e:
12:8d:ec:f6:5d:81:c7:65:d7:af:b3:27:bf:c6:6e:50:c3:33:
5f:d9:73:3d:27:57:92:4b:7a:3d:57:7b:8d:c5:42:41:f4:68:
04:da:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org