Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6PaCM19rOs-qiyxG0vODqldQ5QQ.roa
File: 6PaCM19rOs-qiyxG0vODqldQ5QQ.roa (raw, json)
Hash identifier: KA9EBoD5C01Jvn0LlWwbtR86Fr9x+W4TU9QnZnP2hyE=
Subject key identifier: E8:F6:82:33:5F:6B:3A:CF:AA:8B:2C:46:D2:F3:83:AA:57:50:E5:04
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 07F6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6PaCM19rOs-qiyxG0vODqldQ5QQ.roa
Signing time: Tue 29 Sep 2020 09:57:35 +0000
ROA not before: Tue 29 Sep 2020 09:57:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.67.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E8F682335F6B3ACFAA8B2C46D2F383AA5750E504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:b6:f0:60:3d:04:c1:61:d3:47:67:17:8a:
2b:d3:89:3d:bc:58:63:fe:d3:c9:71:3f:02:87:67:
e5:32:af:7b:4c:44:e6:21:c0:25:be:cd:33:92:ab:
8c:ae:4b:87:23:49:9e:ba:1c:d2:29:48:c9:31:98:
82:18:bc:87:e4:9f:2c:42:f0:f0:ee:6c:f6:59:03:
44:ab:01:fe:df:6d:90:4d:39:72:ee:c3:7f:8c:4c:
99:9c:2a:86:08:04:59:96:82:78:c3:13:dd:d3:72:
b7:49:1b:c4:50:19:1f:0e:f9:7f:f1:72:fb:69:d2:
a6:1c:08:31:66:ef:97:e7:89:64:aa:b3:b5:42:bd:
12:ac:0d:f7:c5:4f:f3:0a:b7:90:65:2c:d3:ac:e7:
80:a4:74:4e:01:1a:1b:b1:87:8b:a3:0f:54:a7:89:
54:a2:15:cc:d3:c9:fc:ed:d7:20:8a:de:07:96:3f:
b9:d0:39:a7:d3:9e:7e:be:8a:54:e6:8e:c7:5d:e7:
db:ea:a8:f5:53:04:1b:cf:c4:e3:ed:9c:79:6e:82:
b5:95:7b:50:42:22:56:f3:db:b7:f8:e8:66:23:2c:
34:1f:f4:50:3e:c4:f2:2b:8f:5e:68:fc:d2:69:69:
24:a9:6a:6f:fb:34:09:4e:95:9c:0f:c2:80:1b:9f:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:82:33:5F:6B:3A:CF:AA:8B:2C:46:D2:F3:83:AA:57:50:E5:04
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6PaCM19rOs-qiyxG0vODqldQ5QQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.208.0/20
Signature Algorithm: sha256WithRSAEncryption
11:3d:bf:47:6e:39:9a:6c:07:80:dd:af:85:9c:93:86:0b:1b:
84:85:f2:be:8d:39:a5:dd:5a:7e:ad:69:14:8f:ce:ce:c2:0a:
d9:31:57:cb:8b:3a:cb:0c:ea:14:96:d6:8a:83:d2:96:d8:3c:
35:6a:48:2e:76:d2:57:38:d4:1b:1c:73:f0:20:f0:ab:6e:27:
4a:5d:6f:07:54:ec:11:76:6e:b2:07:30:7e:85:d6:0c:10:42:
c4:47:d3:15:89:ae:08:07:9e:91:74:d2:d2:ec:c4:c3:10:0b:
a5:52:ed:06:41:0c:d1:2b:f5:9f:58:d1:f7:9c:36:5a:18:c3:
23:1b:5b:9c:eb:e4:e4:77:90:fc:55:4b:f9:b5:40:03:08:33:
fe:8c:8b:c5:f6:c1:54:6b:63:43:ba:77:fb:92:65:22:2e:1a:
7e:ea:d4:b5:f2:ee:cd:af:64:17:e5:0d:43:6f:66:4c:21:cd:
df:49:95:19:ad:a0:ad:4f:53:7e:65:9e:b8:63:5d:f4:ca:5e:
68:25:36:4e:fe:d9:d6:26:d7:a6:04:07:f9:96:2b:00:16:fa:
d6:bf:09:78:9d:86:37:c7:fe:b2:5e:67:6e:82:5f:43:64:b7:
e8:b4:3a:88:dc:4b:c0:d1:c7:96:58:93:3b:6e:71:92:ab:0c:
c7:76:0b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org