Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6UEB51ws30ACq_cJPd4gHzeGFU4.roa
File: 6UEB51ws30ACq_cJPd4gHzeGFU4.roa (raw, json)
Hash identifier: 3p+ZoSrWQ1MwCtVKUgcG8jBkPoubeweJ3RbsEjL75Lc=
Subject key identifier: E9:41:01:E7:5C:2C:DF:40:02:AB:F7:09:3D:DE:20:1F:37:86:15:4E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0832
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6UEB51ws30ACq_cJPd4gHzeGFU4.roa
Signing time: Tue 29 Sep 2020 09:57:52 +0000
ROA not before: Tue 29 Sep 2020 09:57:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 203.77.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E94101E75C2CDF4002ABF7093DDE201F3786154E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:6c:4a:25:5b:e1:51:8a:f8:0a:67:eb:5f:
1c:e2:9a:49:e6:a4:15:b5:66:07:a0:a3:6a:7e:ed:
1e:7f:42:a7:17:85:cd:ec:f4:08:f7:33:20:9a:c0:
3d:1f:45:57:f0:ba:c0:23:fc:8e:95:0d:b3:7c:6d:
23:6d:5f:e9:8e:21:d9:0a:f5:52:02:17:fd:2d:8f:
38:e5:a8:52:76:2e:09:1b:47:da:02:5d:94:b8:cb:
aa:df:d4:a6:31:44:2e:67:5f:e9:5b:da:4f:0e:7d:
01:86:fc:ca:83:a3:f3:c0:67:bd:80:3a:53:d2:f5:
a2:a6:36:a2:79:c4:a9:30:a4:6d:24:d8:34:2d:7f:
0f:45:a8:1d:d0:97:d8:7d:a6:8d:16:d8:8c:58:21:
a6:42:1a:4e:71:22:17:66:7a:7e:b2:b1:8b:ff:6b:
02:fa:ea:d3:eb:9e:dd:5c:64:d7:1c:38:bf:ff:c8:
82:b9:53:ff:00:33:32:19:6b:a7:d1:a9:65:88:3b:
54:7f:39:d0:15:78:7c:dd:e2:0a:04:72:fe:be:93:
c6:45:ed:2c:e4:b8:11:f0:e0:69:e2:97:8f:e3:dd:
3d:a7:5f:ec:ac:b5:17:d6:a8:c7:c0:6e:b2:06:24:
54:71:f8:80:23:34:4d:a6:25:75:9d:5d:54:53:76:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:01:E7:5C:2C:DF:40:02:AB:F7:09:3D:DE:20:1F:37:86:15:4E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6UEB51ws30ACq_cJPd4gHzeGFU4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.40.0/21
Signature Algorithm: sha256WithRSAEncryption
50:4d:96:a6:dc:d3:8e:cb:76:71:b6:d8:61:c1:8b:be:81:a5:
26:d4:5d:74:31:0b:ce:58:96:a6:76:7e:c4:60:9a:0b:11:f1:
b1:25:09:f1:15:5a:09:d3:ba:ad:3c:c3:d5:26:7f:4b:bc:00:
32:59:5f:02:c8:67:b7:c7:17:82:d9:a1:6b:ad:a0:38:ca:c7:
98:e6:3c:c1:52:17:2e:36:f6:19:67:bc:a1:e0:37:bd:12:da:
b3:8b:98:85:de:a7:dd:ed:fa:7a:0d:5c:ba:d8:bc:89:76:f2:
7a:81:31:07:f6:5a:a3:4c:47:38:d3:09:a4:d9:d9:70:77:d0:
07:86:bc:5f:3c:cc:b2:64:98:b9:6c:9a:8f:2e:36:8e:02:05:
28:65:a8:e3:d3:db:cf:d5:80:09:85:ff:68:ff:ef:e9:78:01:
86:30:98:3e:cb:28:2c:7d:10:e7:3c:d9:fc:da:28:e6:c0:ff:
eb:c2:f6:eb:88:25:66:f2:68:aa:68:3a:0f:f2:46:ac:55:33:
27:97:98:1b:04:12:e4:a6:d8:d1:b9:17:58:d0:b8:53:86:0b:
8f:be:01:de:2b:df:b2:eb:84:33:90:c9:fa:6a:83:4c:97:0b:
3c:78:29:2a:19:f4:3b:52:49:0a:06:ed:68:3f:5f:c7:11:49:
71:06:9d:ac
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMDA5Mjkw
OTU3NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU5NDEwMUU3NUMyQ0RG
NDAwMkFCRjcwOTNEREUyMDFGMzc4NjE1NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA6mxKJVvhUYr4CmfrXxzimknmpBW1Zgego2p+7R5/QqcXhc3s
9Aj3MyCawD0fRVfwusAj/I6VDbN8bSNtX+mOIdkK9VICF/0tjzjlqFJ2LgkbR9oC
XZS4y6rf1KYxRC5nX+lb2k8OfQGG/MqDo/PAZ72AOlPS9aKmNqJ5xKkwpG0k2DQt
fw9FqB3Ql9h9po0W2IxYIaZCGk5xIhdmen6ysYv/awL66tPrnt1cZNccOL//yIK5
U/8AMzIZa6fRqWWIO1R/OdAVeHzd4goEcv6+k8ZF7SzkuBHw4Gnil4/j3T2nX+ys
tRfWqMfAbrIGJFRx+IAjNE2mJXWdXVRTdviNAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU6UEB51ws30ACq/cJPd4gHzeGFU4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNlVFQjUxd3MzMEFDcV9j
SlBkNGdIemVHRlU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
A8tNKDANBgkqhkiG9w0BAQsFAAOCAQEAUE2WptzTjst2cbbYYcGLvoGlJtRddDEL
zliWpnZ+xGCaCxHxsSUJ8RVaCdO6rTzD1SZ/S7wAMllfAshnt8cXgtmha62gOMrH
mOY8wVIXLjb2GWe8oeA3vRLas4uYhd6n3e36eg1cuti8iXbyeoExB/Zao0xHONMJ
pNnZcHfQB4a8XzzMsmSYuWyajy42jgIFKGWo49Pbz9WACYX/aP/v6XgBhjCYPsso
LH0Q5zzZ/Noo5sD/68L264glZvJoqmg6D/JGrFUzJ5eYGwQS5KbY0bkXWNC4U4YL
j74B3ivfsuuEM5DJ+mqDTJcLPHgpKhn0O1JJCgbtaD9fxxFJcQadrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org