Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7W-vBSS9t_GpRm1mOVPUV7RoJP0.roa
File: 7W-vBSS9t_GpRm1mOVPUV7RoJP0.roa (raw, json)
Hash identifier: ALq7jGxghOmMZJqGYhi1i3s3SOpHVrUvdMJRNl18Us0=
Subject key identifier: ED:6F:AF:05:24:BD:B7:F1:A9:46:6D:66:39:53:D4:57:B4:68:24:FD
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0AB0
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7W-vBSS9t_GpRm1mOVPUV7RoJP0.roa
Signing time: Sun 07 Feb 2021 11:36:59 +0000
ROA not before: Sun 07 Feb 2021 11:36:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 219.80.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2736 (0xab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:36:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ED6FAF0524BDB7F1A9466D663953D457B46824FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:77:bf:36:f3:d2:2d:ec:47:9a:4f:e0:a4:
28:d3:69:94:cc:ad:52:2c:e3:6f:d3:4a:7b:66:49:
8c:e6:dc:68:f9:3d:0d:ed:c8:e4:e6:97:e2:18:48:
f6:db:07:14:db:a4:d8:cf:5d:b4:39:0c:d2:56:96:
bc:e2:14:bb:f0:24:ed:ce:a0:4d:29:01:3e:e0:c0:
a2:27:5a:45:69:95:30:ac:5e:da:eb:43:21:de:1c:
25:76:70:35:52:6c:08:7e:3e:70:6e:ea:5d:83:c2:
d0:ca:54:98:f2:1f:33:01:0a:1f:7c:a3:b8:a7:8a:
5a:f1:ce:bd:bd:ee:aa:d7:8d:04:7a:4a:7b:d0:c2:
68:f7:50:29:b4:65:1f:f0:37:6e:da:b3:09:10:bc:
93:85:66:08:e4:43:d2:18:09:e1:b1:e2:13:c5:48:
ae:d1:b7:43:f2:c3:22:06:bd:6d:69:2e:87:bc:45:
e9:ef:a2:c5:84:8f:70:b4:b5:e9:d4:db:19:41:a9:
e5:93:08:86:9a:4a:ce:67:eb:b0:48:a7:fb:b2:18:
5c:be:4e:7f:a3:b3:3a:ac:11:bb:62:c0:9f:72:fe:
80:4b:a9:83:e4:0d:3e:70:a9:40:45:99:6e:67:c4:
9e:3e:33:90:d7:ad:a3:05:8b:90:74:51:13:a8:7a:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:AF:05:24:BD:B7:F1:A9:46:6D:66:39:53:D4:57:B4:68:24:FD
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7W-vBSS9t_GpRm1mOVPUV7RoJP0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:2a:de:f0:22:d0:a6:f7:f7:2b:c6:35:d8:31:c6:93:81:6e:
92:69:15:ab:3b:f3:d9:8f:41:92:f3:d2:5b:ef:8e:79:a7:06:
38:a8:c7:06:10:df:c0:ab:f0:11:08:18:52:33:84:2f:ca:55:
67:b3:bf:3d:db:2a:f4:d4:03:f6:93:a2:53:2d:61:11:b1:17:
e0:0b:89:bb:b0:ce:fc:31:d2:da:58:7b:3d:61:c6:24:3d:17:
0c:6b:dc:e7:50:c2:75:d6:9c:0e:af:36:dd:8b:89:90:88:83:
7c:49:54:64:19:b2:03:6b:31:b2:ab:eb:83:42:c2:ef:20:42:
96:5d:a4:36:3a:e2:be:eb:78:a3:f4:06:a6:cc:12:a3:8d:a2:
cd:ca:e3:b0:cc:2a:9a:0f:76:51:98:9e:f5:4b:42:fa:b7:ff:
4c:56:5a:3f:48:9f:88:4f:21:4f:49:7a:87:61:a5:03:82:29:
27:a0:10:63:d9:64:26:e2:47:be:94:72:ec:ae:98:fe:32:62:
40:22:1f:92:73:dc:3e:28:e9:d6:b0:3c:5d:ed:bd:25:9a:f3:
bc:b2:83:d9:e3:51:6c:66:32:bb:5b:9d:37:88:20:8f:f9:c8:
27:5c:04:5d:fa:56:b4:ca:cc:11:f4:b3:3a:fd:a4:33:fc:43:
b0:cf:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:02 2023 by rpki-client on console-ams.rpki-client.org