Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8L0POYugsAuvAVkHXTxpYtGRgSM.roa
File: 8L0POYugsAuvAVkHXTxpYtGRgSM.roa (raw, json)
Hash identifier: 6yl9BotgoucNVP2yFPRu7R2BEArIDLMc21dvDKJJCjE=
Subject key identifier: F0:BD:0F:39:8B:A0:B0:0B:AF:01:59:07:5D:3C:69:62:D1:91:81:23
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0A9C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8L0POYugsAuvAVkHXTxpYtGRgSM.roa
Signing time: Sun 07 Feb 2021 11:36:45 +0000
ROA not before: Sun 07 Feb 2021 11:36:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.67.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2716 (0xa9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:36:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F0BD0F398BA0B00BAF0159075D3C6962D1918123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:36:c5:e1:ad:53:24:1f:a7:e2:72:a0:4d:
4e:02:9c:c6:f4:06:f7:2f:0b:25:82:1d:21:54:a5:
f9:8f:1a:37:1d:e7:1e:34:bc:f9:7b:54:2f:70:38:
65:d3:1d:91:1d:f7:26:d4:40:f7:85:7b:af:64:79:
99:15:04:de:9d:b3:b4:6d:7a:0c:fb:0d:17:1d:1a:
9d:86:f4:ff:ab:30:f9:ad:fd:42:1e:22:57:d1:54:
b1:e7:ae:77:0d:4f:0b:65:bb:44:87:a8:49:dd:dc:
e5:da:66:ba:be:49:98:e4:ec:af:32:9d:aa:20:86:
72:bc:70:ec:ee:95:1d:90:58:3f:f7:5a:dd:ee:dd:
a2:f8:56:bb:4a:e9:8e:2b:cd:54:a0:36:55:95:d9:
45:25:ec:87:d1:92:f7:da:ed:53:81:56:19:16:96:
f1:60:63:6e:f4:77:34:11:b8:73:14:2f:94:47:fc:
9b:9e:a5:f5:43:a6:8e:af:92:86:da:e0:67:37:47:
1c:97:07:ea:89:bd:8a:60:32:df:03:78:56:a9:39:
df:3c:2d:15:4c:92:3a:6b:5d:c1:e9:90:e6:02:93:
2d:ca:be:74:55:d7:35:e5:67:63:d3:df:f3:f9:9c:
0b:c6:5b:15:70:72:a3:aa:fd:49:7c:46:eb:35:80:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BD:0F:39:8B:A0:B0:0B:AF:01:59:07:5D:3C:69:62:D1:91:81:23
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8L0POYugsAuvAVkHXTxpYtGRgSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.192.0/20
Signature Algorithm: sha256WithRSAEncryption
50:ec:e5:87:94:9a:15:0f:98:6d:82:b9:97:a0:2e:f8:28:7a:
88:d5:35:d1:12:02:f6:7a:a1:3e:25:b9:f8:14:94:00:23:a4:
48:19:48:32:20:1b:7f:3f:73:b4:ef:2e:b4:69:46:ad:fa:f6:
ba:f0:b8:f1:92:ec:08:e6:c3:d9:f5:d4:b7:4e:12:f4:98:78:
b3:89:a5:0a:85:de:cb:04:70:6c:df:bb:b5:43:bb:aa:c6:be:
fe:20:40:bd:9d:04:3c:76:84:10:5e:03:5d:ba:7b:8a:89:fd:
28:d0:70:bb:d0:2e:64:7c:f8:85:95:2c:3a:2d:60:12:ba:6a:
5d:ea:27:68:a4:2c:10:5d:8e:16:1d:f9:83:63:13:48:37:c2:
af:bd:e6:c4:0d:6a:e8:99:ae:ee:d5:ca:92:ca:4b:ce:f9:a1:
96:ae:9b:ae:65:4a:28:29:c1:23:b5:81:b5:db:8d:ed:a1:41:
ae:c0:08:b7:9d:aa:ef:cf:5f:93:cb:fa:10:67:0d:a1:a3:29:
b7:e2:01:10:e2:ce:19:8b:7c:63:bb:ce:ab:18:08:04:f2:e1:
d8:90:d4:c3:ea:31:83:02:a8:8f:2c:4b:61:7e:4f:59:c1:ca:
25:68:2e:1b:db:5f:c0:00:2a:17:5e:df:51:da:e2:e8:0b:d8:
db:9d:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:14 2023 by rpki-client on console-fra.rpki-client.org