Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9-MBTAgdBNhL9CioZolnV0ayCJk.roa
File: 9-MBTAgdBNhL9CioZolnV0ayCJk.roa (raw, json)
Hash identifier: T0jBfQAs2UWU6Ow93fyGjwwFu76+88c9mLIKhGcGpDA=
Subject key identifier: F7:E3:01:4C:08:1D:04:D8:4B:F4:28:A8:66:89:67:57:46:B2:08:99
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C4D
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9-MBTAgdBNhL9CioZolnV0ayCJk.roa
Signing time: Wed 29 Sep 2021 02:49:39 +0000
ROA not before: Wed 29 Sep 2021 02:49:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 124.8.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F7E3014C081D04D84BF428A86689675746B20899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:82:0b:ea:08:09:26:4b:e7:4b:1e:75:02:
4b:77:76:36:7f:a9:b1:42:bf:30:6b:83:2a:c7:2e:
6a:be:b0:35:73:f0:41:ce:e2:f3:78:a2:f2:0e:a2:
b6:a5:53:71:91:ca:da:31:e7:94:e9:fc:e2:10:5a:
90:a6:49:6f:8b:1f:95:29:0c:53:e8:37:98:73:eb:
34:a5:9f:9c:98:f2:f0:7d:60:e0:9d:94:4a:25:73:
e0:df:d9:80:0c:3f:21:b1:3a:b8:f2:bb:6a:b0:0c:
86:8b:62:79:a2:55:9c:8f:8b:e4:23:bf:41:9b:66:
e2:04:43:1d:ad:34:31:e0:48:2e:51:9a:2c:e6:59:
7c:ca:83:f5:a1:0c:34:da:c2:e4:8f:ca:6d:69:25:
81:ac:5a:11:a9:79:5a:25:d6:f8:9c:0c:c3:56:3b:
85:48:e1:86:b9:e1:eb:e5:41:06:3d:ab:ba:8c:81:
7c:eb:65:66:9c:8f:10:f4:3e:4d:f8:54:e9:c5:d8:
5d:49:83:a7:8f:a6:0f:13:03:d1:56:ad:89:a3:f6:
0a:dd:00:57:23:4b:c4:b5:06:a3:cf:f0:dc:ea:5a:
1d:c5:e5:ea:50:aa:4a:0c:27:06:d6:14:6d:52:82:
65:5b:a3:c2:30:38:34:b2:ee:3b:c0:50:8d:af:69:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E3:01:4C:08:1D:04:D8:4B:F4:28:A8:66:89:67:57:46:B2:08:99
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9-MBTAgdBNhL9CioZolnV0ayCJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.8.0.0/14
Signature Algorithm: sha256WithRSAEncryption
99:e3:1f:f1:2a:ff:93:dc:3a:bd:b3:10:11:18:6e:68:48:6f:
00:2a:33:67:90:60:4e:30:be:b4:7c:b9:ba:1b:b3:26:12:30:
3c:98:1c:dd:90:88:4d:e1:c0:ee:72:7d:51:6e:38:43:b2:31:
54:08:e6:35:27:26:9b:64:13:ba:be:04:d8:bd:da:86:5b:ee:
46:8e:e1:0a:ec:a6:44:ec:0d:d2:42:ff:f5:e8:2c:19:c4:4c:
b1:6a:58:b4:05:49:67:33:99:c0:89:67:e8:aa:10:d6:67:d8:
7d:2f:e5:e0:ba:9f:32:39:31:34:19:a8:14:a4:0f:d5:98:7b:
5f:79:81:81:1d:39:7b:e1:f5:bf:ce:b2:57:06:c7:73:ce:9c:
c8:01:8d:24:3f:f0:fb:cc:64:59:0b:16:84:aa:d8:e6:27:9b:
cd:fc:84:31:2d:0e:7b:6e:8b:23:84:3f:2a:f0:0d:0a:2d:af:
f1:8f:50:2e:ef:7c:3e:19:d0:e0:00:f9:2d:b2:ad:9f:79:71:
d2:e3:ca:63:23:7e:51:50:f4:c9:96:dc:4b:a2:03:30:60:cc:
4c:95:ff:ef:ca:63:62:d2:dc:38:de:cd:ae:fd:2a:58:c8:50:
ec:32:1a:ba:d0:cd:cb:09:12:27:8c:a0:c0:21:e0:6e:48:20:
a3:b2:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org