Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9p9IPgxjiqBefuAdFqdQc13NRn4.roa
File: 9p9IPgxjiqBefuAdFqdQc13NRn4.roa (raw, json)
Hash identifier: Za+D1NgSDjufkE15kTJ9aesk07+aFhNGoMYWf909ci8=
Subject key identifier: F6:9F:48:3E:0C:63:8A:A0:5E:7E:E0:1D:16:A7:50:73:5D:CD:46:7E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C71
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9p9IPgxjiqBefuAdFqdQc13NRn4.roa
Signing time: Wed 29 Sep 2021 02:49:51 +0000
ROA not before: Wed 29 Sep 2021 02:49:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 175.99.72.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F69F483E0C638AA05E7EE01D16A750735DCD467E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:96:4a:c0:3e:33:e8:ef:8c:44:3a:e8:b0:
3b:ed:2d:18:c0:67:7e:c5:f1:c6:7a:d5:33:d6:a4:
9b:31:ac:b1:23:13:79:25:45:3b:11:0c:fe:9a:65:
43:d6:eb:9e:02:06:6e:4c:b2:c9:7e:a6:49:20:85:
96:f0:35:d3:95:8d:1a:2f:d7:8a:c1:c1:8e:35:02:
af:08:bb:49:b0:c6:87:4f:4a:bc:1e:f5:bf:74:9a:
67:24:60:62:89:b3:e4:1f:66:d1:68:1a:06:ea:76:
62:c3:0d:cb:93:79:a2:e3:2a:94:6f:aa:1d:51:f6:
f7:aa:20:3e:fc:e2:e3:b7:76:8b:26:18:68:67:35:
bf:2f:cd:3f:02:64:e0:d5:01:c8:f2:23:d1:e8:40:
88:93:ac:ca:36:a1:8b:55:b8:f8:b1:a1:f3:62:70:
b4:9d:cf:41:1e:07:c4:91:e5:24:e9:9f:6c:76:08:
48:e4:37:2c:47:e4:ad:21:10:52:14:6a:7f:7a:81:
72:28:e4:e3:1f:01:67:ea:ae:c8:8c:16:71:68:1f:
25:39:f2:3e:e3:03:2c:4f:cd:31:fe:e6:2d:b3:a6:
52:85:f3:01:71:c1:8e:85:67:a8:60:1c:ce:45:df:
52:7a:9e:06:2c:b7:a7:19:e8:15:10:d4:4e:c8:1d:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:48:3E:0C:63:8A:A0:5E:7E:E0:1D:16:A7:50:73:5D:CD:46:7E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9p9IPgxjiqBefuAdFqdQc13NRn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.72.0/24
Signature Algorithm: sha256WithRSAEncryption
63:16:4b:5a:64:25:32:d5:b7:ab:ba:ab:ee:1e:8b:e5:e0:3d:
62:b7:0a:12:2d:a4:b0:98:8f:35:7a:ae:9f:bb:da:f1:98:a2:
05:13:ad:ae:bd:ef:6a:e2:13:52:75:8e:57:4b:56:1b:37:01:
8f:ca:7f:7a:5e:f6:01:b5:62:af:3b:51:78:2c:52:7e:83:3f:
71:37:78:35:de:ae:d7:77:c1:c3:d4:a9:c1:16:6c:50:a5:fb:
52:e1:6b:f4:81:df:7c:90:1b:f3:ba:7c:17:3d:f7:6e:2d:4d:
31:d8:4c:13:22:b0:33:7e:ea:f2:eb:1f:91:fc:fb:52:fb:27:
44:12:7b:9a:b6:31:99:42:76:58:3d:55:37:42:b2:86:1a:5d:
7e:98:0e:41:21:0d:8a:7c:7e:2a:8e:f5:8d:38:6b:5a:ff:3f:
70:36:c7:2b:fd:cd:78:3a:bc:c2:80:0d:80:dd:71:65:dc:e0:
7e:1a:90:69:e8:0d:1a:be:ee:8c:e7:f7:75:c3:9c:40:9a:72:
e7:8d:6b:54:e9:00:27:c5:98:3c:a2:13:86:82:a6:7e:46:76:
67:8b:7a:29:21:1b:f5:b8:5d:c3:40:fb:9c:e7:2d:c5:f7:c5:
d5:9a:55:93:d9:c6:2d:90:00:be:ea:ff:92:40:9d:c4:de:68:
8e:7a:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:20 2025 by rpki-client