Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/BEa60Now7a4lXdxWjG9wctYNBOE.roa
File: BEa60Now7a4lXdxWjG9wctYNBOE.roa (raw, json)
Hash identifier: cSMlW7xrGNr1cLBwQPxegFe9q3q9kMuvo6mnACKmYYQ=
Subject key identifier: 04:46:BA:D0:DA:30:ED:AE:25:5D:DC:56:8C:6F:70:72:D6:0D:04:E1
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B24
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/BEa60Now7a4lXdxWjG9wctYNBOE.roa
Signing time: Sun 07 Feb 2021 13:10:30 +0000
ROA not before: Sun 07 Feb 2021 13:10:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 60.199.110.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:10:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0446BAD0DA30EDAE255DDC568C6F7072D60D04E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:1f:16:8a:3f:1b:6e:58:bf:cc:67:47:d9:
37:c6:0c:26:b1:46:bd:8c:9c:1f:f5:b5:40:a5:a4:
6b:b1:c0:55:c7:46:93:f0:7b:7f:17:d0:57:05:d2:
01:09:b2:6b:31:77:a0:69:8f:74:ba:c2:34:30:b1:
40:d2:6c:f2:cb:40:2a:99:58:7d:d1:c9:a9:a9:b9:
dc:e2:f7:7e:4f:de:ac:54:2d:49:c8:07:a4:61:a0:
77:0c:a2:db:16:fd:00:53:1a:99:07:5b:3c:ad:bf:
90:ec:39:ad:64:35:87:97:3a:b9:22:da:96:ed:84:
cf:38:57:c9:c5:ce:97:b2:3a:5d:53:2f:08:f0:7f:
74:46:8f:ca:4c:57:d5:b9:a0:ac:48:43:d5:fa:47:
b0:ee:27:85:90:39:ea:29:85:b5:8d:0b:53:f6:95:
23:bb:21:05:2a:d0:a8:bb:ac:ba:d6:a0:15:4b:12:
76:5f:d5:b9:df:f2:95:5c:df:c8:f6:8f:74:e3:a0:
bf:30:de:e7:60:c1:3c:ae:12:ea:02:25:c0:2d:50:
88:77:b0:08:58:ba:6d:ac:d8:ee:01:94:33:0a:9d:
97:af:0a:25:ca:d8:3e:27:6f:09:b7:e8:58:f5:6a:
dd:b9:35:e6:53:16:47:8f:ea:37:8e:23:07:09:09:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:BA:D0:DA:30:ED:AE:25:5D:DC:56:8C:6F:70:72:D6:0D:04:E1
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/BEa60Now7a4lXdxWjG9wctYNBOE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.110.0/24
Signature Algorithm: sha256WithRSAEncryption
90:55:b7:24:dd:43:e8:8a:ca:03:a6:e6:3c:a7:69:fa:5d:75:
d9:64:5b:79:cf:e0:e4:ad:91:c3:08:f8:97:7f:8b:4e:90:47:
12:36:6f:90:5c:59:0b:77:bd:c6:0a:53:ec:fc:8a:ed:7e:22:
74:2c:c4:f4:7a:4c:82:99:02:ff:2f:58:34:0f:4c:50:62:cf:
c4:ed:8b:3a:0b:10:cd:23:f4:5a:53:06:2d:5b:4f:6a:79:cd:
fe:19:16:22:7c:2c:72:da:25:08:f2:d6:a5:8a:47:4b:dc:d1:
7c:68:26:1f:b8:c9:97:93:86:54:dc:dd:89:0d:7e:50:5e:76:
c8:45:d6:23:02:72:93:4e:5e:ee:ab:7d:f3:2e:ba:68:69:db:
ad:2d:0f:59:49:04:be:97:ae:5a:ef:1c:54:e6:bd:de:7e:be:
b9:af:c0:62:d5:ca:c3:24:d3:91:7f:3a:db:15:0a:7d:32:33:
46:6a:ce:a1:76:24:f5:f1:6e:00:6c:2d:6e:c2:3d:33:8b:65:
da:4f:1b:03:7f:0c:00:9c:47:7a:7f:6d:11:a7:16:ca:5c:c4:
14:5b:18:54:db:07:27:2e:ba:40:8d:d6:53:11:5d:91:78:d4:
b5:92:5f:9d:5d:52:ed:a0:56:45:17:2e:9e:7f:17:8c:af:e8:
cb:f8:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org