Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Bq6Nb66jzusnKtIMuAYNilpyyMU.roa
File: Bq6Nb66jzusnKtIMuAYNilpyyMU.roa (raw, json)
Hash identifier: QlrfdcOiJtYWkW0CwjkJB/ny4GGZEmhwAdw4uY/OKqI=
Subject key identifier: 06:AE:8D:6F:AE:A3:CE:EB:27:2A:D2:0C:B8:06:0D:8A:5A:72:C8:C5
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Bq6Nb66jzusnKtIMuAYNilpyyMU.roa
Signing time: Thu 15 Sep 2022 02:47:21 +0000
ROA not before: Thu 15 Sep 2022 02:47:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 124.8.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=06AE8D6FAEA3CEEB272AD20CB8060D8A5A72C8C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:53:30:a8:70:35:51:d2:36:18:53:06:ea:
5f:18:3a:07:da:30:c8:8e:83:2e:b0:a2:79:61:cb:
08:e9:b8:90:08:5f:fe:74:65:43:ac:ad:8c:86:4d:
6f:6f:8e:37:c6:02:79:43:b7:ff:32:61:c0:29:be:
b9:a7:ca:4a:8f:9b:aa:50:b8:31:6f:2a:70:27:27:
43:10:90:24:15:5b:de:f2:b9:f7:00:23:52:62:95:
00:74:aa:71:b0:fd:a6:21:4b:a1:ff:f3:02:c2:db:
a4:ec:c3:1d:35:e1:11:95:b2:f4:40:95:f8:f9:fc:
67:5d:e2:96:d0:6a:67:9d:68:71:0a:e6:ab:1d:26:
f1:f3:04:2d:e0:14:d9:3e:08:7f:85:ee:e2:ae:33:
72:1d:6d:3d:59:d4:03:ef:7c:bf:70:ad:14:7c:37:
32:65:c4:bb:f5:41:13:69:2f:dc:14:a7:54:18:1a:
50:22:16:8b:fa:a9:bc:41:42:f0:89:33:d6:46:e8:
57:2c:2c:e9:77:57:d3:3b:eb:e6:8f:77:b5:ec:71:
14:81:d1:a4:45:40:45:47:75:99:65:33:58:92:da:
dc:23:62:c1:f8:6c:24:20:1c:39:c6:c1:b9:cd:58:
33:97:0c:c7:e9:ed:af:c0:6d:d7:78:c2:cb:c5:d1:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:8D:6F:AE:A3:CE:EB:27:2A:D2:0C:B8:06:0D:8A:5A:72:C8:C5
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Bq6Nb66jzusnKtIMuAYNilpyyMU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.8.0.0/14
Signature Algorithm: sha256WithRSAEncryption
97:16:66:49:97:93:48:ac:5a:7c:db:94:f6:0a:8d:c4:39:98:
13:74:90:ca:b4:b7:90:db:56:47:a0:a4:83:79:d4:59:5a:b0:
84:c1:2e:88:b9:2d:a0:31:5c:21:4c:36:55:4a:c6:04:9c:10:
35:d3:53:82:f2:65:f8:d6:74:46:c9:81:6b:59:f9:85:b6:22:
6c:66:c3:25:1a:e1:63:79:79:8a:6e:bf:1e:f1:50:ba:31:36:
31:46:da:05:38:a1:61:06:ee:d4:cd:06:40:c6:31:89:82:22:
94:f5:2e:21:d5:75:3a:59:49:64:dd:d6:49:a8:c9:a5:14:fc:
5b:f6:2f:cc:b4:dd:58:bc:9f:fb:78:52:b0:1c:2d:05:24:be:
7d:fd:27:e2:9e:66:42:ea:fd:f9:19:ee:b4:83:8c:ec:aa:e1:
0a:09:1c:90:d0:8d:36:88:80:6f:72:d1:a7:cf:9f:1e:9e:35:
32:f1:b4:6a:26:eb:e5:7d:c8:81:63:37:d9:33:16:69:1b:62:
85:30:08:81:c8:2d:f7:fa:64:f2:49:5b:74:65:36:c4:9b:c3:
22:ce:91:b9:5d:75:97:83:e5:c8:8d:b9:8b:b9:42:cb:d5:cb:
a3:b2:e4:c6:89:ed:5f:fe:c0:54:bb:5b:c5:1d:f5:64:a5:d9:
a3:c4:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:16 2025 by rpki-client