Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/C9b01yzM2c-ASljh7w6TvuuorMw.roa
File: C9b01yzM2c-ASljh7w6TvuuorMw.roa (raw, json)
Hash identifier: UmZ2WmzZ36wwGWZMWDho9fS7qatstbJ37IJrMAHlmjU=
Subject key identifier: 0B:D6:F4:D7:2C:CC:D9:CF:80:4A:58:E1:EF:0E:93:BE:EB:A8:AC:CC
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0809
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/C9b01yzM2c-ASljh7w6TvuuorMw.roa
Signing time: Tue 29 Sep 2020 09:57:42 +0000
ROA not before: Tue 29 Sep 2020 09:57:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 219.80.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0BD6F4D72CCCD9CF804A58E1EF0E93BEEBA8ACCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:b2:c3:ff:39:c6:e1:75:f1:99:24:3b:be:
ed:5f:6e:d9:0f:4d:be:85:ad:dd:8c:29:1d:87:70:
aa:c1:ee:eb:e9:ee:5c:27:54:05:04:20:37:91:81:
7d:6c:ae:88:f5:ff:57:63:30:82:c6:e1:58:13:26:
21:aa:a8:c1:d5:38:e1:ef:5f:3b:fa:2b:98:c2:c2:
f0:1c:bb:15:54:4b:68:30:64:e0:2a:3b:65:e4:9f:
84:0f:36:51:91:a3:00:ec:af:25:3b:49:a0:07:3f:
3b:ed:b5:90:01:61:e6:f8:05:1b:78:fa:df:8c:e9:
67:41:76:ed:25:0b:c2:7c:77:53:80:28:9a:ec:b5:
ce:4c:e9:1e:e7:07:07:8c:1b:01:a3:24:0d:d4:b5:
ff:bf:e0:90:9a:ed:ed:3c:99:fc:2b:16:8d:66:af:
38:f4:e9:20:fb:db:4b:a4:f2:6e:19:3a:b3:59:d0:
0c:6a:2f:aa:27:f2:8e:3b:d7:c1:1c:65:f4:5a:25:
51:e7:d0:12:fe:fc:b3:c9:8e:8e:5e:fe:db:e6:df:
12:e4:bf:ef:7e:b5:96:0d:94:18:d9:24:cb:6f:b9:
2d:f5:ba:f1:91:64:ba:8c:15:16:91:14:30:b8:2f:
f7:eb:21:21:86:ee:b3:b4:5f:51:64:1d:78:60:85:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D6:F4:D7:2C:CC:D9:CF:80:4A:58:E1:EF:0E:93:BE:EB:A8:AC:CC
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/C9b01yzM2c-ASljh7w6TvuuorMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:8f:5c:63:15:e3:d4:f0:b7:8b:b5:b9:17:bb:9d:b2:bf:d6:
8f:6b:01:01:78:cc:b2:a3:35:70:7a:f0:c2:60:05:1b:60:af:
87:13:a2:86:21:2e:aa:d5:93:31:63:5b:05:ec:6b:a8:88:e3:
7c:25:86:74:29:e2:1e:7f:c3:7e:8a:51:b4:84:7b:6e:59:89:
13:96:90:08:69:1c:b3:b6:b8:31:be:0e:21:38:2e:e2:f4:bc:
78:3f:bb:ad:5c:36:01:53:bf:c1:b9:65:86:f2:4a:e2:99:2b:
fb:01:61:e4:a0:1d:c5:b2:17:8d:94:1e:f9:46:14:98:1c:01:
9f:f8:92:c3:da:31:e4:dc:82:14:f0:26:4d:fc:4d:e6:5a:e9:
9d:f1:40:67:74:10:3f:c0:af:33:e1:6a:34:da:3b:f1:85:2f:
3e:95:fb:39:90:3e:06:e3:54:59:6f:e7:d8:26:2c:51:b1:71:
93:db:b2:76:e8:3d:8b:fc:b3:4b:ec:ce:0c:52:59:0e:44:49:
68:57:89:2f:aa:ef:b5:8d:98:b9:d0:01:3a:d0:c0:d5:d1:39:
55:c7:71:a3:27:91:bc:47:40:9d:36:34:36:e4:59:17:f0:9d:
7e:b7:ee:f8:3e:c1:ee:c7:a5:c5:d8:de:33:69:ac:34:05:81:
aa:33:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:50 2025 by rpki-client