Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CrtShpA-kqouLwa7gj2XLLr97Fw.roa
File: CrtShpA-kqouLwa7gj2XLLr97Fw.roa (raw, json)
Hash identifier: bqe3MaTYe5CdbKMuhWsFrf7qEYjeM1WGTxhyTJO7EvA=
Subject key identifier: 0A:BB:52:86:90:3E:92:AA:2E:2F:06:BB:82:3D:97:2C:BA:FD:EC:5C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0962
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CrtShpA-kqouLwa7gj2XLLr97Fw.roa
Signing time: Wed 16 Dec 2020 01:58:47 +0000
ROA not before: Wed 16 Dec 2020 01:58:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 60.199.224.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2402 (0x962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 16 01:58:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0ABB5286903E92AA2E2F06BB823D972CBAFDEC5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:e1:0b:93:c7:0d:a4:a8:32:90:31:81:78:
4b:59:29:b1:01:55:68:2f:63:fc:0a:16:2c:28:22:
3b:a0:bc:cd:df:33:96:0b:0c:48:11:a7:0f:73:08:
e1:e7:27:e6:5a:da:15:06:b1:42:44:12:e9:87:82:
6a:00:c1:73:68:3f:61:f6:c3:ad:a6:f0:ff:90:62:
bf:ee:8f:c4:bc:41:7f:1d:a9:da:4a:ea:40:6d:a5:
4b:27:e8:f7:f0:49:20:69:32:db:4e:ce:1f:86:0b:
fa:3c:d2:d9:3e:93:ea:62:d4:ad:69:e7:02:46:1d:
58:aa:19:0a:d1:4d:42:32:33:58:74:da:67:e0:98:
f4:79:69:e9:a4:e1:71:69:cb:3d:d1:04:ad:f0:00:
6a:65:64:53:72:76:d1:25:1c:38:54:e1:11:a8:ef:
d1:13:b6:33:0a:12:bb:af:bc:ea:59:00:e8:d2:58:
e5:43:e8:be:9b:cd:2e:23:56:e6:02:87:81:6e:2e:
88:3b:65:3d:7c:82:0d:b5:5c:79:68:b2:45:ce:25:
c0:40:67:6a:38:dc:97:b5:9d:4d:40:55:07:ca:d9:
2f:33:74:cd:7e:91:b6:ee:a6:90:f4:e0:e6:9b:22:
0f:44:95:59:a7:9b:bf:8a:ae:ed:f4:90:77:9a:c9:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:52:86:90:3E:92:AA:2E:2F:06:BB:82:3D:97:2C:BA:FD:EC:5C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CrtShpA-kqouLwa7gj2XLLr97Fw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.224.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7e:53:75:04:63:f8:74:cd:60:64:d7:7a:2c:bf:62:13:74:
e7:8f:a0:49:21:f1:a2:91:96:5f:69:52:9e:ac:b9:28:b4:d8:
24:4e:f4:a9:8b:29:21:1b:29:9d:e1:da:46:fa:08:53:9b:45:
9f:4d:f4:7b:eb:33:ad:b1:84:d5:1b:70:d2:32:5b:be:23:6d:
2b:02:66:e4:f3:e0:4a:63:ee:08:13:10:a2:83:62:84:bd:42:
e3:46:4d:a0:0e:4f:96:e1:45:27:2f:5e:68:fc:9a:c0:d9:0a:
26:f5:8f:88:2f:95:44:6d:b8:52:a5:fb:e4:02:0f:2c:e8:53:
b5:45:c1:19:f5:d4:02:ef:28:cc:4e:61:bf:0f:31:f7:65:24:
20:0e:e7:f7:01:6a:30:a2:8e:77:b3:cc:ee:e4:3e:1e:6c:81:
28:43:22:a1:9a:ff:af:8a:1c:93:74:7b:74:bc:8a:6e:27:e6:
c1:bc:b4:9c:e1:5f:b5:6c:15:52:f3:e0:4b:42:7d:0f:6e:a3:
b9:c1:0c:e7:f8:e8:7e:a2:ab:92:ec:8a:d7:66:af:ce:f7:3e:
00:b6:a2:31:b0:f9:62:bd:96:05:0e:ff:10:f5:9a:a8:a0:ca:
b3:50:d8:e3:95:af:0d:85:02:4f:c5:3f:7f:98:b5:7b:bb:a8:
9e:de:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:10:36 2025 by rpki-client