Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CuxsKFvMcXKFNkMqrFJQZv1dkRI.roa
File: CuxsKFvMcXKFNkMqrFJQZv1dkRI.roa (raw, json)
Hash identifier: 5R5xHQBY4vVXlynRC0dqUR/szX4F8UkW5wqpGrZngX0=
Subject key identifier: 0A:EC:6C:28:5B:CC:71:72:85:36:43:2A:AC:52:50:66:FD:5D:91:12
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C97
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CuxsKFvMcXKFNkMqrFJQZv1dkRI.roa
Signing time: Wed 29 Sep 2021 02:50:01 +0000
ROA not before: Wed 29 Sep 2021 02:50:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.67.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3223 (0xc97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0AEC6C285BCC71728536432AAC525066FD5D9112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:b6:2f:34:75:0f:d3:69:ce:ad:0d:96:52:
f6:4d:bb:fa:ab:e4:09:29:84:65:56:85:d9:81:fe:
af:2e:49:2a:12:97:46:28:5d:d7:e9:5e:c8:82:19:
fe:e0:dc:60:26:6c:3f:37:3a:56:55:93:4f:48:6d:
60:aa:32:66:eb:c6:9e:71:ff:58:9c:4e:2a:93:be:
1f:88:2b:11:0b:58:1e:07:7a:d1:b2:2f:66:14:ca:
1b:15:39:3c:08:46:35:3c:f6:60:8c:84:11:23:9f:
f1:59:f9:df:06:36:1e:cc:73:f0:43:39:1c:e2:c9:
5e:47:56:61:46:8f:09:45:b4:ac:6e:8f:bd:66:61:
0d:32:38:06:c6:73:88:ff:8e:73:9c:27:2a:b5:7c:
f8:24:12:a2:63:c1:b5:e3:4e:d4:e7:74:ec:3d:34:
8d:6d:63:4f:0c:cf:39:c4:1e:21:1f:ae:a0:77:c6:
30:e0:5f:27:33:b1:52:a0:2a:4f:6b:ac:e9:cf:96:
37:fa:8a:57:3e:0e:7f:0b:3f:a6:3b:b9:50:39:14:
99:b1:ee:d6:01:ee:e5:dd:f8:cc:d5:f0:4c:6f:f0:
e4:48:3e:42:75:34:22:b8:a7:e8:86:03:13:3d:54:
90:e2:14:76:1c:d3:12:f3:19:44:db:6f:9c:37:4d:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:6C:28:5B:CC:71:72:85:36:43:2A:AC:52:50:66:FD:5D:91:12
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CuxsKFvMcXKFNkMqrFJQZv1dkRI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
79:53:3f:0c:9e:b9:ec:3e:46:c9:2d:33:1e:64:71:88:9a:cb:
5f:1c:3c:16:2e:63:01:c8:12:10:fe:0c:89:22:fa:be:d5:1f:
d5:ce:db:48:5f:cd:19:f1:1b:d1:5d:aa:f0:ee:4a:95:60:ce:
29:fe:ae:3a:ed:6d:b8:8d:48:6b:66:d9:cf:66:be:26:d8:7e:
bd:4c:30:5d:d9:b4:71:51:0f:43:32:ae:d1:5f:3c:ea:c1:97:
32:9b:71:e1:d1:2c:31:2f:c7:6b:47:53:d1:e4:ad:1c:d2:9b:
51:ee:e8:fe:6b:8c:78:f2:b4:83:9b:01:33:2b:cb:7a:55:21:
93:9b:62:f3:b4:92:d1:2d:45:78:ca:9e:fb:cb:e5:36:34:b6:
35:f4:d4:a3:ab:7c:91:7e:71:be:7e:d4:4f:6a:a9:44:c0:d4:
01:61:e8:6d:98:bc:49:94:33:61:4a:5a:fb:fb:1e:c3:99:18:
b8:dc:68:c8:3f:62:d9:3d:08:7d:e0:b4:f1:86:c4:97:94:11:
0d:c8:94:5f:20:4b:4c:54:83:00:b8:f0:1a:27:dd:4b:a6:b6:
ba:d4:ff:5b:95:f4:b9:2c:4c:fb:d9:ee:cb:72:cf:74:9a:f5:
78:05:82:b1:9c:32:26:9a:91:df:78:fa:25:a9:23:6b:8f:66:
62:fe:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org