Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FFA2GJ8eJR9ucvataH_JUDZFmVU.roa
File: FFA2GJ8eJR9ucvataH_JUDZFmVU.roa (raw, json)
Hash identifier: UXP3Hwr6CCVJA3a39WAUoTlNTy3ThQbe/LQ/F3H80cw=
Subject key identifier: 14:50:36:18:9F:1E:25:1F:6E:72:F6:AD:68:7F:C9:50:36:45:99:55
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0CA8
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FFA2GJ8eJR9ucvataH_JUDZFmVU.roa
Signing time: Wed 29 Sep 2021 02:50:07 +0000
ROA not before: Wed 29 Sep 2021 02:50:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 2001:4540::/27 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3240 (0xca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=145036189F1E251F6E72F6AD687FC95036459955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:ec:a1:ed:d5:53:5e:a4:c9:45:1f:c1:07:
05:ed:40:4e:97:3f:70:7e:68:90:f1:55:ed:55:19:
84:2b:2b:20:5e:f9:4f:1e:02:14:84:4e:86:0e:c2:
f5:b1:85:49:ef:1e:de:c2:31:64:d0:51:f9:1d:ec:
40:bb:fd:01:1a:bb:11:c0:73:34:c7:ac:a5:0f:39:
00:44:cc:53:e0:54:b5:4c:c4:82:73:81:16:d8:38:
c0:e4:0e:b4:5f:60:99:59:1d:5a:0e:6d:19:2a:5e:
e0:03:52:a5:e5:da:29:1d:d8:45:7d:82:96:31:ce:
1b:fe:fe:a3:da:00:6c:22:ab:f8:32:9d:14:c4:f6:
41:4a:6c:e8:25:c3:50:94:ce:4d:37:64:e5:ba:0d:
dc:8e:5f:9a:07:99:46:fc:39:47:88:e3:53:7d:8a:
f8:9d:9d:3a:ae:c0:aa:9b:82:85:95:11:a5:ca:5a:
8b:2e:77:47:b0:8f:b0:f0:1a:c9:18:8b:40:14:12:
f3:4b:d5:41:45:ec:80:fd:52:3f:aa:30:75:24:03:
5b:ad:f4:ab:e4:3c:fe:0f:c9:95:9a:41:87:96:55:
dc:75:e3:d3:6a:76:be:d2:96:2a:fe:f6:02:c2:b8:
5b:f6:55:29:ae:84:f9:50:3d:84:cd:44:d9:ec:fb:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:36:18:9F:1E:25:1F:6E:72:F6:AD:68:7F:C9:50:36:45:99:55
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FFA2GJ8eJR9ucvataH_JUDZFmVU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4540::/27
Signature Algorithm: sha256WithRSAEncryption
81:ec:0c:20:51:9f:66:43:35:25:c3:00:2e:0f:5d:db:65:02:
be:55:76:98:d8:3f:76:f0:f5:a7:6f:47:55:26:57:95:28:e3:
e1:ce:36:8d:40:a8:76:5f:72:dd:7b:56:1d:9a:31:0a:f9:d8:
f2:7b:02:a5:fa:8a:8a:a5:b9:03:10:16:a0:27:36:34:4c:52:
1f:6d:d8:01:9e:14:37:17:77:3d:2d:57:ed:0c:3c:f7:22:1b:
b6:0d:92:d0:aa:8f:65:cb:96:22:10:4a:a5:97:4f:3c:65:80:
b8:a6:9b:80:a4:52:ce:d4:1b:0c:6e:a8:10:54:db:37:3b:d2:
ef:b7:4c:0d:f1:58:9c:3f:4b:8e:fd:b8:28:2c:b3:72:1d:3f:
f9:d8:c2:67:ef:07:19:91:b0:04:d3:c3:46:3b:c9:3c:ef:d0:
e1:0e:3d:45:5b:f3:00:57:7a:0a:ce:f4:ac:9f:e1:00:ca:46:
e7:76:33:08:d6:1b:80:3d:bf:28:58:39:28:72:4e:c6:ee:f7:
47:04:44:83:9a:fb:80:43:dd:f9:90:75:a5:99:0f:0e:2d:65:
dd:f9:c6:35:fe:60:b8:ab:c8:14:1d:b6:ae:5e:18:55:64:14:
88:9c:d0:a0:2a:b1:16:f9:ca:3c:9f:e9:a8:83:54:b0:c3:31:
44:0c:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org