Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GbThotsQCFzOp51XNP8iyO4uR0o.roa
File: GbThotsQCFzOp51XNP8iyO4uR0o.roa (raw, json)
Hash identifier: rMtSMtLfPaCOHan05YEm8L4cUZqn67WBxUYMVQI8aXs=
Subject key identifier: 19:B4:E1:A2:DB:10:08:5C:CE:A7:9D:57:34:FF:22:C8:EE:2E:47:4A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0A6A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GbThotsQCFzOp51XNP8iyO4uR0o.roa
Signing time: Sun 07 Feb 2021 11:36:12 +0000
ROA not before: Sun 07 Feb 2021 11:36:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 61.30.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:36:12 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=19B4E1A2DB10085CCEA79D5734FF22C8EE2E474A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:03:ef:2f:78:c6:9a:7b:11:94:7f:ba:6f:
3b:a8:d7:ee:d0:13:04:0e:7b:b9:9f:a8:8d:31:29:
4f:3c:f1:b4:c5:b8:83:f1:6c:d0:ba:c1:6c:7f:e8:
bb:c3:f4:e6:6b:8a:16:94:d7:7c:d4:37:40:68:2f:
80:d0:c1:28:72:66:56:d6:93:cb:dc:f7:d4:1d:d7:
1a:da:fc:d9:56:b4:45:88:4e:aa:1a:5f:30:f7:a0:
47:87:83:a6:92:45:17:56:4b:b2:5c:6e:ee:5c:fd:
39:56:68:e8:d0:c5:bb:8c:4f:91:c3:a3:70:c5:7f:
55:a1:6e:26:9e:ac:b9:9b:43:6d:0e:be:0d:e9:b0:
22:07:e9:21:c0:38:76:71:f7:09:98:a6:ae:78:b5:
7f:29:c3:11:dd:24:bc:ca:f6:dc:f2:b3:69:f9:b8:
fa:22:38:82:ba:ff:63:94:ce:92:6f:85:8b:8e:f9:
36:2d:2f:3e:be:9c:e3:a0:fa:6f:a4:10:e4:b9:a7:
4c:e6:47:d9:a2:65:56:31:54:da:3e:c5:c8:8d:5f:
f5:6f:f9:e9:3e:90:f4:91:a3:61:8d:0b:ca:13:eb:
ac:e6:0b:fc:3a:d0:8c:0c:28:2f:18:05:c8:a4:0a:
c9:4f:c7:87:ca:ba:d6:62:14:a5:db:08:44:cc:f7:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B4:E1:A2:DB:10:08:5C:CE:A7:9D:57:34:FF:22:C8:EE:2E:47:4A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GbThotsQCFzOp51XNP8iyO4uR0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:ab:09:ad:f9:4a:58:69:4d:27:8c:10:f2:c6:1e:44:c5:40:
da:51:34:7e:67:7f:76:d4:66:77:9f:86:f4:fe:39:c4:75:98:
5e:6a:4f:6c:c5:d5:42:c9:1d:13:7b:ee:d8:f6:6a:c2:7f:58:
91:f4:67:c9:ea:f2:1b:b5:3d:fe:46:9b:04:01:6d:19:e3:c0:
2a:07:a0:da:75:a4:f1:f2:67:f2:79:ff:19:25:cb:7e:68:32:
7a:c7:29:e9:ad:45:26:3d:96:3e:12:fc:cf:cc:91:be:4f:d2:
c0:88:91:8a:b0:54:d4:65:35:8b:35:45:90:93:24:21:e1:ef:
2f:b3:4e:8b:9c:e7:5f:06:d8:6a:7a:7e:28:4b:96:9a:eb:d8:
3d:8d:d2:7b:85:04:a3:67:e2:77:d7:ec:fb:f3:eb:e4:64:ab:
5e:c2:90:bd:da:73:91:cb:40:3f:23:b2:af:2a:f5:95:96:93:
e9:67:2e:47:c6:43:78:20:2b:a0:e7:93:4f:48:f9:9c:b7:08:
5a:f0:e1:e7:3e:5f:bb:5e:a4:1f:82:4c:12:c8:4b:8a:1e:a9:
47:4f:b3:84:0f:0d:9d:4e:ea:cc:71:0b:ad:96:ab:00:68:3e:
8e:4c:9d:f5:a7:fa:5b:61:8e:e4:10:b5:c9:9a:f6:5c:03:6b:
93:6c:16:53
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MTM2MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE5QjRFMUEyREIxMDA4
NUNDRUE3OUQ1NzM0RkYyMkM4RUUyRTQ3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqoAPvL3jGmnsRlH+6bzuo1+7QEwQOe7mfqI0xKU888bTFuIPx
bNC6wWx/6LvD9OZrihaU13zUN0BoL4DQwShyZlbWk8vc99Qd1xra/NlWtEWITqoa
XzD3oEeHg6aSRRdWS7Jcbu5c/TlWaOjQxbuMT5HDo3DFf1WhbiaerLmbQ20Ovg3p
sCIH6SHAOHZx9wmYpq54tX8pwxHdJLzK9tzys2n5uPoiOIK6/2OUzpJvhYuO+TYt
Lz6+nOOg+m+kEOS5p0zmR9miZVYxVNo+xciNX/Vv+ek+kPSRo2GNC8oT66zmC/w6
0IwMKC8YBcikCslPx4fKutZiFKXbCETM95L/AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUGbThotsQCFzOp51XNP8iyO4uR0owHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvR2JUaG90c1FDRnpPcDUx
WE5QOGl5TzR1UjBvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AD0eMA0GCSqGSIb3DQEBCwUAA4IBAQArqwmt+UpYaU0njBDyxh5ExUDaUTR+Z392
1GZ3n4b0/jnEdZheak9sxdVCyR0Te+7Y9mrCf1iR9GfJ6vIbtT3+RpsEAW0Z48Aq
B6DadaTx8mfyef8ZJct+aDJ6xynprUUmPZY+EvzPzJG+T9LAiJGKsFTUZTWLNUWQ
kyQh4e8vs06LnOdfBthqen4oS5aa69g9jdJ7hQSjZ+J31+z78+vkZKtewpC92nOR
y0A/I7KvKvWVlpPpZy5HxkN4ICug55NPSPmctwha8OHnPl+7XqQfgkwSyEuKHqlH
T7OEDw2dTurMcQutlqsAaD6OTJ31p/pbYY7kELXJmvZcA2uTbBZT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:15 2023 by rpki-client on console-fra.rpki-client.org