Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HJOmhNgc4YR9iOK1pG-t_eyP0zw.roa
File: HJOmhNgc4YR9iOK1pG-t_eyP0zw.roa (raw, json)
Hash identifier: FGWmdzS7tRe0unTRX/zW+XS8mgyukRfiKbm+UDP6jJo=
Subject key identifier: 1C:93:A6:84:D8:1C:E1:84:7D:88:E2:B5:A4:6F:AD:FD:EC:8F:D3:3C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0AB8
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HJOmhNgc4YR9iOK1pG-t_eyP0zw.roa
Signing time: Sun 07 Feb 2021 11:40:12 +0000
ROA not before: Sun 07 Feb 2021 11:40:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24158
IP address blocks: 49.214.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:40:12 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1C93A684D81CE1847D88E2B5A46FADFDEC8FD33C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:09:18:da:a0:c8:c2:ba:9a:1d:7a:1a:72:e1:
4c:12:eb:9a:5a:27:0e:4a:be:f6:d0:e7:9f:ea:68:
9f:23:c2:9e:f5:dc:3b:85:b6:c6:da:80:0d:27:d0:
98:9b:09:d8:00:0f:ff:b7:58:eb:09:b1:d9:7f:53:
a6:d7:7e:75:8c:26:71:c2:9d:a3:3c:47:c0:a1:57:
56:a8:42:f4:60:28:16:65:3f:a1:57:0b:86:48:60:
09:bf:9e:50:58:f7:12:f3:57:a7:55:9c:d5:ea:09:
00:75:b0:fa:81:0d:7c:84:7b:a9:3c:0d:41:f3:8b:
61:8e:b8:a6:97:dd:73:09:ce:40:44:c9:00:a2:3e:
29:5d:8d:70:c7:3b:36:e2:7e:ca:b2:6a:4d:69:91:
43:d5:9d:07:f2:74:2d:6e:a7:5d:ae:48:19:77:ce:
f8:6d:60:65:01:f1:2d:a3:72:49:29:ea:5c:b9:c5:
99:dd:ee:c0:3b:21:75:7b:b7:a8:86:de:69:f9:1c:
de:ab:62:1e:a2:75:21:1c:22:fd:5d:33:76:e3:59:
03:4b:b3:12:93:1b:62:79:96:f2:b8:69:0d:a2:bb:
5f:ae:ff:82:fe:d0:48:95:64:78:52:b1:48:9e:e1:
0e:f1:9a:46:e6:6c:9f:5e:69:30:69:04:5c:06:b0:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:A6:84:D8:1C:E1:84:7D:88:E2:B5:A4:6F:AD:FD:EC:8F:D3:3C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HJOmhNgc4YR9iOK1pG-t_eyP0zw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
85:c1:b1:63:84:fc:c8:8c:87:38:d5:d5:ed:ac:07:38:a8:66:
3e:aa:01:41:90:24:b2:85:49:7f:6d:dd:2e:56:5f:79:c6:95:
8c:1d:53:24:a3:47:2c:eb:17:61:09:9d:91:94:32:50:c8:60:
c6:2e:53:ac:19:a2:db:0e:0c:13:b2:59:30:73:fb:08:16:6f:
60:06:32:20:1b:5b:c6:5b:11:30:87:df:ab:16:02:ac:5d:9d:
47:17:c5:ea:3a:00:99:59:f1:56:ec:e1:5b:5d:98:e5:36:71:
e6:31:47:f9:2a:7c:57:c5:4e:5f:5a:9f:9d:03:a9:73:12:38:
cb:da:5b:ad:ba:e9:a1:b7:67:9d:36:7b:a5:82:56:1c:36:79:
86:e4:37:dd:8e:80:62:de:73:de:e3:e9:32:8d:56:a5:b7:1b:
8d:28:7a:12:19:61:2d:b7:25:c5:33:e9:ad:99:55:a8:e3:5b:
35:7d:4b:99:a4:e0:83:f9:e9:8d:1d:03:f0:1f:e6:e7:48:20:
35:d1:5c:03:f0:16:9d:6d:61:5e:d4:43:00:39:a1:8a:5a:30:
02:22:8d:ac:34:93:5a:28:22:50:60:15:16:dc:6c:b3:a8:be:
64:74:c7:e4:5e:88:2d:3c:e1:fc:98:5e:e5:d7:a9:15:81:45:
97:b7:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org