Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Hoff-Maf5OPeisT3ZvDgwp_u69M.roa
File: Hoff-Maf5OPeisT3ZvDgwp_u69M.roa (raw, json)
Hash identifier: rd3C5bJM+fXkJS/yFQXIv0CxThXxDeLgCcV6qalpnHc=
Subject key identifier: 1E:87:DF:F8:C6:9F:E4:E3:DE:8A:C4:F7:66:F0:E0:C2:9F:EE:EB:D3
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Hoff-Maf5OPeisT3ZvDgwp_u69M.roa
Signing time: Thu 15 Sep 2022 02:47:27 +0000
ROA not before: Thu 15 Sep 2022 02:47:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 61.30.239.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1E87DFF8C69FE4E3DE8AC4F766F0E0C29FEEEBD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0a:be:17:c2:11:ab:8d:5d:aa:82:73:26:ba:
d1:33:a5:2b:de:80:a2:09:95:5b:d5:37:61:1b:2c:
ca:f2:79:fe:7e:37:d7:79:c0:52:9f:b6:de:6f:e6:
9b:1e:d8:5b:f0:1c:f7:ab:f1:68:ad:d9:91:6c:a2:
8b:32:02:d1:4c:09:87:0c:32:0a:76:07:48:ea:f0:
17:43:d4:e9:af:34:ee:27:dd:d2:b8:9e:2f:6c:35:
d5:c7:8a:e2:7f:18:d1:2a:34:bc:1e:40:82:91:dd:
45:3f:1f:f3:b8:98:8e:8e:42:17:64:ee:0f:c5:72:
95:df:bb:b8:c0:f0:a5:91:9d:e8:c5:7a:ce:fb:10:
3c:e9:dc:ff:57:6f:7f:87:49:51:a3:c2:1c:d9:d2:
60:b1:8a:8a:39:db:d1:8d:d8:fc:11:8b:05:12:4f:
77:cd:33:bb:70:cf:fc:69:06:89:42:35:81:6a:7e:
af:b8:44:87:33:66:04:47:28:ab:70:0a:c5:a4:58:
23:dd:64:e8:26:32:8c:31:29:3e:c3:0f:61:27:de:
29:10:0a:e1:49:a5:d5:c0:63:fa:85:22:72:51:d0:
99:87:59:f7:94:4b:0c:0d:10:70:7e:aa:47:d1:b3:
f5:c8:0a:a2:da:c4:41:70:2e:b9:a4:2c:84:c8:56:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:DF:F8:C6:9F:E4:E3:DE:8A:C4:F7:66:F0:E0:C2:9F:EE:EB:D3
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Hoff-Maf5OPeisT3ZvDgwp_u69M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.30.239.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e1:10:b4:3c:fe:77:6b:98:ef:50:6a:47:c1:0b:52:d8:fc:
a8:dd:2d:0b:12:39:eb:b8:39:75:7d:02:f1:ae:e5:64:38:78:
05:7b:17:5d:57:fe:32:fb:bb:99:56:01:6e:41:52:49:d9:2f:
e3:ac:f2:93:37:d2:67:c6:6c:af:85:18:cd:ba:26:d6:1d:69:
98:cd:fd:78:93:70:b7:cc:bf:35:76:20:49:7d:23:92:61:3e:
4b:82:ab:42:61:ab:54:7d:b9:9b:6e:cf:df:43:fd:4e:c6:e0:
39:2e:b4:58:ac:25:bb:16:48:b2:7f:2d:7b:39:ba:eb:81:e9:
55:f2:cd:7f:1f:14:84:04:7d:da:6a:b1:6a:8f:8d:ce:d3:e2:
8d:d2:fa:d5:54:7c:50:b7:39:0f:28:37:11:dd:92:8d:2a:cb:
d1:89:7c:d4:70:80:da:ce:63:87:84:2b:9a:f9:7f:22:5e:33:
06:b8:52:11:1b:3d:d9:e5:65:09:e5:71:da:e3:da:3d:2f:79:
da:07:65:e6:ef:cb:cb:0e:9f:11:f5:fa:ca:63:be:a7:7c:89:
29:38:ac:50:4c:e5:59:4d:2a:bf:db:da:d6:6d:06:b2:2f:7e:
c4:0e:65:84:64:b4:b7:30:db:46:b6:54:26:ac:04:f6:ff:2f:
17:4b:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:26 2025 by rpki-client