Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I1V4zyfwoBI0EvLdEuYeGXVKyA4.roa
File: I1V4zyfwoBI0EvLdEuYeGXVKyA4.roa (raw, json)
Hash identifier: j4Jxvqs4JvidFpckD6qwBxb6K04cRBgdHufmI5WEbBM=
Subject key identifier: 23:55:78:CF:27:F0:A0:12:34:12:F2:DD:12:E6:1E:19:75:4A:C8:0E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 082F
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I1V4zyfwoBI0EvLdEuYeGXVKyA4.roa
Signing time: Tue 29 Sep 2020 09:57:51 +0000
ROA not before: Tue 29 Sep 2020 09:57:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24158
IP address blocks: 49.214.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2095 (0x82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=235578CF27F0A0123412F2DD12E61E19754AC80E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:06:4c:b3:24:0d:1d:55:18:f2:f5:17:72:
85:43:13:5d:08:44:f9:a1:48:0f:71:9c:11:1c:30:
a1:8e:5c:d0:70:7a:46:2e:87:ae:19:0b:68:52:e0:
84:2c:06:48:3c:45:59:ae:98:0b:f8:16:e9:45:34:
da:aa:62:92:65:97:f0:aa:6f:a7:20:02:1f:85:1c:
92:6e:cb:f3:d3:5b:0e:b3:03:74:ab:91:b8:69:56:
95:c5:2a:58:22:1f:b3:ad:0a:20:93:b0:7c:c9:6a:
98:5b:0e:4b:ba:78:01:0f:a5:b5:b6:56:26:f2:89:
33:3a:4b:37:4d:19:23:19:a0:0d:e9:b5:2a:4d:f4:
40:68:7c:29:91:4c:ab:50:7b:09:02:c2:47:ba:39:
57:af:f4:69:16:96:dc:94:fe:51:c3:a4:9b:c8:51:
ca:3b:d9:22:38:8a:02:d2:c7:b5:d3:45:a0:99:08:
bd:0e:63:61:0c:2b:af:5f:a2:4d:a4:3c:a7:88:5c:
d6:ac:fa:59:51:6d:45:ec:ef:cc:f1:db:13:8b:c1:
12:ae:b0:dc:66:cb:ed:2a:f6:e3:08:5e:e4:0a:80:
f2:a3:95:3c:7a:c8:6c:e9:8a:b1:84:d4:85:2a:85:
1d:a2:cc:01:4a:4c:2d:ea:ad:11:eb:3c:e9:68:40:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:78:CF:27:F0:A0:12:34:12:F2:DD:12:E6:1E:19:75:4A:C8:0E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I1V4zyfwoBI0EvLdEuYeGXVKyA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5a:e1:e9:db:07:27:13:a1:ea:ab:11:67:97:22:b7:b6:b7:4d:
86:2a:84:fe:54:54:59:ce:a1:22:c3:c2:37:5e:77:3a:98:77:
29:48:a2:08:21:4d:dc:bd:4b:88:b8:92:cd:cf:2e:94:2f:a1:
23:74:21:65:0e:26:bb:cd:7c:33:5c:57:a6:47:bd:74:30:31:
24:56:40:68:26:5f:96:82:15:25:05:94:a2:aa:d6:66:a4:65:
0d:07:b0:bd:82:81:ec:3e:9b:35:eb:66:94:4d:aa:01:26:89:
42:fd:20:6d:9f:93:6c:dc:ca:c1:83:07:48:49:d8:95:76:d2:
46:22:68:4b:17:e5:8b:d6:41:81:f5:c5:08:22:7a:dc:83:21:
c3:6d:78:57:cc:45:c4:c3:47:65:62:49:04:de:48:65:50:bd:
7f:7e:ed:c3:b4:cc:bb:c4:0f:58:86:cc:cc:42:13:bb:87:86:
c5:7b:7f:95:36:89:1d:18:1a:12:09:3d:7a:c2:89:d6:96:d3:
b2:33:fd:67:1b:ca:39:37:98:93:6c:5f:f9:70:df:c1:72:0b:
7b:74:c5:27:e7:2f:16:62:40:a1:f4:67:2b:85:5d:ae:91:ae:
b5:20:21:e4:c3:64:ae:21:c3:43:b1:8a:56:a1:c6:57:22:93:
93:92:6e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org