Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7-J0W-GWMtJd56zBAMpIw3kQWw.roa
File: I7-J0W-GWMtJd56zBAMpIw3kQWw.roa (raw, json)
Hash identifier: 8D9twNYDz/MM5jR6gKWdEs+n+rsjfWHzDqhgBU3b9Bg=
Subject key identifier: 23:BF:89:D1:6F:86:58:CB:49:77:9E:B3:04:03:29:23:0D:E4:41:6C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B3E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7-J0W-GWMtJd56zBAMpIw3kQWw.roa
Signing time: Sun 07 Feb 2021 13:10:59 +0000
ROA not before: Sun 07 Feb 2021 13:10:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.13.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2878 (0xb3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:10:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=23BF89D16F8658CB49779EB3040329230DE4416C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:24:55:74:36:38:db:03:d6:cb:d1:b4:c9:
6a:17:23:18:6d:94:69:03:4d:b6:8c:cc:13:9a:62:
2f:6e:90:1f:67:93:ca:34:5f:38:c1:e1:e2:45:ce:
df:38:e2:e4:d3:79:e0:67:f3:a1:4e:1c:35:d2:9c:
6d:0e:35:53:5a:ee:a4:52:a4:f6:33:ef:9f:2e:e4:
be:91:18:5b:a1:71:4e:74:59:c2:78:9c:b9:b4:cf:
16:2f:34:34:c7:41:fb:07:6c:3e:64:52:e5:a7:43:
67:16:7a:c4:3c:06:1f:af:76:62:a0:d1:15:7a:94:
d7:54:26:11:24:46:7c:1e:cd:fd:40:2e:de:7d:6c:
b9:1a:14:64:ce:dd:0c:3a:28:09:f3:94:33:2c:58:
7f:e0:6c:fc:6a:be:ea:d9:73:fe:63:b7:2e:31:14:
ce:c3:86:48:e3:1f:d2:03:9d:07:3c:60:35:ee:b9:
6f:1f:2e:2b:b4:d9:c0:64:9c:ec:28:d9:39:df:a7:
68:13:48:b4:04:fc:17:1e:74:e1:d6:38:9b:b7:70:
5c:3b:c8:cb:c3:64:55:c0:63:20:45:89:92:e6:36:
a4:03:8f:29:10:91:7c:e9:11:ad:31:2b:c2:98:4f:
07:fd:2f:1a:36:7b:69:56:f9:00:3f:0c:f2:f4:a0:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BF:89:D1:6F:86:58:CB:49:77:9E:B3:04:03:29:23:0D:E4:41:6C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7-J0W-GWMtJd56zBAMpIw3kQWw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.13.0/24
Signature Algorithm: sha256WithRSAEncryption
10:86:60:0d:c8:f7:2c:65:60:2c:17:17:71:d5:45:3d:9e:d3:
6e:e0:64:c5:e5:2e:c7:06:08:04:8c:95:91:19:9e:52:9c:a6:
0a:ec:b9:9c:67:d6:e0:f4:f5:91:f9:f5:36:2d:98:6e:e1:0a:
6d:c7:87:18:08:06:2f:72:7f:fc:2b:bb:8e:fa:39:43:2d:25:
84:12:29:70:3f:06:f0:4d:af:13:6d:6d:5a:75:20:c7:a4:b1:
2f:5c:47:ca:c4:51:5f:a0:a0:9f:73:e5:42:59:81:9a:45:68:
d5:14:b4:99:7a:8a:10:e7:2f:4a:a1:e0:df:51:d6:fc:57:d7:
b9:d3:d1:79:40:32:21:29:05:34:4e:74:f9:61:6b:81:05:1a:
d7:f7:85:91:5a:8c:27:8f:e3:04:32:d4:28:27:a7:3e:4b:37:
37:c5:81:60:6a:86:6c:5b:8a:33:d3:24:82:6d:f0:a7:bc:1b:
31:52:f5:00:c0:9d:ea:4e:27:f7:28:e8:25:b3:01:ab:30:53:
19:5d:ba:71:38:45:e5:26:c0:da:17:48:d2:0a:2b:9e:5d:f2:
33:0c:70:55:00:fd:5a:8d:71:43:07:10:5f:3f:23:6d:20:a0:
33:cd:a5:1b:a3:a9:2e:ac:e3:98:bb:84:97:fb:54:df:b4:02:
ae:3a:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:58 2025 by rpki-client