Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7zgZnoTRLX4MQOEysj-QaLX2Ro.roa
File: I7zgZnoTRLX4MQOEysj-QaLX2Ro.roa (raw, json)
Hash identifier: Y4VewSyCesbfzxUStGSa+2iIVIs7yX5cEunwpJQQ2EY=
Subject key identifier: 23:BC:E0:66:7A:13:44:B5:F8:31:03:84:CA:C8:FE:41:A2:D7:D9:1A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7zgZnoTRLX4MQOEysj-QaLX2Ro.roa
Signing time: Thu 15 Sep 2022 02:47:19 +0000
ROA not before: Thu 15 Sep 2022 02:47:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 210.17.43.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=23BCE0667A1344B5F8310384CAC8FE41A2D7D91A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2a:40:b1:c4:e2:5d:25:d7:03:6e:f0:2f:46:
c0:b9:46:5c:36:dc:af:47:ed:d3:c9:fa:c6:47:d5:
03:0a:ae:01:86:7d:f4:37:e6:af:bc:5e:85:c0:a7:
f9:45:88:ac:38:58:09:ae:3f:0a:71:28:39:40:86:
93:9f:31:cd:12:82:dd:a6:ff:d8:7d:cf:75:4b:3d:
05:47:c2:1e:fe:de:fc:3e:25:1c:a6:16:92:67:9b:
3a:fa:8c:87:87:18:54:cd:fa:6a:05:01:d8:af:0f:
7e:9f:20:a8:f5:d6:19:6f:1f:2c:29:dc:72:20:9e:
b8:55:95:13:45:50:c5:23:82:ed:ea:ee:36:57:fa:
5e:73:e2:c8:96:b3:59:46:84:dc:5e:ba:6a:57:6c:
2c:5e:9f:a1:e4:fe:b3:47:b0:e3:2c:6d:82:37:ac:
69:47:ed:a7:0c:d6:f8:9c:5e:e3:83:c2:61:94:2a:
0a:51:7d:7d:fc:02:eb:1c:96:68:57:39:44:2c:21:
85:bc:95:f9:f2:50:c2:f8:13:e8:2a:d3:df:e3:9d:
87:a0:f7:4e:cf:65:10:8e:56:47:4f:cc:cb:08:1f:
e3:33:f8:12:3e:37:f7:a1:67:39:8c:8f:5c:ad:51:
89:19:ff:a2:fd:d1:61:80:c8:f9:b0:36:68:9d:5b:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:E0:66:7A:13:44:B5:F8:31:03:84:CA:C8:FE:41:A2:D7:D9:1A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7zgZnoTRLX4MQOEysj-QaLX2Ro.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.43.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9d:3a:ee:30:ed:01:f0:b5:7e:65:32:79:0e:a6:69:24:c3:
80:f4:70:25:4e:1f:30:53:24:f9:8e:4d:06:40:69:df:9d:52:
31:c8:78:37:ab:b9:91:69:42:01:a5:56:30:d1:06:0f:a8:e2:
79:15:66:78:da:d7:05:1d:19:18:09:fd:b6:40:80:26:c2:dd:
23:7d:3c:fe:16:52:e9:9f:f7:99:9b:b7:fa:00:4e:75:25:67:
8a:ba:4f:b8:bb:df:65:50:68:86:63:53:0f:3a:fb:c6:09:09:
37:a1:47:cc:92:ee:1c:61:e9:79:2d:51:cb:dd:32:ad:6e:c2:
4b:af:2c:d0:77:02:26:71:fd:2c:36:76:10:8a:5d:a7:7d:8c:
0e:c5:83:7c:c3:97:cd:6d:50:e4:7b:30:fb:63:82:16:8f:13:
51:58:f9:18:d5:06:43:80:0c:ad:43:09:cd:f9:75:b3:1c:3b:
17:25:23:bb:89:b9:9b:fb:e9:54:43:75:ca:e8:b8:fd:79:83:
b1:12:ad:5d:55:d0:e8:24:39:a7:b0:28:b7:cb:71:c5:cb:3a:
9c:f7:04:7f:6c:98:f0:fe:ba:6d:18:1e:ed:4f:52:a6:16:0c:
56:c3:c4:98:d8:e0:87:f0:85:48:6a:07:23:b0:b7:34:27:8e:
d6:a4:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:33 2025 by rpki-client