Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IBRwOpDLCK2Xpav0mJJqlrWLjuQ.roa
File: IBRwOpDLCK2Xpav0mJJqlrWLjuQ.roa (raw, json)
Hash identifier: 1S8QLFZ8tir/P5lKCca3pSvqUbQPaX42/O25W0tql1k=
Subject key identifier: 20:14:70:3A:90:CB:08:AD:97:A5:AB:F4:98:92:6A:96:B5:8B:8E:E4
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C70
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IBRwOpDLCK2Xpav0mJJqlrWLjuQ.roa
Signing time: Wed 29 Sep 2021 02:49:51 +0000
ROA not before: Wed 29 Sep 2021 02:49:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.17.13.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2014703A90CB08AD97A5ABF498926A96B58B8EE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:cc:2b:ee:a8:3d:2c:4d:bb:ce:d4:60:46:
02:f2:8d:e9:1a:e1:f8:30:50:9d:28:e5:9f:f7:c0:
85:02:c2:68:d5:d0:ae:e6:f9:b6:80:cb:6b:d9:9c:
84:29:b6:f6:4a:45:e1:8d:73:fd:5e:ea:5e:77:68:
e3:62:64:a8:2c:49:07:9a:4e:cf:00:6c:96:3a:61:
17:b7:a3:a2:16:98:2b:56:3b:82:d7:c0:0a:cd:a7:
34:be:0b:ba:31:88:72:e8:31:ab:7c:51:81:21:66:
14:24:a3:38:21:6c:28:1b:dc:01:70:9a:58:f7:04:
0d:37:b1:5c:87:84:77:40:68:85:31:af:e7:86:e4:
c6:17:a6:07:76:b5:27:c8:15:fc:17:a3:93:09:f0:
3c:21:2b:44:44:c4:b5:6f:63:1a:68:5f:04:e3:26:
3b:46:28:a8:de:74:f9:68:c0:77:b1:ea:cc:ea:c2:
47:62:c6:5d:b3:5c:70:86:31:0b:d5:3b:8f:01:10:
19:58:51:18:fa:40:8c:23:54:45:c0:b4:09:2a:c6:
d7:06:74:8a:9f:f5:d0:70:04:15:cd:e8:80:85:11:
67:42:03:b6:e7:89:ba:ac:88:9e:97:3e:13:ae:a9:
17:c1:52:17:2d:a7:ef:42:ab:99:bd:5f:4b:ac:c2:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:14:70:3A:90:CB:08:AD:97:A5:AB:F4:98:92:6A:96:B5:8B:8E:E4
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IBRwOpDLCK2Xpav0mJJqlrWLjuQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.13.0/24
Signature Algorithm: sha256WithRSAEncryption
16:38:33:1b:f8:30:99:55:ce:1c:ed:d5:c3:50:3c:ac:98:f4:
46:d4:55:68:e4:4d:ee:97:0f:55:3e:9e:74:3d:a5:75:68:dd:
07:e0:35:ab:69:06:84:38:97:2a:88:0f:a4:e9:fe:57:4e:63:
42:92:23:47:ba:40:e2:d3:6f:e3:4b:85:d3:61:82:5f:af:a7:
4a:e0:66:c4:47:a7:c3:83:7a:a6:8d:f8:da:1c:b4:90:23:c1:
2f:14:d9:ef:89:4f:c1:b8:a9:08:b1:9d:b7:24:39:44:fa:9c:
f3:99:0f:57:2c:5b:e1:97:84:f8:06:eb:79:7e:a9:a8:c8:09:
22:9b:f0:a7:cf:49:08:9b:20:7e:65:4c:bf:41:0a:96:18:1b:
5f:4f:93:25:56:57:ed:bd:85:23:97:8d:0e:20:42:ae:9c:02:
f5:c3:f5:77:c8:cf:81:34:46:3f:95:9b:81:e3:08:82:0a:29:
92:f7:46:a6:ae:a4:ae:61:1f:31:35:fc:49:7f:4c:7a:79:eb:
54:c2:ad:6d:da:8a:1f:f7:65:d8:4e:b9:17:ad:b5:d4:a3:67:
8d:35:0f:54:62:3c:19:b1:58:c5:85:6a:20:ee:1b:41:01:29:
9e:af:8c:53:5a:9c:de:78:cc:a2:02:b3:3d:ca:5e:9f:df:96:
42:3f:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org