Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IceJpMxSpZi_DtZPZ-2UyWrB-HA.roa
File: IceJpMxSpZi_DtZPZ-2UyWrB-HA.roa (raw, json)
Hash identifier: Hlogq0X7vvTXY5wkzpV0e+bZuCQIYgqdrI/EjbNghaI=
Subject key identifier: 21:C7:89:A4:CC:52:A5:98:BF:0E:D6:4F:67:ED:94:C9:6A:C1:F8:70
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C43
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IceJpMxSpZi_DtZPZ-2UyWrB-HA.roa
Signing time: Wed 29 Sep 2021 02:49:37 +0000
ROA not before: Wed 29 Sep 2021 02:49:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.17.17.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=21C789A4CC52A598BF0ED64F67ED94C96AC1F870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:ab:77:8d:e7:b5:ac:8c:2c:d0:36:08:93:
cf:25:52:50:7e:df:31:ec:e9:ae:55:8b:16:35:06:
47:25:d7:97:b4:a9:4a:a9:e5:1d:fe:8d:13:c5:ac:
16:6a:ff:ef:6e:4a:56:32:72:95:d4:38:c4:49:2f:
c5:96:7a:f4:31:05:99:a6:9a:53:94:fb:2f:ea:3b:
a1:e8:1a:79:b0:dc:a6:00:d7:a7:b0:36:ab:46:94:
c9:d5:cf:b6:27:bd:82:91:e3:c7:b1:2c:93:83:ff:
19:af:c9:14:d6:af:0a:a9:4c:29:0d:78:58:18:4f:
a3:05:b0:27:b5:86:f4:ab:bd:36:38:22:58:aa:a4:
3d:d0:03:5c:89:db:4f:c1:c6:f7:81:5f:6d:a5:44:
f1:e8:2b:44:39:9e:e4:20:a5:e1:4d:d0:3b:55:6e:
40:77:7c:5b:4e:94:b0:a7:8d:43:46:eb:33:a6:ea:
e2:41:3c:25:41:76:13:c5:f7:d4:da:2f:41:4a:71:
08:48:4c:dd:8a:6f:50:bc:36:c0:c3:e8:36:ce:f8:
03:18:df:9d:f3:ce:2a:2c:54:ce:45:3f:66:61:13:
6a:41:da:07:68:b3:5e:05:85:b6:13:8c:87:1f:36:
ed:77:84:63:04:61:a6:e4:d1:69:e2:37:73:75:1e:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:89:A4:CC:52:A5:98:BF:0E:D6:4F:67:ED:94:C9:6A:C1:F8:70
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IceJpMxSpZi_DtZPZ-2UyWrB-HA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:aa:ba:ca:bb:12:ef:c2:1a:d4:f3:c8:80:96:c7:da:38:b4:
3b:11:2c:ff:37:9b:b5:cf:4d:c1:c2:b9:e2:3d:0d:6f:7e:1c:
34:eb:6c:f7:fb:21:ff:1e:0b:60:65:fd:95:6c:bb:e5:2a:f3:
89:c5:45:36:dc:a1:a1:9e:06:a2:c1:30:44:56:17:a5:8f:87:
5c:cd:28:5e:44:39:0c:29:09:b9:6a:34:68:63:2f:ba:1d:0b:
f7:c2:c4:81:29:3b:71:b2:2c:5d:67:92:fe:11:df:2b:1f:a6:
d9:0e:59:e2:55:a2:4e:69:b5:3c:d1:98:f7:5c:0c:df:2e:7a:
b9:6a:b3:88:c3:07:0b:de:c9:53:c9:56:86:51:5a:af:76:bc:
3c:ca:21:15:cf:34:0c:9d:34:ef:ec:f2:3d:8b:47:91:0c:5b:
8e:f9:71:97:46:b1:3b:fe:74:02:42:e5:d6:b5:89:44:0b:3d:
aa:79:b0:d6:cc:29:d7:e8:32:01:e5:a0:a5:ee:56:8f:07:6b:
dd:ad:4a:4a:6e:e6:ed:57:de:c8:7d:26:4b:56:9c:37:18:de:
ba:d1:f0:40:c2:8d:9e:a9:e5:d5:c2:cf:29:58:8d:17:8e:20:
bc:42:0d:46:b0:02:bc:44:11:f1:24:8f:ce:a9:fa:1f:8f:6c:
ac:5d:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org