Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JjHfPZgkmS7A0kSOh1WLXjR-5qg.roa
File: JjHfPZgkmS7A0kSOh1WLXjR-5qg.roa (raw, json)
Hash identifier: 3X4iJoflPC/C0rQbYZeM+pWoBThrZ9RWy8rMqJrqOTo=
Subject key identifier: 26:31:DF:3D:98:24:99:2E:C0:D2:44:8E:87:55:8B:5E:34:7E:E6:A8
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C46
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JjHfPZgkmS7A0kSOh1WLXjR-5qg.roa
Signing time: Wed 29 Sep 2021 02:49:37 +0000
ROA not before: Wed 29 Sep 2021 02:49:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 49.216.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3142 (0xc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2631DF3D9824992EC0D2448E87558B5E347EE6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:6a:ee:2b:54:17:66:fa:21:b5:b5:0a:16:
4e:d5:24:bc:73:d7:62:e0:0c:19:94:72:06:50:dc:
2b:23:36:e8:69:31:28:c9:9c:7e:62:18:88:bd:81:
f3:26:e7:60:60:27:fc:96:18:5e:06:7a:de:df:0b:
37:9b:b6:5b:ec:2d:cf:99:5e:6e:3e:5e:87:23:96:
22:dd:42:c4:7e:6e:bf:c7:f3:3e:29:29:34:bd:9b:
f8:e6:2c:e5:2c:c5:51:44:44:1b:2a:d3:04:72:0e:
c3:49:ab:67:46:b0:24:3f:9e:31:d4:f3:61:3e:57:
39:b0:50:97:61:b5:b7:81:ea:18:b1:d8:e5:d9:42:
7e:7f:ae:28:20:62:06:68:f0:0a:40:da:ad:d8:48:
11:91:8e:50:8d:fe:96:a4:a2:12:d6:b0:2d:9a:4e:
4e:99:1f:7e:f4:45:e5:fd:a4:34:4d:4e:8a:93:15:
d3:a7:ba:a1:04:16:04:c4:06:34:69:f6:04:04:81:
18:3c:39:48:98:0d:12:a3:18:4b:77:75:27:3d:4b:
61:c4:ae:09:7e:37:20:88:93:f9:66:fc:c3:0f:db:
e2:9c:6e:37:81:de:8e:d1:bd:26:b3:14:21:8d:fd:
23:17:7c:25:09:2d:dd:42:54:80:d7:42:50:43:31:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:31:DF:3D:98:24:99:2E:C0:D2:44:8E:87:55:8B:5E:34:7E:E6:A8
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JjHfPZgkmS7A0kSOh1WLXjR-5qg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
99:ec:62:af:cd:64:a7:b9:c4:54:51:54:f1:2d:cc:05:bc:36:
73:75:16:06:74:43:5d:c2:24:04:cc:50:84:58:11:dd:f5:ee:
5c:eb:b4:69:f8:2e:43:43:53:d5:9c:6a:18:a0:3c:1c:e9:3b:
98:64:c3:0d:5b:9d:97:f2:23:f8:42:97:5a:a2:e9:c3:ae:2b:
29:b9:63:4a:c2:75:cd:cf:b5:3e:82:74:9c:86:76:7c:45:2b:
64:69:f5:5c:a3:ef:13:ba:90:3a:19:d3:a6:db:00:48:ed:04:
f8:8a:54:ab:59:d6:d4:f8:39:6d:05:03:32:ec:a6:a0:a1:4c:
a8:46:ec:10:50:fc:a8:ae:f7:8d:a3:31:72:e9:8f:58:f8:ec:
eb:6c:8e:97:e4:9a:0c:7d:c8:38:10:15:c4:b3:47:d4:48:20:
2c:24:4f:c5:31:7b:66:1f:63:8d:7e:6a:ab:f6:74:b8:e2:ef:
85:57:e9:30:1a:ae:00:48:74:f3:95:0a:ee:a6:8c:5d:98:68:
d5:55:84:28:41:70:15:7a:ed:fa:bb:1c:4b:11:3b:d0:5e:68:
ad:99:55:c8:0c:c6:34:3a:6e:5e:05:19:2f:30:03:4f:2c:89:
34:e1:87:00:9c:13:3c:9e:80:e5:94:08:68:63:49:87:f8:72:
e8:c4:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org