Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KkYPdPi_BQWJVJFp5E81EWRJjqI.roa
File: KkYPdPi_BQWJVJFp5E81EWRJjqI.roa (raw, json)
Hash identifier: 2Mzq/dak1qLCyjvT3jNqLrylvXIUWZpu+Z/luIOhJeE=
Subject key identifier: 2A:46:0F:74:F8:BF:05:05:89:54:91:69:E4:4F:35:11:64:49:8E:A2
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0CAA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KkYPdPi_BQWJVJFp5E81EWRJjqI.roa
Signing time: Wed 29 Sep 2021 02:50:07 +0000
ROA not before: Wed 29 Sep 2021 02:50:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17213
IP address blocks: 60.198.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2A460F74F8BF050589549169E44F351164498EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:4b:9b:3d:c9:13:96:a2:ba:1a:98:0e:81:
e5:7d:77:79:3f:e4:8b:3a:59:d5:f2:e9:d6:0a:13:
8f:31:a1:48:5a:e6:9e:5d:4b:f5:f2:13:32:cc:f9:
b2:54:62:25:2c:87:1b:ef:84:01:18:62:6e:fd:55:
f6:c7:5a:28:fd:1d:6a:f8:2b:76:a9:78:d9:05:1c:
1c:46:9e:27:75:36:c0:02:db:b6:01:18:8c:f2:21:
3e:6a:79:ce:53:49:0c:0b:1c:dd:39:76:70:33:fd:
3a:9f:78:6c:81:d4:3a:6b:a0:21:97:44:56:8b:7b:
10:95:c0:7c:cd:dc:b7:70:52:a3:06:89:7a:03:6c:
f2:6f:54:73:60:b3:f6:2b:75:cb:2c:4e:d8:b7:25:
75:da:d4:28:f6:82:03:ae:f6:05:b0:39:89:02:9e:
0d:10:2a:6a:e5:8f:92:ff:33:9c:03:68:2a:9d:ca:
64:bb:d6:b6:9e:56:1a:b4:3e:f8:82:af:37:11:f4:
07:54:4d:dd:f1:97:26:7a:ce:73:25:a2:7e:32:26:
76:54:c0:e3:b8:86:52:66:2a:68:57:21:3d:81:7e:
fe:16:ba:1f:df:22:a7:74:36:9d:67:14:81:81:29:
3b:1e:74:0a:b9:87:29:2c:62:16:16:eb:cc:f3:e2:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:0F:74:F8:BF:05:05:89:54:91:69:E4:4F:35:11:64:49:8E:A2
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KkYPdPi_BQWJVJFp5E81EWRJjqI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5f:3f:ca:02:b6:88:f2:a4:80:4f:6c:87:d1:0e:f3:66:f3:
5f:25:5f:36:6d:29:47:c4:30:9e:a0:c7:be:12:1e:07:2b:5a:
d2:9f:37:f1:f8:d1:98:96:2a:c3:9a:d1:0b:4e:9a:f6:45:c9:
57:1a:36:11:66:32:e4:52:97:23:61:d3:15:3e:98:e9:10:9c:
df:84:fe:93:18:51:f6:45:d6:94:97:31:28:d4:42:44:81:38:
b4:0d:f8:8c:75:b4:30:0f:22:76:09:34:51:5c:f3:db:ce:9d:
d9:ba:04:74:94:25:62:d8:b6:dd:5b:30:e6:47:69:40:71:4e:
a4:b3:9a:f7:4a:f8:af:f5:25:03:e9:22:99:d7:9c:08:32:22:
2b:04:0c:6e:a1:05:ab:78:8b:67:0e:3b:3c:fc:67:05:6a:4f:
3a:4c:f1:6f:bb:1a:99:3e:29:0a:47:18:39:c1:77:d8:41:3f:
3b:8d:6d:81:3e:e3:00:6d:a2:b5:2b:fb:6b:85:50:ca:f5:0a:
04:2a:d4:36:57:e3:a8:34:17:f1:45:d3:5f:ff:ce:ad:f6:58:
82:9a:99:b7:8e:d7:55:b5:9a:b7:6c:85:d9:25:7f:3d:3e:8e:
7e:ce:3c:4d:eb:89:41:24:df:a5:65:e2:c0:5d:5e:b9:e9:a2:
f4:2d:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:13 2025 by rpki-client