Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LAIh7De6T_7vHGUmLPDLt2uXZ-o.roa
File: LAIh7De6T_7vHGUmLPDLt2uXZ-o.roa (raw, json)
Hash identifier: ht2Yw61PrVqf7JfQipT6+PDFvFspd06hHRkFpD/qHLM=
Subject key identifier: 2C:02:21:EC:37:BA:4F:FE:EF:1C:65:26:2C:F0:CB:B7:6B:97:67:EA
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C8E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LAIh7De6T_7vHGUmLPDLt2uXZ-o.roa
Signing time: Wed 29 Sep 2021 02:49:58 +0000
ROA not before: Wed 29 Sep 2021 02:49:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4662
IP address blocks: 210.67.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2C0221EC37BA4FFEEF1C65262CF0CBB76B9767EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:df:a0:bd:31:e5:77:79:1d:de:fe:88:e6:
1d:48:7f:c2:dc:7a:c0:cc:b9:e9:65:74:16:7e:f3:
e1:6c:41:8d:c0:21:e2:8f:e2:60:83:f9:54:f9:f8:
b7:55:e4:4a:09:6f:2f:fd:71:7e:4a:e3:32:a1:5f:
01:e7:df:a9:ea:7c:cb:50:18:ab:84:9d:9b:3e:84:
be:7b:75:6a:2d:77:65:49:ca:87:d2:8b:c3:f6:90:
f4:40:80:99:88:47:ff:6a:c9:66:78:98:2a:ce:4a:
8a:0b:f3:c8:c6:ae:58:26:c9:93:0e:65:c3:87:a2:
38:cf:ec:8b:aa:78:d3:3c:f2:e3:fb:85:92:96:73:
a5:38:82:1c:56:8d:9d:fa:96:3a:75:e8:de:d2:e0:
73:ab:e9:c1:d1:79:4a:ce:b9:bc:da:b0:f0:cf:f7:
59:b5:77:96:fb:ee:d1:c2:99:6f:87:e9:7c:c4:45:
ad:d1:4f:2a:ea:07:f7:44:d3:a1:cb:5c:07:0d:b4:
65:60:4c:51:4d:58:a6:1f:fc:15:eb:86:6d:4f:92:
2c:bf:d8:93:33:84:a9:10:b3:ea:ea:a6:b7:67:c8:
2a:8d:2f:0d:7f:05:cb:d9:3b:45:c2:8b:00:61:f8:
f3:90:11:81:32:e4:43:81:83:1a:2b:78:b3:5a:13:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:21:EC:37:BA:4F:FE:EF:1C:65:26:2C:F0:CB:B7:6B:97:67:EA
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LAIh7De6T_7vHGUmLPDLt2uXZ-o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:b6:55:81:23:99:71:1d:a0:36:f5:ed:63:a0:da:57:58:22:
77:e0:4f:3e:77:10:90:f6:bc:c9:5d:45:7a:f7:71:be:57:88:
42:9d:03:76:93:07:63:e2:7b:ae:f6:68:54:19:9e:b0:01:6a:
da:02:0a:27:4c:97:f7:52:59:50:90:7f:8d:18:32:a0:c5:04:
c9:09:ff:80:1d:b4:72:dc:9c:00:f8:74:8c:a6:74:cc:38:54:
24:90:0e:c6:d3:08:c9:01:f1:c7:4a:1a:76:97:4f:89:19:29:
4f:61:03:3f:9d:41:23:42:ce:1f:43:42:9e:c5:3e:f7:3c:3d:
43:21:00:8e:1b:19:9e:2f:b2:fe:5e:1c:17:00:a6:1d:e3:63:
8f:12:44:f0:58:15:d0:b6:25:10:6f:b9:78:28:e2:5b:f6:ae:
9d:3c:1a:56:08:8c:83:36:5f:46:c0:ae:66:52:bc:8c:4b:95:
02:54:a0:f0:1a:8e:cc:99:8a:37:c4:e4:5d:b2:e0:66:ce:4d:
d1:35:16:36:2c:52:fc:4f:00:60:2e:2c:32:0e:a7:50:5e:2c:
4e:99:b7:0c:5a:50:3b:3f:8d:3c:9c:40:e4:7a:b0:88:a2:fe:
6b:65:6b:61:fc:53:ca:c2:29:25:9e:8e:5b:a2:07:e2:d9:3a:
de:62:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org