Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LM2HCDS09Lf3877bzoNYZE1XOB4.roa
File: LM2HCDS09Lf3877bzoNYZE1XOB4.roa (raw, json)
Hash identifier: sobxk3ewvzmJUFM/0hztNKWFyf+bfQhPn8p28EWET2I=
Subject key identifier: 2C:CD:87:08:34:B4:F4:B7:F7:F3:BE:DB:CE:83:58:64:4D:57:38:1E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LM2HCDS09Lf3877bzoNYZE1XOB4.roa
Signing time: Thu 15 Sep 2022 02:47:03 +0000
ROA not before: Thu 15 Sep 2022 02:47:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 203.77.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CCD870834B4F4B7F7F3BEDBCE8358644D57381E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:28:98:2d:65:24:5a:7e:97:dc:fd:0a:dc:
8c:94:7f:1d:1c:5a:ba:00:4f:ad:36:76:68:d8:38:
02:5c:65:81:05:7c:39:a8:84:2a:9e:35:ab:65:81:
eb:06:30:7f:14:d6:ad:1d:07:25:76:3c:66:26:fe:
ba:a9:d2:3f:35:f7:98:66:10:1d:d9:fc:6b:d6:0d:
66:3b:03:d5:84:68:0c:cc:15:45:02:f8:54:50:37:
e2:5c:18:66:50:0b:59:fc:29:0c:ac:96:fe:12:5f:
bf:b8:2a:39:01:0c:f0:cf:62:2b:8e:2b:e1:50:57:
0c:87:5a:33:e4:82:b7:bc:07:97:56:cc:01:54:e9:
c4:55:78:5a:e0:5a:80:4e:b4:e8:43:9f:57:a3:35:
1f:c2:2b:e3:61:63:a4:57:47:61:11:b6:e9:9f:ef:
6b:fc:2a:52:4c:5a:90:79:38:85:eb:ed:72:51:9e:
15:37:0c:03:12:28:11:82:c5:70:a9:ef:e8:98:bb:
42:e2:b8:78:53:34:67:42:32:a1:70:d2:6b:59:98:
50:3f:8e:54:20:b4:ac:05:97:61:07:af:1d:2f:0a:
e4:67:7f:32:ee:cd:76:d3:29:30:53:a8:e5:72:2c:
be:c9:92:5a:2c:12:13:1d:a2:03:a6:91:a8:f3:24:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:87:08:34:B4:F4:B7:F7:F3:BE:DB:CE:83:58:64:4D:57:38:1E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LM2HCDS09Lf3877bzoNYZE1XOB4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:6c:b9:da:8b:93:0c:d3:cf:4a:35:90:aa:85:4c:5f:f8:a7:
8d:75:3a:ef:3f:7a:f7:8a:0c:c1:17:bf:8c:82:68:d5:20:67:
32:70:e0:b5:a3:5e:c8:9d:1d:6b:3f:fd:ff:bf:34:0a:e9:ce:
5c:79:d1:cd:a1:96:a4:6d:5c:24:88:c3:b5:bb:9a:47:b2:63:
3c:e1:9e:90:ab:7b:0c:e4:16:f3:44:d4:a8:c4:ca:22:16:3b:
20:f1:d3:50:d1:27:55:c7:b6:a0:a5:89:b6:5f:4f:5c:e3:09:
7b:79:35:c1:2d:0f:32:5d:57:2d:ba:96:05:64:86:43:52:47:
93:e0:23:d3:4c:c9:f3:06:02:18:65:40:89:91:f0:dc:88:4a:
8c:a4:19:20:d1:3f:4c:41:d7:7d:ac:3b:6e:21:a9:38:47:f0:
47:18:00:3b:cc:16:a9:49:6d:f6:d7:fe:23:ba:aa:7f:09:3d:
b0:9a:5e:8f:f6:d4:a3:e2:08:59:9e:1e:95:3c:0e:b0:72:24:
12:45:d4:29:4d:0a:2a:20:d9:10:07:80:39:55:25:ed:8d:74:
24:69:9c:3e:1a:d5:f8:80:5a:8d:57:c2:fa:7c:6e:82:20:5c:
84:d0:aa:60:3a:0a:c4:98:96:e0:89:86:e1:4f:85:a1:e1:80:
aa:60:15:55
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJDQ0Q4NzA4MzRCNEY0
QjdGN0YzQkVEQkNFODM1ODY0NEQ1NzM4MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRriiYLWUkWn6X3P0K3IyUfx0cWroAT602dmjYOAJcZYEFfDmo
hCqeNatlgesGMH8U1q0dByV2PGYm/rqp0j8195hmEB3Z/GvWDWY7A9WEaAzMFUUC
+FRQN+JcGGZQC1n8KQyslv4SX7+4KjkBDPDPYiuOK+FQVwyHWjPkgre8B5dWzAFU
6cRVeFrgWoBOtOhDn1ejNR/CK+NhY6RXR2ERtumf72v8KlJMWpB5OIXr7XJRnhU3
DAMSKBGCxXCp7+iYu0LiuHhTNGdCMqFw0mtZmFA/jlQgtKwFl2EHrx0vCuRnfzLu
zXbTKTBTqOVyLL7JklosEhMdogOmkajzJLr7AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQULM2HCDS09Lf3877bzoNYZE1XOB4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTE0ySENEUzA5TGYzODc3
YnpvTllaRTFYT0I0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AstNKDANBgkqhkiG9w0BAQsFAAOCAQEAK2y52ouTDNPPSjWQqoVMX/injXU67z96
94oMwRe/jIJo1SBnMnDgtaNeyJ0daz/9/780CunOXHnRzaGWpG1cJIjDtbuaR7Jj
POGekKt7DOQW80TUqMTKIhY7IPHTUNEnVce2oKWJtl9PXOMJe3k1wS0PMl1XLbqW
BWSGQ1JHk+Aj00zJ8wYCGGVAiZHw3IhKjKQZINE/TEHXfaw7biGpOEfwRxgAO8wW
qUlt9tf+I7qqfwk9sJpej/bUo+IIWZ4elTwOsHIkEkXUKU0KKiDZEAeAOVUl7Y10
JGmcPhrV+IBajVfC+nxugiBchNCqYDoKxJiW4ImG4U+FoeGAqmAVVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org