Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LyA2TBp_wcKRnpxowjXM6ElZy4c.roa
File: LyA2TBp_wcKRnpxowjXM6ElZy4c.roa (raw, json)
Hash identifier: JHiQfekTBkP/FoHE6XCDNnSEixYFQXuRlmjbYuz2qbg=
Subject key identifier: 2F:20:36:4C:1A:7F:C1:C2:91:9E:9C:68:C2:35:CC:E8:49:59:CB:87
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0994
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LyA2TBp_wcKRnpxowjXM6ElZy4c.roa
Signing time: Wed 16 Dec 2020 02:30:05 +0000
ROA not before: Wed 16 Dec 2020 02:30:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.127.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 16 02:30:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2F20364C1A7FC1C2919E9C68C235CCE84959CB87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:34:8e:e4:fe:6b:3d:13:a0:22:16:99:b7:
9f:80:48:5f:15:bd:e7:86:db:1e:bc:49:54:e8:94:
a0:ae:42:97:ff:0a:b5:48:e4:45:16:ad:cb:52:79:
7a:0f:cf:3b:98:52:d1:cf:91:79:28:95:f6:92:db:
21:19:55:42:86:23:a5:b5:75:bf:c8:36:28:ba:b0:
0d:19:f9:e2:6e:7d:12:c7:d4:77:62:aa:a3:4a:6b:
ff:bf:27:b8:ac:7e:8c:c8:ba:43:a1:1d:2c:5c:2a:
ff:ae:26:17:5b:84:6a:8b:1c:8f:85:cc:1f:8b:8b:
19:6b:eb:9b:45:7f:a3:8b:bf:26:c9:43:4d:85:a1:
3f:65:9f:30:3f:6a:b6:fe:e1:48:ee:b2:b9:82:19:
f5:e2:a3:a8:16:fa:21:e3:1a:95:86:4d:33:aa:b2:
fb:30:30:58:74:20:7f:d6:3c:23:d6:fb:33:16:0d:
27:ba:cc:c2:5f:3b:55:c6:a6:38:43:f7:0c:e1:3a:
62:bc:d1:8f:37:5d:d9:18:38:7e:71:0f:75:f7:60:
56:c2:ab:dc:27:58:f3:f3:0a:36:6c:7b:e1:8b:fa:
4f:bb:f5:23:e2:bc:ea:c6:e7:c2:6e:5d:8c:92:e7:
b3:f6:cc:0d:61:73:a1:5e:1e:fa:44:23:19:bf:53:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:20:36:4C:1A:7F:C1:C2:91:9E:9C:68:C2:35:CC:E8:49:59:CB:87
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LyA2TBp_wcKRnpxowjXM6ElZy4c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.127.0/24
Signature Algorithm: sha256WithRSAEncryption
55:56:c0:58:61:eb:68:47:01:11:63:f1:d2:43:3a:0e:be:78:
b9:79:db:a5:3e:6b:31:e2:e5:93:73:90:cb:2b:c6:28:1f:be:
f3:0a:a2:73:a1:b2:36:ed:e5:61:8f:be:8e:90:41:3b:56:63:
8d:a8:1a:72:2d:1e:7e:5b:fe:6d:69:f9:90:4d:59:9f:65:82:
70:a0:04:48:99:87:14:e6:74:e5:9c:ce:28:13:ad:a5:89:52:
f4:c5:2f:8f:f7:61:84:23:fb:2d:fa:ad:68:35:f5:73:2c:e4:
1d:65:65:c1:f6:9c:24:6d:42:0f:f6:db:65:4f:f7:5f:6f:c5:
13:19:8c:cc:45:c5:b9:ad:ee:77:80:4e:70:fc:92:6a:3b:ce:
0b:ce:7b:ca:05:9f:2d:0b:51:00:80:43:5f:c4:bc:30:94:75:
43:13:ef:7b:1b:db:26:1f:66:40:50:88:a9:cd:f4:5a:d6:f3:
c1:47:3a:a2:9b:98:23:40:04:b0:59:f4:03:55:c6:12:d2:8a:
17:37:48:b9:78:aa:3a:89:bc:31:55:31:ee:5e:11:be:3d:98:
90:6d:52:69:91:1b:16:6a:d1:40:97:a4:53:97:6d:4b:9d:0a:
a9:16:20:6c:2b:25:3f:4c:61:50:c3:09:77:2a:19:8b:0c:60:
b0:58:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org