Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MHJxjQjyPZFk7UlVWE-IoFifUiM.roa
File: MHJxjQjyPZFk7UlVWE-IoFifUiM.roa (raw, json)
Hash identifier: resHeIn+l45D22w75Q6vN+bEACaFfF//Oc8G/lUZLnM=
Subject key identifier: 30:72:71:8D:08:F2:3D:91:64:ED:49:55:58:4F:88:A0:58:9F:52:23
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 07F0
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MHJxjQjyPZFk7UlVWE-IoFifUiM.roa
Signing time: Tue 29 Sep 2020 09:57:34 +0000
ROA not before: Tue 29 Sep 2020 09:57:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.208.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3072718D08F23D9164ED4955584F88A0589F5223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:b8:18:19:4b:b3:c8:ce:57:54:22:5b:16:
fa:61:a9:63:09:ee:6a:9f:db:9a:5b:28:48:65:25:
a8:2c:c0:13:86:a6:7b:01:67:bc:41:ca:27:47:2d:
c4:1b:ef:bf:24:ef:60:99:ec:b8:ed:99:bb:d2:38:
6f:31:dd:36:46:fe:78:c8:09:e6:6d:1e:2d:0d:fa:
38:02:87:34:6f:c2:5b:c0:11:b5:10:30:75:98:d4:
b9:4a:32:ff:75:e3:71:58:d3:7d:d2:84:06:f3:c5:
07:33:e1:c5:97:a6:eb:16:87:8a:6d:54:75:0e:0d:
dd:92:fb:54:43:fe:48:87:53:ed:27:a5:8a:82:b5:
2b:d7:eb:ba:41:b3:d9:a7:df:85:d2:ac:d9:77:49:
fd:b3:3b:f1:51:7f:0e:7d:0f:80:bf:3e:7e:d2:d1:
43:b0:ac:a7:30:9b:b7:da:5a:ae:51:06:88:5c:15:
28:36:1a:0a:6d:14:58:59:62:86:8e:47:8a:e2:47:
39:be:ed:b0:a4:37:85:ec:8b:8a:76:b0:09:e5:3f:
e8:6e:5d:56:af:ef:e4:cf:be:ae:b4:ca:a4:4d:04:
b8:1a:8d:39:c7:cd:50:ee:00:06:51:0e:87:c3:0f:
ac:06:c4:19:f9:37:fe:1b:b8:b0:7c:9f:0e:62:24:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:72:71:8D:08:F2:3D:91:64:ED:49:55:58:4F:88:A0:58:9F:52:23
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MHJxjQjyPZFk7UlVWE-IoFifUiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.208.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:9b:f4:40:77:e6:67:9b:f0:5f:9a:e8:06:a1:c7:75:d7:1c:
2c:29:17:52:d7:88:8c:ce:c2:57:b7:1d:64:69:e7:2b:8f:97:
8a:ec:0e:2f:a9:e7:f1:99:8e:69:69:3a:70:a0:8b:58:6d:c6:
31:de:87:e0:50:c1:3d:e9:84:ff:d6:75:64:bc:22:eb:cb:75:
70:66:e2:0d:bc:33:71:3b:11:da:e6:4f:ea:e0:5f:d1:bb:8f:
9d:80:e9:20:6f:d4:dd:22:ab:d4:33:aa:dc:9b:7f:f3:07:57:
20:b5:da:d1:c6:0c:b9:75:ef:96:51:23:49:47:d8:91:b3:f5:
fe:00:fd:58:85:00:f9:df:4b:8e:31:b4:cf:9a:b5:09:13:b4:
6d:c9:72:23:dd:21:6e:4f:3a:24:b8:94:7a:3f:c0:90:5b:23:
d4:76:97:bd:03:d2:90:24:4a:7b:da:74:da:71:c0:8c:e8:f9:
e1:c4:1a:de:71:5f:c4:e1:8b:07:f3:59:e7:18:93:e4:cf:7f:
5d:68:2b:01:76:58:5a:0c:41:49:0f:de:f6:e3:dc:3f:1c:4d:
89:7a:f5:78:53:68:f3:6c:c9:f7:d5:d3:49:51:44:ab:79:a5:
f5:5b:b7:8e:c0:8f:eb:ec:6b:26:bb:4a:99:8c:5e:bb:8f:1c:
d2:51:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:07 2025 by rpki-client