Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MfLcFUkHsfxU4grKParc6dlR26s.roa
File: MfLcFUkHsfxU4grKParc6dlR26s.roa (raw, json)
Hash identifier: majOjYK7tt0Ly1AyyRNrSziEGJxjAzJHNJeI4+QNJd4=
Subject key identifier: 31:F2:DC:15:49:07:B1:FC:54:E2:0A:CA:3D:AA:DC:E9:D9:51:DB:AB
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B52
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MfLcFUkHsfxU4grKParc6dlR26s.roa
Signing time: Sun 07 Feb 2021 13:13:31 +0000
ROA not before: Sun 07 Feb 2021 13:13:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17213
IP address blocks: 60.198.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2898 (0xb52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:13:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=31F2DC154907B1FC54E20ACA3DAADCE9D951DBAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:3e:15:45:d4:81:d1:8d:ca:75:fc:3f:4b:
75:36:26:08:a3:fb:a6:3f:48:a2:05:af:fb:05:f8:
fe:9a:43:ef:94:08:44:10:2b:92:c4:3c:bc:2f:0c:
9e:97:70:c2:9c:d7:4e:05:69:85:ae:13:ba:98:ba:
b9:82:a7:95:61:88:37:60:19:6a:aa:a2:cf:83:fb:
20:f2:65:b3:0b:9d:fd:69:62:63:91:b0:ba:8c:54:
92:e4:d8:6d:ba:84:b1:23:6d:81:ff:58:dd:fd:65:
db:db:bf:1e:9c:25:d7:99:f9:c7:83:5f:0b:8e:ab:
b7:4e:03:74:15:13:34:10:cb:72:4c:d6:67:e4:0d:
2f:97:b0:a0:fa:61:74:59:61:5d:93:5c:78:7a:07:
84:14:51:07:9f:b8:30:18:04:d5:e7:66:71:e3:ba:
26:ba:9c:64:e3:da:ee:15:ab:74:4e:03:5a:0b:3c:
ff:b0:c2:ce:7a:08:68:b9:a8:d2:2f:be:58:f7:80:
2e:0a:73:00:7d:dc:8e:67:04:d6:c4:25:33:16:63:
41:a6:29:e9:2a:2a:95:1c:a0:e3:76:10:e6:bc:88:
a4:13:c3:ac:70:c7:fc:83:4a:83:56:86:37:12:50:
f5:16:a1:05:20:c2:7d:d5:65:7d:b3:94:1a:8b:2f:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F2:DC:15:49:07:B1:FC:54:E2:0A:CA:3D:AA:DC:E9:D9:51:DB:AB
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MfLcFUkHsfxU4grKParc6dlR26s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:04:5b:02:6b:23:27:7d:b6:62:59:aa:c7:9d:ae:d3:22:70:
f3:38:6c:80:32:27:db:dd:7a:af:59:55:4d:a0:b1:9a:66:98:
0f:04:a2:b0:85:74:13:69:70:2b:44:fa:d2:15:19:bd:c6:c7:
85:fb:35:90:96:dc:b8:0b:69:09:6a:62:26:5d:44:09:5e:27:
85:f4:3c:9d:a5:24:df:41:31:70:70:66:ea:1f:09:2b:54:17:
a4:fd:9c:3e:b4:76:f0:1d:12:b6:82:58:a3:ff:4e:b8:0c:fa:
f7:34:42:c4:0b:3b:cc:07:09:2c:0e:ca:86:fb:64:a7:0e:f9:
9d:a1:3b:30:54:09:52:62:0f:26:bd:80:33:a3:29:eb:c0:70:
f4:f8:07:ed:e4:90:21:65:ec:7b:b1:dc:3a:3c:b9:f2:29:0e:
4b:ce:6a:bd:a7:af:53:c6:c1:3b:f7:1b:c3:1b:f0:aa:c3:e8:
a1:93:55:57:14:89:b8:40:d6:a7:0b:d1:02:e6:6b:d7:6e:d8:
95:08:8b:03:8d:28:14:c4:0a:7d:21:3a:97:ed:ce:9f:f7:9a:
5e:cf:64:52:14:53:69:f6:b4:a5:76:3b:76:49:6b:fb:f7:5a:
d4:69:c1:dc:09:fa:32:71:d2:2e:d4:b4:c1:3a:00:de:77:aa:
29:3d:d3:01
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MzEzMzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMxRjJEQzE1NDkwN0Ix
RkM1NEUyMEFDQTNEQUFEQ0U5RDk1MURCQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2wT4VRdSB0Y3Kdfw/S3U2Jgij+6Y/SKIFr/sF+P6aQ++UCEQQ
K5LEPLwvDJ6XcMKc104FaYWuE7qYurmCp5VhiDdgGWqqos+D+yDyZbMLnf1pYmOR
sLqMVJLk2G26hLEjbYH/WN39Zdvbvx6cJdeZ+ceDXwuOq7dOA3QVEzQQy3JM1mfk
DS+XsKD6YXRZYV2TXHh6B4QUUQefuDAYBNXnZnHjuia6nGTj2u4Vq3ROA1oLPP+w
ws56CGi5qNIvvlj3gC4KcwB93I5nBNbEJTMWY0GmKekqKpUcoON2EOa8iKQTw6xw
x/yDSoNWhjcSUPUWoQUgwn3VZX2zlBqLL/AbAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUMfLcFUkHsfxU4grKParc6dlR26swHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTWZMY0ZVa0hzZnhVNGdy
S1BhcmM2ZGxSMjZzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzGmzANBgkqhkiG9w0BAQsFAAOCAQEAjgRbAmsjJ322Ylmqx52u0yJw8zhsgDIn
2916r1lVTaCxmmaYDwSisIV0E2lwK0T60hUZvcbHhfs1kJbcuAtpCWpiJl1ECV4n
hfQ8naUk30ExcHBm6h8JK1QXpP2cPrR28B0StoJYo/9OuAz69zRCxAs7zAcJLA7K
hvtkpw75naE7MFQJUmIPJr2AM6Mp68Bw9PgH7eSQIWXse7HcOjy58ikOS85qvaev
U8bBO/cbwxvwqsPooZNVVxSJuEDWpwvRAuZr127YlQiLA40oFMQKfSE6l+3On/ea
Xs9kUhRTafa0pXY7dklr+/da1GnB3An6MnHSLtS0wToA3neqKT3TAQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:24 2025 by rpki-client