Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NnFQ8Z1C1bco-YOp6bxR7RuIb-Q.roa
File: NnFQ8Z1C1bco-YOp6bxR7RuIb-Q.roa (raw, json)
Hash identifier: xKR1txsCBd0o4tOn3bpvlabgWHlsPTa9CoKNJwu3Mr8=
Subject key identifier: 36:71:50:F1:9D:42:D5:B7:28:F9:83:A9:E9:BC:51:ED:1B:88:6F:E4
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DA7
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NnFQ8Z1C1bco-YOp6bxR7RuIb-Q.roa
Signing time: Thu 28 Jul 2022 09:38:16 +0000
ROA not before: Thu 28 Jul 2022 09:38:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24158
IP address blocks: 203.105.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Jul 28 09:38:16 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=367150F19D42D5B728F983A9E9BC51ED1B886FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:00:2c:80:3d:47:bb:2c:36:3a:57:23:6c:
e6:93:ba:a9:79:1b:18:7e:19:26:8a:8e:fa:cd:93:
71:bf:91:0a:17:0f:ff:ea:c0:55:f4:91:bd:ad:13:
ba:23:5d:d2:fb:b3:58:99:88:1e:a6:a2:6e:5e:3a:
5f:67:b6:14:55:54:b0:dd:60:e2:60:37:a4:87:c3:
e2:31:a1:7b:95:ae:d5:80:9d:53:15:0c:17:89:ee:
21:2e:ac:0e:8b:31:e7:a9:0b:fd:25:64:d2:5f:24:
ee:63:4c:ba:bc:4a:0d:de:6f:88:b8:cb:f0:7f:36:
4a:de:46:3d:cb:13:77:18:71:8c:8b:35:10:f0:e0:
f0:25:37:7b:e9:01:e6:93:75:8e:3e:5e:a1:4d:73:
bc:e9:86:78:c0:d1:a6:ae:c3:bd:9d:04:5e:ce:c2:
6f:73:04:f3:b9:45:4d:91:7e:dd:49:a5:ee:d8:bf:
5d:ad:1a:c2:0a:0c:6e:fa:7e:a9:ab:54:3d:33:cb:
95:0e:54:97:11:45:75:85:14:0b:54:ff:44:08:1d:
2d:df:ec:b1:b0:33:f4:e0:c3:c6:70:5e:06:0a:45:
6f:2c:cb:57:07:f4:55:45:c5:a0:1b:02:c9:ca:8d:
c4:c2:5b:bb:54:81:af:f0:a1:4a:c2:a9:79:56:45:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:71:50:F1:9D:42:D5:B7:28:F9:83:A9:E9:BC:51:ED:1B:88:6F:E4
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NnFQ8Z1C1bco-YOp6bxR7RuIb-Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6a:ee:0c:36:a1:b5:ea:18:53:ea:7b:d6:a9:6a:66:2b:e6:
82:84:10:55:81:d7:92:32:d0:33:cd:8e:cd:53:08:0b:99:19:
a8:d0:66:12:ce:ae:37:61:4e:ca:5f:cd:07:cf:2d:bb:33:0f:
ff:90:e3:91:88:a1:3b:7d:df:1b:e1:75:ac:b9:c6:e8:db:db:
ff:55:e6:4c:24:72:2a:1f:23:0e:37:0f:74:02:6c:d9:ee:17:
6d:c5:b1:57:c0:53:2e:cc:ac:92:d2:8e:82:d5:01:f5:f4:b5:
da:50:70:38:a8:20:03:0c:81:7d:c9:ed:4a:bb:05:3f:87:cf:
54:cd:f3:28:d9:2a:32:d4:fa:f7:03:17:31:38:a0:9f:41:e7:
6c:ae:52:38:44:74:6e:a6:c0:ec:f2:9b:66:ec:be:1b:5e:2f:
89:37:6d:45:ab:dd:9a:b8:52:12:f6:8a:a6:d2:3c:14:aa:67:
72:f9:f9:d4:44:e2:14:72:8e:60:97:ab:a8:6e:e7:ef:16:11:
66:de:e7:ca:31:fc:bc:7d:6e:2f:50:a8:ef:06:ca:21:ff:09:
07:1e:07:51:fd:bd:0e:b6:f9:65:d2:fa:0e:19:cd:cb:25:17:
e4:f2:f8:be:18:42:62:bb:f1:2e:0b:2e:a6:b8:c6:b4:65:f0:
0a:8e:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org