Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/O9p2WHg6nEugvhaHmXToDcxEbCs.roa
File: O9p2WHg6nEugvhaHmXToDcxEbCs.roa (raw, json)
Hash identifier: +2OnHd/cKLxgCQIUDpBr8x3Ef+2df+6mQVkWkf0I0CU=
Subject key identifier: 3B:DA:76:58:78:3A:9C:4B:A0:BE:16:87:99:74:E8:0D:CC:44:6C:2B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0AF2
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/O9p2WHg6nEugvhaHmXToDcxEbCs.roa
Signing time: Sun 07 Feb 2021 11:54:19 +0000
ROA not before: Sun 07 Feb 2021 11:54:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131628
IP address blocks: 175.97.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:54:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3BDA7658783A9C4BA0BE16879974E80DCC446C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:44:f5:f2:be:ed:d5:2d:51:40:7f:84:42:
b0:11:2f:08:2f:79:76:4f:84:d0:cd:86:f4:ed:11:
d8:57:dc:21:c3:05:61:82:93:cb:42:16:80:a0:e5:
8f:77:06:ed:4f:91:3b:19:11:e9:ab:5d:5d:f3:55:
0c:76:4f:79:7e:3a:3c:b4:95:35:de:22:c4:7d:bd:
be:f1:0b:3f:61:37:1b:af:bc:1d:ed:cf:f8:ab:40:
2a:ac:0d:9d:62:3c:f9:04:f6:35:47:a0:93:f2:95:
a7:47:06:a1:ca:93:89:e7:93:54:86:3f:cd:42:be:
3a:24:bd:5a:c5:4a:7c:5b:d8:3f:c5:01:2e:5a:3b:
6f:81:fe:43:68:71:64:2a:f8:fe:23:c5:22:fb:22:
88:27:dd:e0:9c:2f:84:da:a5:28:84:a4:8f:01:d1:
5d:f7:cd:73:14:a7:57:a0:a1:d9:32:9c:f7:6c:dd:
75:93:ba:f6:5f:4e:14:09:ba:ba:ca:b0:dd:92:62:
6c:1c:8d:f9:1f:7b:f3:6a:a0:b8:24:e0:bb:c6:49:
f9:95:82:bf:78:de:61:d4:91:a2:96:22:56:34:09:
90:d1:fa:26:e9:c5:fc:2b:bb:38:39:f8:a6:23:bf:
93:3f:c8:57:66:02:68:99:86:e4:ff:e5:00:bd:be:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:76:58:78:3A:9C:4B:A0:BE:16:87:99:74:E8:0D:CC:44:6C:2B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/O9p2WHg6nEugvhaHmXToDcxEbCs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.97.128.0/18
Signature Algorithm: sha256WithRSAEncryption
09:f0:6f:f9:7b:86:0f:37:5d:be:d5:11:5f:3a:55:ae:40:28:
73:c2:6f:50:34:29:fa:81:ea:55:44:2e:52:4c:c0:aa:f5:25:
2b:5f:3b:a8:6c:36:a4:f3:00:53:35:a5:5d:e3:31:17:19:e1:
78:72:d8:95:7c:a4:f8:e7:4b:20:21:99:73:7c:e2:14:74:3b:
b4:34:e2:b4:95:8b:ab:ab:df:14:8f:a2:43:b1:2d:0f:3f:9c:
63:a2:45:b4:fe:e4:00:0c:15:4d:cd:ac:89:f8:11:7d:17:ce:
12:ab:54:5c:8e:c5:c7:41:98:0a:40:34:48:ef:9e:90:d4:86:
67:e5:c1:18:d8:42:eb:eb:ac:cb:cd:31:dc:ac:09:d4:b0:9e:
95:23:84:46:50:18:92:dd:ec:f4:d6:a7:94:99:f6:9d:9f:90:
02:fd:b9:4f:fc:22:5a:6a:14:67:0b:08:89:aa:d1:a7:04:a7:
6f:ed:74:34:c4:03:c1:ad:57:09:49:62:a3:e6:04:8b:c3:65:
f1:f9:1b:23:f8:0e:16:d0:05:18:b0:0b:f1:e7:77:94:fb:80:
c8:6c:2e:6b:89:5a:97:72:c0:1a:5b:18:f3:73:3a:4b:8a:03:
0a:89:01:e4:99:3f:3c:4f:87:ea:7d:27:87:58:3b:cd:4d:97:
25:dc:49:9b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MTU0MTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNCREE3NjU4NzgzQTlD
NEJBMEJFMTY4Nzk5NzRFODBEQ0M0NDZDMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA60T18r7t1S1RQH+EQrARLwgveXZPhNDNhvTtEdhX3CHDBWGC
k8tCFoCg5Y93Bu1PkTsZEemrXV3zVQx2T3l+Ojy0lTXeIsR9vb7xCz9hNxuvvB3t
z/irQCqsDZ1iPPkE9jVHoJPyladHBqHKk4nnk1SGP81CvjokvVrFSnxb2D/FAS5a
O2+B/kNocWQq+P4jxSL7Iogn3eCcL4TapSiEpI8B0V33zXMUp1egodkynPds3XWT
uvZfThQJurrKsN2SYmwcjfkfe/NqoLgk4LvGSfmVgr943mHUkaKWIlY0CZDR+ibp
xfwruzg5+KYjv5M/yFdmAmiZhuT/5QC9vjQ7AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUO9p2WHg6nEugvhaHmXToDcxEbCswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTzlwMldIZzZuRXVndmhh
SG1YVG9EY3hFYkNzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Bq9hgDANBgkqhkiG9w0BAQsFAAOCAQEACfBv+XuGDzddvtURXzpVrkAoc8JvUDQp
+oHqVUQuUkzAqvUlK187qGw2pPMAUzWlXeMxFxnheHLYlXyk+OdLICGZc3ziFHQ7
tDTitJWLq6vfFI+iQ7EtDz+cY6JFtP7kAAwVTc2sifgRfRfOEqtUXI7Fx0GYCkA0
SO+ekNSGZ+XBGNhC6+usy80x3KwJ1LCelSOERlAYkt3s9NanlJn2nZ+QAv25T/wi
WmoUZwsIiarRpwSnb+10NMQDwa1XCUlio+YEi8Nl8fkbI/gOFtAFGLAL8ed3lPuA
yGwua4lal3LAGlsY83M6S4oDCokB5Jk/PE+H6n0nh1g7zU2XJdxJmw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:03 2023 by rpki-client on console-ams.rpki-client.org