Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QNgGcx04XIjqmLf1v0_xSnfjYV8.roa
File: QNgGcx04XIjqmLf1v0_xSnfjYV8.roa (raw, json)
Hash identifier: JvFsQdvHJEiymBvbCtXwOPcpzud9wcv/X63U4FSy0/Q=
Subject key identifier: 40:D8:06:73:1D:38:5C:88:EA:98:B7:F5:BF:4F:F1:4A:77:E3:61:5F
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C64
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QNgGcx04XIjqmLf1v0_xSnfjYV8.roa
Signing time: Wed 29 Sep 2021 02:49:46 +0000
ROA not before: Wed 29 Sep 2021 02:49:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.192.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3172 (0xc64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=40D806731D385C88EA98B7F5BF4FF14A77E3615F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:a4:54:e0:da:ee:53:f3:9d:31:76:93:1e:
de:d7:f4:21:a9:31:47:3b:01:3a:6f:22:3b:e4:e4:
c2:f5:e8:0e:8b:0d:02:70:73:67:26:07:45:93:43:
30:77:39:a1:21:a5:d5:89:0b:c4:35:6f:d3:11:95:
ee:46:b5:6a:d1:52:b4:51:72:24:84:ac:ca:aa:9b:
96:0d:28:74:77:52:49:2f:9c:57:96:63:85:ba:9b:
a3:30:00:79:5a:68:4e:f3:03:85:55:ec:a9:52:91:
c1:7d:b7:e4:14:c8:be:6c:69:67:34:6c:52:01:3a:
16:27:3e:67:fb:b3:74:82:fe:75:a2:62:91:ad:c1:
47:ba:af:a7:54:c1:73:31:68:df:80:dc:7a:b2:a0:
d6:0e:40:47:2d:18:46:86:ad:55:9c:68:25:b7:13:
0b:ef:5e:d9:d7:72:cb:fd:97:c0:bf:85:58:af:63:
0f:e6:ba:70:12:a7:b4:28:99:5f:22:5c:13:0a:2b:
bf:a0:36:68:c0:73:fb:54:a7:f5:67:26:28:dc:88:
53:d2:2e:a9:0c:b0:76:76:d4:8c:1e:e4:25:6f:00:
fc:ef:ea:8c:0b:79:bd:26:5c:7a:56:ab:16:e4:67:
34:8a:a8:5e:67:12:10:10:d0:ae:60:74:4a:b4:63:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:06:73:1D:38:5C:88:EA:98:B7:F5:BF:4F:F1:4A:77:E3:61:5F
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QNgGcx04XIjqmLf1v0_xSnfjYV8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.192.0.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:44:5c:cf:20:d2:8b:62:95:3f:09:c0:e8:87:59:46:90:1a:
a9:4e:af:6c:9c:0a:c4:d3:c0:11:ba:53:e7:9e:d8:b3:5f:0c:
48:b5:e1:2e:3f:80:1b:f3:95:df:f1:66:e0:51:97:0a:05:7b:
ac:3b:61:b4:2e:c3:e7:6c:f2:cd:ca:9b:12:a4:2d:e5:8c:63:
69:56:60:4d:cd:9c:91:ff:9f:3e:e9:6b:21:6a:d8:c9:8f:98:
3d:3d:de:e2:e3:62:00:a2:19:aa:55:e1:ed:e3:3d:96:f5:9b:
8f:6a:97:80:c2:78:02:24:b0:4b:9b:c5:31:a4:96:37:7a:6c:
c2:7b:db:8f:a9:bb:75:e0:00:1a:f1:a3:02:ed:2a:fa:58:5b:
e7:cb:44:e8:47:d3:d1:a6:aa:eb:66:87:ee:ad:7f:94:3b:95:
6a:bb:e3:17:c3:1a:67:cd:e6:e1:0f:d6:ec:10:55:57:d1:9c:
95:1a:ec:7e:03:a6:8f:c5:a0:a9:25:34:df:a0:1f:91:ca:4c:
f9:b4:d8:10:41:80:95:85:21:3e:42:85:a8:f2:19:1c:60:12:
15:72:4d:b1:84:1c:38:da:6e:72:97:3c:16:e1:7a:68:64:5f:
79:9a:d2:bf:d1:6f:9e:2e:ed:48:8f:db:7b:f2:a9:fb:42:28:
1d:05:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org