Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S-XM0ShMY7GdWv-qGgB7Qbtt1e4.roa
File: S-XM0ShMY7GdWv-qGgB7Qbtt1e4.roa (raw, json)
Hash identifier: 7hOIhjnhIEvySAN+/0xBzglkd4/SCc4f1Pp+49aupSY=
Subject key identifier: 4B:E5:CC:D1:28:4C:63:B1:9D:5A:FF:AA:1A:00:7B:41:BB:6D:D5:EE
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 07F7
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S-XM0ShMY7GdWv-qGgB7Qbtt1e4.roa
Signing time: Tue 29 Sep 2020 09:57:36 +0000
ROA not before: Tue 29 Sep 2020 09:57:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.62.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2039 (0x7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4BE5CCD1284C63B19D5AFFAA1A007B41BB6DD5EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:62:9c:06:8c:f3:41:ee:4d:d1:77:b4:94:
12:8b:ec:83:32:97:c3:ec:34:7b:46:8f:4b:de:28:
bf:95:21:a7:49:e9:f6:77:c1:db:14:73:1f:f4:17:
e1:b5:32:4d:b6:85:1c:4b:c0:2c:64:77:68:51:05:
aa:fe:11:f8:78:44:35:a8:74:15:54:e2:f3:b9:7a:
02:79:51:d1:26:95:bf:2f:6b:81:e3:52:58:2b:1d:
36:7e:15:2b:75:e0:9d:ee:ff:5e:27:3a:22:31:d7:
9f:fa:70:66:dd:35:8e:cf:33:d7:12:b3:67:a1:b4:
b1:ec:c3:0c:51:23:9b:12:90:8d:45:57:32:f9:1a:
9a:84:7e:08:e9:a8:b3:e1:c5:de:05:bc:83:67:5b:
72:6a:e5:ad:52:2e:df:5e:1d:c0:ee:06:24:61:68:
19:6d:a1:4f:1b:b0:e8:3d:ca:98:18:54:01:03:73:
85:09:93:25:3f:50:e2:e5:3a:04:0a:b6:a7:af:3d:
93:50:54:49:b8:d2:f2:05:25:88:4a:b0:06:0e:14:
b0:eb:97:35:9c:79:18:e1:b0:ba:a2:79:74:2f:a3:
0d:95:3c:6a:12:d0:10:b9:5d:04:67:91:7d:f0:de:
3c:0f:fb:cb:5c:d3:23:df:b2:93:fe:4b:52:be:ce:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E5:CC:D1:28:4C:63:B1:9D:5A:FF:AA:1A:00:7B:41:BB:6D:D5:EE
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S-XM0ShMY7GdWv-qGgB7Qbtt1e4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:8f:76:ef:f4:9f:c2:7b:c2:62:9b:9b:a0:9a:a2:16:8c:2b:
06:fb:71:c6:1c:5b:24:41:05:c8:ad:a3:9e:96:7a:3e:f8:20:
8d:5d:d0:9a:cc:fa:d2:fe:2d:9e:ce:13:a0:a5:92:6e:ea:1b:
40:64:0c:16:72:bf:41:74:08:e9:d1:de:49:4c:dd:f7:02:7a:
73:33:1c:2e:b2:34:6b:25:81:f8:6b:8e:85:fd:d3:0d:de:e9:
8f:26:6d:95:a6:47:a3:14:01:a2:f6:a8:33:38:3b:f5:84:6e:
8a:28:2e:93:1a:51:59:fd:e3:58:fd:ed:2a:f5:51:ae:cb:e6:
21:f3:05:60:8f:b2:aa:fd:d9:91:aa:40:97:ac:97:6e:41:e3:
56:66:48:80:89:25:e7:81:2e:60:b0:73:36:e7:92:11:d2:d0:
88:7d:80:fe:ec:94:c3:ea:73:75:11:0d:af:38:a3:b8:1a:20:
26:3a:67:c1:ea:99:9e:c8:95:ef:62:8f:91:ca:e7:fe:7b:2a:
d8:37:19:e0:98:e0:ff:53:ef:35:77:b5:a5:93:58:6c:27:14:
4b:2b:ff:ec:42:d5:60:2b:57:8c:a1:64:78:a0:79:64:9c:87:
d9:83:06:30:f8:d9:95:af:2c:5f:cf:b2:1e:0c:1c:71:23:99:
8d:ca:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:22 2025 by rpki-client