Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SPFPwNdwS4IJPT-G6hTqwOSiGMo.roa
File: SPFPwNdwS4IJPT-G6hTqwOSiGMo.roa (raw, json)
Hash identifier: w7ypfnX1oo6xdm0nkIYFARFdPfNE2fZ/x40gmWgBtPk=
Subject key identifier: 48:F1:4F:C0:D7:70:4B:82:09:3D:3F:86:EA:14:EA:C0:E4:A2:18:CA
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0A7C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SPFPwNdwS4IJPT-G6hTqwOSiGMo.roa
Signing time: Sun 07 Feb 2021 11:36:23 +0000
ROA not before: Sun 07 Feb 2021 11:36:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 202.145.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:36:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=48F14FC0D7704B82093D3F86EA14EAC0E4A218CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:b6:42:8f:2a:5f:78:00:32:85:9e:1d:94:
68:36:d2:18:9d:93:e2:d1:43:de:fd:42:a1:73:a4:
65:6f:48:47:11:33:51:e6:13:66:4b:b9:3e:83:01:
8f:d3:db:08:3b:46:96:e6:2a:8b:9c:80:86:44:7d:
6c:02:49:bd:b2:d7:5f:7a:06:e6:e7:2f:01:6e:e5:
78:5b:4e:b5:14:66:05:20:b4:c3:82:02:c6:e0:25:
4c:03:68:e9:0e:20:7f:9c:b3:2b:36:98:a3:25:59:
a7:08:d5:01:dc:55:79:3c:9b:41:57:09:60:51:58:
19:74:b4:fe:31:51:c7:77:98:67:b2:3a:39:c0:34:
69:82:2f:fe:0f:d9:a7:13:20:e1:98:a2:30:25:59:
b5:5a:e3:9a:a8:5c:ec:74:b4:3e:25:1a:e4:41:06:
a9:6e:45:68:a3:6a:33:35:af:79:4e:dd:10:d2:55:
30:c1:2d:7c:a8:a4:3c:98:de:94:c6:87:db:56:b5:
63:7f:92:ad:79:53:a9:bb:52:b4:16:2c:93:06:e6:
b9:42:82:34:00:7a:5e:30:8c:ad:a8:38:2f:2d:5a:
6a:50:42:c2:f7:29:ca:56:a1:d9:6a:d5:9e:aa:ae:
9e:c9:96:ad:ef:cb:ef:4f:26:f2:27:e3:ac:b4:16:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F1:4F:C0:D7:70:4B:82:09:3D:3F:86:EA:14:EA:C0:E4:A2:18:CA
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SPFPwNdwS4IJPT-G6hTqwOSiGMo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
69:b9:77:59:f2:90:10:e8:78:a2:e5:61:2a:21:55:7b:c6:37:
56:0d:b2:09:53:ce:be:00:3a:d1:dc:50:f5:93:99:11:64:45:
9a:4a:74:19:3a:fe:10:6d:d7:1e:43:53:c4:45:33:4c:5a:b8:
ae:31:57:d5:3e:2a:97:b7:8f:7d:ce:f5:0d:d8:2f:3a:99:af:
69:48:1c:c7:55:2c:8a:1b:a4:22:ae:d1:b0:82:f5:fc:56:d5:
cc:76:f6:ac:80:01:f5:e7:57:88:18:9a:92:9d:17:1a:a0:fc:
59:d9:d8:86:3d:a9:77:6c:79:bf:3e:59:b3:82:cb:53:ab:4c:
2b:0b:ab:4d:cc:c0:d1:69:bc:8d:93:bc:ca:70:4b:7c:4d:fc:
91:24:8f:4a:fd:5b:96:4d:cb:ba:84:82:a1:ae:55:bc:8c:c9:
b7:05:38:77:e4:47:c9:e9:d2:45:08:c6:f9:b2:0d:16:3f:47:
27:3a:43:2d:8f:7f:90:58:3e:3a:94:41:18:6f:41:98:05:ed:
3e:b5:bb:34:04:9f:34:dd:6b:ab:57:f6:df:11:64:61:fe:fb:
55:64:af:94:6c:f8:00:02:b9:62:43:97:b0:30:f3:3f:37:01:
db:39:c7:71:da:a9:e1:a4:c2:ef:bc:aa:73:b7:66:85:dc:da:
3f:ab:cf:ac
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MTM2MjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQ4RjE0RkMwRDc3MDRC
ODIwOTNEM0Y4NkVBMTRFQUMwRTRBMjE4Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTELZCjypfeAAyhZ4dlGg20hidk+LRQ979QqFzpGVvSEcRM1Hm
E2ZLuT6DAY/T2wg7RpbmKoucgIZEfWwCSb2y1196BubnLwFu5XhbTrUUZgUgtMOC
AsbgJUwDaOkOIH+csys2mKMlWacI1QHcVXk8m0FXCWBRWBl0tP4xUcd3mGeyOjnA
NGmCL/4P2acTIOGYojAlWbVa45qoXOx0tD4lGuRBBqluRWijajM1r3lO3RDSVTDB
LXyopDyY3pTGh9tWtWN/kq15U6m7UrQWLJMG5rlCgjQAel4wjK2oOC8tWmpQQsL3
KcpWodlq1Z6qrp7Jlq3vy+9PJvIn46y0FlkLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUSPFPwNdwS4IJPT+G6hTqwOSiGMowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvU1BGUHdOZHdTNElKUFQt
RzZoVHF3T1NpR01vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BcqRIDANBgkqhkiG9w0BAQsFAAOCAQEAabl3WfKQEOh4ouVhKiFVe8Y3Vg2yCVPO
vgA60dxQ9ZOZEWRFmkp0GTr+EG3XHkNTxEUzTFq4rjFX1T4ql7ePfc71DdgvOpmv
aUgcx1UsihukIq7RsIL1/FbVzHb2rIAB9edXiBiakp0XGqD8WdnYhj2pd2x5vz5Z
s4LLU6tMKwurTczA0Wm8jZO8ynBLfE38kSSPSv1blk3LuoSCoa5VvIzJtwU4d+RH
yenSRQjG+bINFj9HJzpDLY9/kFg+OpRBGG9BmAXtPrW7NASfNN1rq1f23xFkYf77
VWSvlGz4AAK5YkOXsDDzPzcB2znHcdqp4aTC77yqc7dmhdzaP6vPrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org