Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SXAH4jaWLKsAyarUhM59vNzOhSI.roa
File: SXAH4jaWLKsAyarUhM59vNzOhSI.roa (raw, json)
Hash identifier: Il8u5QRt4Vf47jcCcB7Y1BvZnl6PegP7pwKW8HRWeCU=
Subject key identifier: 49:70:07:E2:36:96:2C:AB:00:C9:AA:D4:84:CE:7D:BC:DC:CE:85:22
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C8C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SXAH4jaWLKsAyarUhM59vNzOhSI.roa
Signing time: Wed 29 Sep 2021 02:49:57 +0000
ROA not before: Wed 29 Sep 2021 02:49:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4662
IP address blocks: 203.105.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=497007E236962CAB00C9AAD484CE7DBCDCCE8522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:df:4b:28:4f:8d:14:6b:90:55:cc:ef:ae:
fb:f7:73:e4:38:c1:8a:f6:f0:ab:cb:74:45:aa:c8:
1b:c1:f6:36:23:49:4e:15:69:f6:c7:fa:66:97:e9:
51:2b:46:a7:6a:f3:6e:53:ac:e5:df:f8:c0:9c:04:
0b:4e:59:2b:58:ac:99:b1:ee:51:a8:fb:ab:6b:88:
5c:05:fb:68:34:93:a4:69:4e:d4:08:35:8a:44:3e:
8d:fd:e4:c1:64:5c:20:a6:99:a1:bf:50:ca:93:17:
a6:34:51:02:27:97:53:b0:51:2d:1d:c2:b0:47:3f:
10:f0:b0:76:8e:d9:d5:be:0a:80:93:9b:78:38:b8:
c1:be:bd:21:50:40:74:56:d8:d8:c2:83:d6:70:f0:
50:3f:22:c7:e4:4a:8b:91:77:2d:6c:ba:6f:08:f4:
b5:0f:57:85:4f:30:d4:86:4a:d4:f6:29:b4:3e:7d:
d8:ae:83:49:1e:4a:e5:d8:32:82:66:3b:00:fa:4d:
a9:7f:cc:a6:9c:34:e0:73:ec:f3:3d:95:e5:16:8a:
02:f6:43:61:f2:00:f5:ce:41:d1:c1:67:99:32:da:
2d:20:e0:f4:c8:3e:16:8e:61:b5:2e:6f:fd:10:cd:
b1:57:22:fd:c3:2d:45:42:f5:7e:65:30:3b:6a:90:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:07:E2:36:96:2C:AB:00:C9:AA:D4:84:CE:7D:BC:DC:CE:85:22
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SXAH4jaWLKsAyarUhM59vNzOhSI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:ff:cf:84:a2:87:2d:30:e1:0b:14:62:5f:07:1d:c7:f7:d9:
f3:4e:36:75:af:b3:43:f4:65:f4:12:c5:e5:3b:32:73:9c:2e:
56:e8:57:74:de:96:16:b6:37:61:13:18:17:16:b0:9e:9c:57:
8d:1d:a1:66:bc:ab:da:8e:ac:37:e5:2c:9a:dd:10:91:fa:01:
94:47:12:47:d0:0f:1a:c9:ae:45:d4:74:82:f8:ae:1b:0a:db:
24:25:28:25:f4:35:64:ec:c3:82:af:44:1d:de:01:cc:d7:46:
a9:e2:9d:93:4b:03:ff:c0:6a:c1:4f:5e:4c:78:f8:33:f7:33:
2c:92:21:5e:ca:4b:c4:20:8f:6c:de:05:f3:9d:5c:ad:d8:73:
1f:e2:53:b1:fe:c5:9c:77:eb:a7:2c:97:d9:93:48:10:68:14:
83:17:8c:74:bd:83:d5:8c:38:62:5b:4a:6e:5c:16:46:80:35:
66:06:2f:56:3e:1b:ba:b6:01:cf:76:16:ab:1b:a1:9b:49:07:
eb:e7:08:e4:30:b9:16:8b:62:66:7e:46:0c:ae:5d:34:25:03:
32:8f:d1:8f:14:c3:a1:c0:ae:ea:13:cd:6f:3e:96:3c:6c:49:
29:1f:55:b8:49:8e:90:1d:87:a8:c7:2a:42:30:10:4e:ca:63:
0f:cb:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org