Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SxKcia50gSNViT4Bn0A-q76E1jk.roa
File: SxKcia50gSNViT4Bn0A-q76E1jk.roa (raw, json)
Hash identifier: RJA0lCxjm7CTxb/MYzHaXPn1nipexAX/CkNi/HSn/tI=
Subject key identifier: 4B:12:9C:89:AE:74:81:23:55:89:3E:01:9F:40:3E:AB:BE:84:D6:39
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0CC5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SxKcia50gSNViT4Bn0A-q76E1jk.roa
Signing time: Wed 29 Sep 2021 02:50:14 +0000
ROA not before: Wed 29 Sep 2021 02:50:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 60.199.212.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3269 (0xcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4B129C89AE74812355893E019F403EABBE84D639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:95:d4:dd:bb:56:55:d8:99:1c:5c:6f:21:
96:dc:6f:94:ab:91:d1:f8:76:24:9c:a7:87:c4:22:
df:53:1a:dc:68:91:a3:98:e6:70:36:cf:e2:73:6e:
27:9d:c3:e9:3a:83:90:e1:44:20:67:fa:b4:b0:3c:
88:91:57:a3:b9:eb:63:2c:e9:96:8d:f5:cf:1a:d1:
4e:59:42:37:08:69:34:51:c4:e5:fc:a9:fc:56:06:
9d:7b:e0:1d:32:20:e9:65:f1:10:eb:c8:1d:6d:fd:
fb:ff:dd:33:51:a3:d3:1b:d7:24:d2:ab:9c:f3:82:
88:90:95:8c:b1:69:de:a2:35:bc:84:04:62:d4:60:
d9:92:b6:3b:df:4c:28:25:81:1f:51:bc:69:ee:32:
d3:60:99:5b:36:c9:06:4a:6e:28:93:92:78:71:6c:
58:93:68:4c:8c:6d:f3:80:14:17:0f:0e:f6:26:8e:
d1:38:e0:42:de:67:23:8a:37:61:5c:be:df:b8:07:
15:02:44:3c:23:ca:4e:7d:54:4e:cc:72:b4:1e:3c:
1b:b6:14:6e:97:cb:4f:54:bf:d2:ea:b3:85:b9:93:
63:e4:f5:fe:2c:ba:54:02:0e:9e:25:c0:79:8f:7f:
f3:3d:81:52:35:5b:56:78:19:bf:35:c7:d8:f7:70:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:12:9C:89:AE:74:81:23:55:89:3E:01:9F:40:3E:AB:BE:84:D6:39
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SxKcia50gSNViT4Bn0A-q76E1jk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.212.0/24
Signature Algorithm: sha256WithRSAEncryption
06:88:c4:66:6a:90:c2:af:32:7e:fe:43:30:91:47:1d:38:98:
f9:03:c0:be:ac:cc:59:64:b7:c2:ff:e7:e6:ef:8a:cd:81:8d:
90:07:d7:5c:5a:a5:c5:1e:b3:42:c8:db:01:ea:45:aa:7a:18:
07:d6:33:6b:a0:1f:e0:eb:9e:64:70:47:4e:1a:0b:23:53:0d:
a0:16:57:d6:99:87:33:dd:a2:85:19:65:51:5a:92:d4:ff:22:
10:33:d1:68:9c:e6:f1:42:0e:6a:02:36:0d:37:4e:ff:cc:52:
1d:e2:ff:8c:14:34:e6:7c:e6:61:72:90:d9:4b:0c:f7:d6:76:
39:d1:3a:e4:73:04:19:36:cb:01:8c:d1:2d:eb:94:f5:93:ae:
ce:46:96:22:e7:d7:4b:85:8e:ed:fc:7e:3f:1e:e2:c2:72:9d:
7d:20:c6:c3:8f:3a:9a:e2:82:36:23:d1:77:3b:58:6d:f8:a5:
f1:a3:cc:86:78:be:8c:33:31:b7:eb:47:01:83:d5:d7:ea:40:
d7:e7:03:cf:0d:6c:4e:fd:3c:74:2c:b5:e7:04:75:18:0c:c1:
e6:bf:5d:ca:ab:ab:bc:d4:50:cc:df:2d:36:d0:52:95:67:99:
06:35:3e:f8:09:c5:4b:59:ab:f4:3b:bd:1b:bc:0e:cf:24:03:
62:62:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org