Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UHkA6xYcbFUp-lm6SWO7-rwxlS8.roa
File: UHkA6xYcbFUp-lm6SWO7-rwxlS8.roa (raw, json)
Hash identifier: QQDAEf5qXSvdAiAKGTuVF4ZMEfdqWyCkk+1ViLGell0=
Subject key identifier: 50:79:00:EB:16:1C:6C:55:29:FA:59:BA:49:63:BB:FA:BC:31:95:2F
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UHkA6xYcbFUp-lm6SWO7-rwxlS8.roa
Signing time: Thu 15 Sep 2022 02:47:02 +0000
ROA not before: Thu 15 Sep 2022 02:47:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 210.67.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=507900EB161C6C5529FA59BA4963BBFABC31952F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:11:9a:61:86:9a:62:b5:19:20:1b:1e:84:fb:
5e:31:1d:41:ad:ac:9e:6f:5f:d4:00:e0:24:66:ef:
f6:e4:db:b6:d7:bd:4c:17:cc:bc:3b:5e:16:eb:fd:
a3:89:88:9d:ad:6d:69:28:26:b6:a6:af:0b:0b:20:
5a:8f:e9:88:4c:3d:18:d8:d4:e3:c7:e4:b2:7e:2c:
d8:e1:49:e3:1d:95:20:00:0f:f9:54:42:3d:49:25:
79:3b:66:d4:1f:b6:e7:b7:02:70:ee:aa:65:38:f6:
7e:81:00:11:65:dd:71:9c:cd:30:dd:35:6d:25:bd:
94:0d:c1:9e:fc:38:2e:ab:06:4d:b9:d7:82:16:6b:
9c:37:a5:f5:67:53:93:41:51:1d:f5:d9:df:9b:85:
81:04:81:54:81:ed:ee:07:c1:e2:9c:4a:5f:2a:60:
f0:a9:f1:f5:2f:c3:a8:ff:f7:05:15:ca:4e:f0:4a:
40:64:17:e7:8c:34:60:80:32:82:50:63:5d:66:9b:
a6:24:0a:b8:0c:74:75:53:98:9a:93:0d:5f:de:74:
72:e8:3a:56:8c:37:2a:ff:f4:31:87:34:69:d1:c4:
48:7f:71:42:de:a6:6b:8c:db:2b:6b:93:d3:7d:33:
c7:1a:f6:eb:40:2b:bd:60:7d:16:b9:fd:2b:8f:d0:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:79:00:EB:16:1C:6C:55:29:FA:59:BA:49:63:BB:FA:BC:31:95:2F
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UHkA6xYcbFUp-lm6SWO7-rwxlS8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
44:b6:cf:9b:ec:68:86:01:c8:af:08:62:40:41:15:d3:ef:aa:
c8:d1:a6:09:b3:61:cf:03:f7:89:93:d8:7b:56:18:2a:30:40:
e3:6a:41:ec:0d:11:48:ca:c4:67:8b:e7:03:a1:a7:08:d9:1c:
2b:f8:af:d2:07:6b:20:85:b7:79:42:d6:80:79:5b:de:2e:58:
f9:d4:3b:d5:5c:83:ca:7b:3d:20:4c:0a:73:50:37:5a:02:d9:
6e:62:ed:14:48:1f:16:55:84:6d:d8:52:9d:3e:0f:d1:15:4a:
ba:22:0c:98:56:8a:ba:42:3b:76:ea:cc:16:81:6e:0c:ae:0c:
d6:90:68:2a:ce:bf:df:11:65:61:e2:88:20:2d:85:b2:b6:ae:
22:6f:dc:6e:1d:36:1e:8d:13:62:76:95:15:78:68:f0:e7:d1:
dc:ee:61:6e:47:0c:bb:2d:19:fb:90:5c:d7:58:93:95:05:fe:
6b:db:6e:da:b6:ad:58:6e:f5:9a:fb:0a:17:3f:39:84:f7:5a:
36:72:6f:e5:85:e5:17:aa:a6:51:89:dd:8a:7f:27:aa:a0:b5:
67:0a:93:a2:7f:7d:8a:ce:af:d7:9f:82:6e:e3:db:64:29:3e:
1a:d5:3c:bb:3a:86:e6:a8:29:18:48:fd:99:11:4c:ea:09:54:
63:8e:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org