Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UlargQg4SEvHAXE_VjLbgcKpTCM.roa
File: UlargQg4SEvHAXE_VjLbgcKpTCM.roa (raw, json)
Hash identifier: 18s75sLXA7cD9/zy/Yoe0J+lCHG6n5Zizt2oLbUSOFQ=
Subject key identifier: 52:56:AB:81:08:38:48:4B:C7:01:71:3F:56:32:DB:81:C2:A9:4C:23
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 09A6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UlargQg4SEvHAXE_VjLbgcKpTCM.roa
Signing time: Wed 16 Dec 2020 02:53:32 +0000
ROA not before: Wed 16 Dec 2020 02:53:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.96.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 16 02:53:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5256AB810838484BC701713F5632DB81C2A94C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:2f:2c:6f:3c:45:ee:5d:11:bb:8c:43:6a:
8d:70:f6:2b:a6:e9:65:f2:29:40:ab:0a:8f:ca:a4:
bb:08:bf:4c:15:16:f5:22:c1:38:74:cd:66:4a:12:
cd:30:3f:71:f7:09:33:e9:44:c0:0e:73:a7:de:b5:
9e:64:59:ad:e9:7a:7e:e6:e8:70:71:17:7a:7a:7d:
b5:fc:b0:0d:8c:8e:65:03:94:1c:6f:37:37:77:ac:
ff:c1:a7:61:2e:8b:91:a5:de:16:8b:54:dd:49:c7:
ca:16:aa:6c:83:ca:22:8c:ef:c8:5a:b9:10:5f:76:
4e:2d:28:86:11:7c:0c:03:ae:62:11:1c:03:9b:a9:
02:a5:ab:40:86:88:d9:74:c7:bf:5a:3a:b5:bd:4b:
f8:a2:d6:87:2a:2f:f2:e7:a4:a6:78:52:ed:4f:d5:
6f:15:e9:b6:12:03:45:5e:e8:a3:fe:43:bc:c8:8a:
cc:e9:aa:9d:1f:b9:3b:c8:df:d7:73:19:1c:45:5f:
75:60:34:9e:32:bd:7a:3d:22:46:50:f8:3d:3a:49:
03:69:30:5f:3a:0d:11:48:59:9f:42:f7:81:dc:5e:
87:86:e1:af:b3:2d:49:fc:a2:64:9e:78:69:c1:e1:
a7:7a:ea:26:d6:47:d7:8c:a7:57:c0:8c:3b:fa:87:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:AB:81:08:38:48:4B:C7:01:71:3F:56:32:DB:81:C2:A9:4C:23
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UlargQg4SEvHAXE_VjLbgcKpTCM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.96.0/22
Signature Algorithm: sha256WithRSAEncryption
03:4d:f7:3a:08:67:25:49:4b:86:a9:d0:a0:e4:00:e5:72:09:
29:dc:bc:b3:27:9e:c5:88:72:9b:86:9d:73:05:f3:8e:4e:5f:
c2:c8:df:1c:e5:ca:1c:79:38:3c:77:8e:49:37:86:87:43:78:
35:ca:b8:e9:da:0a:2b:91:c8:11:22:d7:c4:4f:60:04:3e:e8:
be:63:85:b0:3c:77:bd:09:a1:8b:fb:a2:12:05:87:f5:db:81:
31:2e:6d:1f:67:81:60:86:23:7b:3e:0f:85:46:61:99:dd:8b:
94:ab:94:51:c3:e7:31:81:65:92:5d:76:5b:bf:33:02:a9:1c:
e5:e5:be:7f:78:55:78:3f:1f:a4:01:7a:2e:9f:a9:00:10:66:
27:4a:3e:9a:5b:f8:fb:bd:fa:ba:6c:73:a2:f9:d1:e4:d4:5c:
3a:b9:60:90:0a:4c:49:8b:32:77:f8:05:6c:a1:39:7e:83:d5:
8a:4e:58:00:04:40:e3:36:26:cb:67:3c:06:a8:eb:13:90:1f:
20:c5:7a:03:4d:bb:83:15:4a:a5:ab:86:40:1a:28:4e:e9:47:
13:4b:b5:5a:90:35:e1:bd:41:74:83:0c:1f:37:23:74:e1:bf:
7f:4d:97:7d:b5:af:8d:2b:21:fd:f2:b8:79:a5:9b:bb:4d:3e:
bf:f4:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org