Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Veggfu-DpzuFSxqUlx0Zya8XGpk.roa
File: Veggfu-DpzuFSxqUlx0Zya8XGpk.roa (raw, json)
Hash identifier: 5eVTc7oi6MSEhlkrukcNfjAQgm4lHfaK2OtQa2LB144=
Subject key identifier: 55:E8:20:7E:EF:83:A7:3B:85:4B:1A:94:97:1D:19:C9:AF:17:1A:99
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0CC1
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Veggfu-DpzuFSxqUlx0Zya8XGpk.roa
Signing time: Wed 29 Sep 2021 02:50:13 +0000
ROA not before: Wed 29 Sep 2021 02:50:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 61.30.239.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=55E8207EEF83A73B854B1A94971D19C9AF171A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:72:b9:96:ad:d7:38:43:2e:27:f2:e1:9c:
03:18:9d:5b:b7:d1:80:61:c9:76:db:73:48:f1:16:
37:f5:50:a7:16:56:1e:2f:26:f7:f3:d4:0a:5b:3a:
f8:65:e9:17:0d:b4:01:d5:6c:58:c3:8a:54:dd:69:
20:52:29:8e:e7:df:ae:51:15:ca:a3:a6:93:63:1d:
41:9f:d9:96:56:88:3d:d2:15:96:1b:ba:84:4b:a3:
d9:b7:d2:1d:f5:60:f1:4a:7e:87:e0:83:26:9f:54:
98:3c:13:13:80:1e:7b:83:a2:de:aa:e9:15:92:a5:
84:2b:a9:f9:96:b8:55:9d:13:98:48:76:d3:d3:c9:
a6:15:38:ba:d8:62:d6:3d:6c:12:69:a9:a6:bf:93:
4d:98:64:93:fc:ad:96:d2:71:30:21:da:c2:f6:6f:
01:8a:93:c6:c7:d7:ec:8e:2c:a6:fb:99:cb:ba:fa:
25:3e:90:f4:e0:d5:19:26:cc:85:21:12:b4:bb:ff:
9f:73:fc:50:f6:93:97:76:fa:e0:9e:8a:aa:98:67:
db:35:d8:27:8a:de:8a:92:6f:2f:82:e0:21:15:a3:
e2:5b:c8:8e:e3:7e:42:d1:db:42:d6:72:66:88:5f:
61:13:28:8c:6a:48:62:73:7d:55:7d:a3:0c:9f:80:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E8:20:7E:EF:83:A7:3B:85:4B:1A:94:97:1D:19:C9:AF:17:1A:99
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Veggfu-DpzuFSxqUlx0Zya8XGpk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.30.239.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d7:92:6a:24:72:d0:15:47:55:ec:26:09:67:8e:af:90:28:
2d:72:31:38:21:a3:7a:7d:e9:5b:03:05:3e:c6:7e:43:e1:d8:
06:80:4e:98:32:01:5a:15:b1:53:48:2b:c1:9b:10:ee:40:8b:
ac:05:ee:4c:6a:9e:b4:03:17:2f:08:51:45:41:26:91:76:ab:
34:38:c1:38:ff:03:d8:a3:65:15:e9:7f:a7:80:2e:a0:f1:06:
da:bf:21:54:4e:51:79:ab:76:ab:98:bc:3a:a4:cd:12:c3:4e:
aa:d9:a9:e5:16:f8:fc:5c:db:8f:5b:e6:d4:34:95:12:1a:b6:
c5:3e:b2:12:5c:cc:ed:85:11:17:99:06:b8:4f:86:0d:d9:99:
08:79:ea:66:38:ed:8a:f0:d6:69:7d:3e:97:49:09:3d:56:28:
d9:9c:ac:d0:68:00:3a:f9:8c:9e:76:70:c7:5b:ee:72:d6:15:
04:14:79:99:77:8c:76:5e:76:af:14:7c:e9:e2:52:aa:f7:c1:
9f:c9:d6:bf:5e:58:87:37:8c:9e:3a:15:34:ba:06:b5:62:75:
40:1f:ed:46:98:fe:74:63:29:ca:23:0c:6c:44:0c:f1:09:db:
2a:f9:cc:22:f2:42:f7:d8:4c:2e:ee:05:48:c7:86:c0:19:50:
6b:25:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org