Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Vgnqd5zAZrbTsf3JghzlpLp8W9Y.roa
File: Vgnqd5zAZrbTsf3JghzlpLp8W9Y.roa (raw, json)
Hash identifier: OgaBc3o2zTKshzfzSXgtHICYPk1eWFhrLEJp9JfObDI=
Subject key identifier: 56:09:EA:77:9C:C0:66:B6:D3:B1:FD:C9:82:1C:E5:A4:BA:7C:5B:D6
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0996
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Vgnqd5zAZrbTsf3JghzlpLp8W9Y.roa
Signing time: Wed 16 Dec 2020 02:34:33 +0000
ROA not before: Wed 16 Dec 2020 02:34:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.115.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454 (0x996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 16 02:34:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5609EA779CC066B6D3B1FDC9821CE5A4BA7C5BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:e4:ab:62:90:c2:d7:ec:0d:f6:27:93:0a:
b1:4a:2d:7e:81:7e:b5:f7:e2:95:15:c1:2f:2b:3f:
e5:ef:7c:96:b2:1f:4f:99:f8:87:8b:a7:1f:44:57:
e8:b8:c4:a2:e3:7c:ce:f8:8b:b4:11:1e:79:1d:25:
ba:57:60:22:5d:09:18:ba:01:36:89:0b:39:06:8c:
39:a6:b9:fb:94:4c:67:13:b0:61:0f:8e:ae:48:fb:
3a:1c:97:83:81:18:5a:c2:d1:4c:e9:83:6a:48:5c:
86:05:9b:48:98:9f:6e:cb:9c:5f:2a:e1:43:83:c7:
6b:23:63:54:59:0d:c7:cf:ef:69:b1:45:41:d3:e4:
38:01:d7:32:83:20:35:b8:67:ae:65:40:0e:cf:fe:
67:a4:09:60:eb:6c:94:15:3d:93:44:b2:cd:86:fc:
63:45:d0:2e:1e:2b:61:0a:2f:ca:1a:ff:8f:e1:78:
fe:b0:f4:0c:aa:4a:f2:32:c7:60:d8:27:81:55:bc:
bc:bf:40:c8:e2:4b:a6:4e:39:16:35:1a:f2:bf:16:
bb:be:06:6e:5e:7e:ba:6f:5f:ac:48:5d:be:92:49:
9b:31:ff:54:6b:4e:ef:03:83:a9:5c:6a:62:ac:cc:
c3:88:8a:c6:a5:57:a0:b7:21:29:de:ba:5e:2b:0e:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:09:EA:77:9C:C0:66:B6:D3:B1:FD:C9:82:1C:E5:A4:BA:7C:5B:D6
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Vgnqd5zAZrbTsf3JghzlpLp8W9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.115.0/24
Signature Algorithm: sha256WithRSAEncryption
86:66:06:f0:7d:65:36:3b:f1:03:52:11:62:a9:1d:36:2d:db:
6d:84:88:10:2d:ba:76:b4:76:00:91:ad:43:4b:50:7c:6e:ac:
af:b3:ee:92:be:7f:4c:88:36:d4:d3:2f:63:36:9b:12:49:b7:
1d:9f:d1:81:1f:f2:f5:0e:ab:b4:3a:59:aa:51:f3:94:f4:92:
32:af:de:53:da:e9:61:0f:94:a4:61:67:e9:74:3c:78:25:16:
ec:13:17:00:64:d3:6b:ea:df:87:fb:75:49:de:ed:1a:eb:52:
db:45:5a:81:41:c4:77:3b:9f:c6:66:0a:66:2b:f8:71:44:40:
01:9a:5a:ea:e4:a0:a9:e6:69:98:a9:f2:80:ee:45:d4:7c:cf:
18:eb:d1:12:25:98:93:d6:cc:71:83:ab:9e:33:fd:ee:96:39:
c8:aa:67:70:49:ea:69:93:3e:89:0d:0a:7e:45:c0:4f:ca:c3:
8b:8e:e9:aa:90:95:a7:8f:00:0b:21:11:42:81:ef:9b:cf:b4:
c0:71:bc:ab:6f:88:3f:e6:96:48:11:56:8d:32:0c:74:26:01:
a4:50:dd:92:22:26:1f:d5:a8:30:d8:98:74:97:d3:93:ed:f8:
a9:b8:cb:da:d5:48:9d:d9:8f:ef:57:d5:5c:d3:c1:c0:af:be:
c9:74:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org