Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/W6vlWuVqZVeKzx-c9nUDBXzsCX4.roa
File: W6vlWuVqZVeKzx-c9nUDBXzsCX4.roa (raw, json)
Hash identifier: faVBJVn0+NUP2ttx5R0aLJrD+H0Z3NtKTenhneRlej0=
Subject key identifier: 5B:AB:E5:5A:E5:6A:65:57:8A:CF:1F:9C:F6:75:03:05:7C:EC:09:7E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C48
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/W6vlWuVqZVeKzx-c9nUDBXzsCX4.roa
Signing time: Wed 29 Sep 2021 02:49:37 +0000
ROA not before: Wed 29 Sep 2021 02:49:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 60.199.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5BABE55AE56A65578ACF1F9CF67503057CEC097E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b1:30:8e:cd:26:1d:55:00:0a:29:99:21:ce:
76:45:f4:c9:91:3f:01:06:69:91:6d:15:9a:7d:4e:
43:18:76:57:ad:54:bb:8b:10:ef:5c:ba:66:12:7d:
ed:a6:6a:76:0a:67:7b:9e:12:ab:02:fb:98:58:6c:
f8:1c:0f:a2:8c:dc:bf:cd:9b:d1:b2:b4:4b:9d:a7:
88:e9:18:75:2a:d6:0f:91:e1:86:1f:5f:12:44:d9:
37:2d:71:de:43:62:9e:d9:65:d7:cb:32:58:36:9f:
1f:7e:53:c8:42:cf:4c:c0:3e:64:a1:4e:30:42:4a:
44:6f:71:84:ff:9e:cb:b1:8a:4d:e5:3f:d7:18:b4:
58:0a:d5:20:77:60:75:6b:0e:23:c4:5f:bc:c7:9e:
ac:df:17:2b:0e:85:a3:fc:0b:2e:27:0c:ab:d9:8f:
1d:5f:a9:e0:8c:a9:23:c2:6d:47:5b:c4:b0:b0:2c:
35:18:0d:23:dc:35:79:89:d1:b2:da:8f:29:e6:10:
c2:b5:04:64:69:77:38:af:72:c2:dd:f2:f4:22:d8:
4f:1b:8b:9d:82:21:e6:d4:66:cd:01:6f:98:03:0f:
c8:e0:cb:e8:c5:d4:66:8f:f4:08:54:ff:1f:a8:57:
de:3c:57:75:f5:2c:a5:6b:3e:80:7d:82:6c:51:be:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:E5:5A:E5:6A:65:57:8A:CF:1F:9C:F6:75:03:05:7C:EC:09:7E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/W6vlWuVqZVeKzx-c9nUDBXzsCX4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:6a:59:e0:cf:19:9d:b7:47:a2:b3:17:dd:2d:a7:73:f9:21:
39:29:bd:fb:26:0d:28:e4:83:0d:a7:11:f4:0a:a4:08:41:27:
3f:b8:ea:b6:27:b6:26:e9:e9:9b:ab:15:cd:32:d8:59:2a:69:
72:89:3b:92:4a:e7:35:25:55:4f:01:ef:54:86:8a:1e:49:a4:
a0:6e:ec:af:83:5a:ad:a4:4f:96:27:1a:0f:ae:d4:76:45:3c:
b3:06:8f:84:1c:21:d5:2b:90:cf:48:85:42:59:71:05:f8:44:
b7:76:08:1d:b3:df:34:cb:af:7b:fe:87:b2:be:35:b8:83:b9:
fd:0b:78:84:4d:50:94:57:9f:9d:25:24:d3:bd:22:c2:a7:b0:
b1:f4:ff:a8:da:5f:5c:44:bd:00:20:db:4f:71:57:40:6a:03:
7a:ed:9c:96:d1:55:3b:e2:3d:25:a7:8e:db:cb:40:67:64:7c:
9a:b3:bd:af:ae:e6:ee:dd:ce:82:c2:16:36:d3:db:ef:54:73:
e6:74:59:48:ab:d3:ad:a1:07:8d:c4:99:41:92:80:c0:86:2f:
2f:45:2c:d5:6e:df:0d:fd:18:50:96:9f:33:19:00:a1:c0:44:
c9:7b:73:e4:a8:31:63:a6:16:fb:f0:4a:02:7d:eb:c9:0f:5e:
35:00:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org