Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WNzRePUt3l3e2mA9CbyMh09kpIk.roa
File: WNzRePUt3l3e2mA9CbyMh09kpIk.roa (raw, json)
Hash identifier: szAGMQIgRBcKi1aEePo/sD3Hdq3GUsVdrc7oIe9sDSA=
Subject key identifier: 58:DC:D1:78:F5:2D:DE:5D:DE:DA:60:3D:09:BC:8C:87:4F:64:A4:89
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0A70
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WNzRePUt3l3e2mA9CbyMh09kpIk.roa
Signing time: Sun 07 Feb 2021 11:36:16 +0000
ROA not before: Sun 07 Feb 2021 11:36:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 103.224.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2672 (0xa70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:36:16 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=58DCD178F52DDE5DDEDA603D09BC8C874F64A489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:fa:12:48:02:a9:fa:53:9d:eb:9a:20:11:
fa:e0:5f:d4:e7:c2:cf:0b:92:0a:fd:85:21:86:5c:
fd:f0:fc:12:c8:3a:7c:5e:35:a8:2f:b5:80:d8:67:
b5:df:90:cd:5d:63:d3:f8:e5:5f:39:62:d4:27:e6:
0b:fa:da:6e:a8:53:c9:c8:e4:14:1b:89:f1:bf:7b:
9a:cc:68:0c:90:e6:3d:14:fc:89:c4:a0:b6:7f:4d:
ac:89:02:d5:43:8c:85:ab:6b:90:0b:86:31:e0:d4:
ab:e7:e8:c8:e6:dd:25:2a:90:59:80:38:af:4c:72:
de:ef:b0:a9:88:02:20:f1:f8:7b:8a:2c:f6:dd:83:
d9:39:2e:ac:85:5c:52:54:9a:51:ae:6e:8d:1c:6a:
2a:bd:75:49:da:28:8d:f7:2a:7a:8b:10:af:a9:41:
73:bd:8c:3d:cc:41:41:ea:9c:39:89:7a:0e:a4:e3:
b2:93:b4:9c:4f:22:50:86:19:74:eb:d2:8a:c1:74:
55:b7:89:85:2d:1d:ae:cf:f1:d8:0d:da:51:6b:05:
2a:55:cb:06:38:a6:ad:ca:e0:32:3e:17:d3:42:a5:
83:34:d3:06:d0:57:54:95:10:b2:d6:e2:eb:ac:e7:
da:fc:55:77:85:6b:8d:e6:59:46:66:87:25:5a:41:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:D1:78:F5:2D:DE:5D:DE:DA:60:3D:09:BC:8C:87:4F:64:A4:89
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WNzRePUt3l3e2mA9CbyMh09kpIk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.132.0/22
Signature Algorithm: sha256WithRSAEncryption
33:c0:92:43:9c:b2:c9:8c:44:5e:3f:2c:07:f2:49:a2:92:d1:
30:0e:a8:1e:dd:40:d5:66:27:b4:ce:20:d4:79:50:80:00:33:
13:83:b9:9d:c3:56:00:fb:a1:9a:7c:bf:2d:af:e7:ae:4d:da:
49:3b:ac:2a:47:72:cd:01:3b:75:b3:6f:67:72:de:65:07:39:
d1:80:03:e5:88:df:68:f1:f2:48:51:7b:9d:eb:cb:9f:92:c8:
4e:3f:21:41:71:17:a1:e7:90:01:63:85:11:29:44:a6:90:f9:
9b:89:05:74:b6:8f:0d:f6:bf:a0:8f:0f:f5:c5:66:50:95:87:
22:72:03:30:e0:cb:45:f8:26:4a:e1:ca:4b:73:6e:13:d3:fe:
2d:82:e1:ac:61:89:f7:82:6b:0c:e3:52:4c:1f:3b:7f:cc:a5:
99:85:e0:f9:0d:6b:6f:e8:88:45:66:78:94:b2:a4:5f:52:ec:
10:d4:11:0b:cc:6d:83:d0:1d:ee:f2:6d:91:15:22:29:73:bb:
17:4e:49:b7:9d:83:dd:d6:78:a5:99:7e:d7:b4:8c:9a:f0:c9:
62:81:41:d4:d5:8b:55:a6:39:42:51:df:28:11:17:56:2c:88:
06:27:f4:3d:d0:a0:9f:65:8b:53:ee:04:2a:eb:a0:70:c6:6a:
14:39:2e:77
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MTM2MTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU4RENEMTc4RjUyRERF
NURERURBNjAzRDA5QkM4Qzg3NEY2NEE0ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5BvoSSAKp+lOd65ogEfrgX9Tnws8Lkgr9hSGGXP3w/BLIOnxe
NagvtYDYZ7XfkM1dY9P45V85YtQn5gv62m6oU8nI5BQbifG/e5rMaAyQ5j0U/InE
oLZ/TayJAtVDjIWra5ALhjHg1Kvn6Mjm3SUqkFmAOK9Mct7vsKmIAiDx+HuKLPbd
g9k5LqyFXFJUmlGubo0caiq9dUnaKI33KnqLEK+pQXO9jD3MQUHqnDmJeg6k47KT
tJxPIlCGGXTr0orBdFW3iYUtHa7P8dgN2lFrBSpVywY4pq3K4DI+F9NCpYM00wbQ
V1SVELLW4uus59r8VXeFa43mWUZmhyVaQXZjAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUWNzRePUt3l3e2mA9CbyMh09kpIkwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvV056UmVQVXQzbDNlMm1B
OUNieU1oMDlrcElrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AmfghDANBgkqhkiG9w0BAQsFAAOCAQEAM8CSQ5yyyYxEXj8sB/JJopLRMA6oHt1A
1WYntM4g1HlQgAAzE4O5ncNWAPuhmny/La/nrk3aSTusKkdyzQE7dbNvZ3LeZQc5
0YAD5YjfaPHySFF7nevLn5LITj8hQXEXoeeQAWOFESlEppD5m4kFdLaPDfa/oI8P
9cVmUJWHInIDMODLRfgmSuHKS3NuE9P+LYLhrGGJ94JrDONSTB87f8ylmYXg+Q1r
b+iIRWZ4lLKkX1LsENQRC8xtg9Ad7vJtkRUiKXO7F05Jt52D3dZ4pZl+17SMmvDJ
YoFB1NWLVaY5QlHfKBEXViyIBif0PdCgn2WLU+4EKuugcMZqFDkudw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:03 2023 by rpki-client on console-ams.rpki-client.org