Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YFH8rrdD7_f5fPOC8EfEcCYxGrE.roa
File: YFH8rrdD7_f5fPOC8EfEcCYxGrE.roa (raw, json)
Hash identifier: TcP9kSEMwMUfRoRwT02vH7r77ZFCTHQZ/AGxY8EvYlk=
Subject key identifier: 60:51:FC:AE:B7:43:EF:F7:F9:7C:F3:82:F0:47:C4:70:26:31:1A:B1
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0AD6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YFH8rrdD7_f5fPOC8EfEcCYxGrE.roa
Signing time: Sun 07 Feb 2021 11:40:36 +0000
ROA not before: Sun 07 Feb 2021 11:40:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 203.77.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:40:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6051FCAEB743EFF7F97CF382F047C47026311AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:18:fb:64:c4:26:ca:bc:af:5f:dc:c4:e0:
7f:42:cd:32:b9:ab:2b:cd:ff:52:91:2b:ac:3f:b6:
c6:fa:4c:b3:3a:42:94:fa:27:2b:d7:88:0e:43:1f:
ca:12:b5:7d:42:fe:32:c2:e4:dc:73:fc:39:72:cd:
c5:9c:ce:5f:c0:ee:77:72:f3:bc:92:4a:c3:c7:90:
a2:2c:94:c3:9f:2f:d0:9d:20:ab:e9:d8:77:2d:60:
1c:ae:c6:cc:b1:e0:9d:37:87:f4:d9:6b:e4:0b:45:
7f:45:74:81:f7:66:8e:68:7e:3e:f0:d7:75:37:6d:
1b:9e:da:dc:96:01:7b:bd:02:75:6b:62:56:37:5b:
03:f3:8a:85:d1:c6:56:60:22:68:29:da:0e:b2:3e:
79:28:85:9c:d4:80:16:ee:b4:34:95:99:48:7f:d4:
ba:0c:8a:13:46:d4:c6:1d:90:97:be:9a:7a:e4:2b:
37:21:ca:e2:18:6f:4c:e8:2d:ef:c5:25:d9:fa:9e:
99:5a:d1:8e:a0:76:76:36:54:e0:ba:94:26:98:e8:
f9:12:bc:a5:e1:56:db:a0:1b:3a:89:ef:25:ae:05:
0c:5e:47:91:a7:9d:be:9c:f8:76:e3:80:03:a0:e0:
91:c6:9f:9d:6a:d6:55:80:18:28:e0:20:73:61:75:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:FC:AE:B7:43:EF:F7:F9:7C:F3:82:F0:47:C4:70:26:31:1A:B1
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YFH8rrdD7_f5fPOC8EfEcCYxGrE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:3e:f2:3f:3d:b3:50:a9:d3:3a:2b:33:c0:d8:5b:66:48:20:
6a:5b:b8:fa:87:e3:cd:a5:54:cb:03:82:42:a4:ce:f1:66:ea:
d4:42:87:e1:f8:b2:07:63:9a:f8:f7:17:7a:21:8e:99:0b:e2:
75:13:84:71:08:87:93:bb:d0:c9:12:52:e9:fa:28:3d:1f:b5:
9b:96:e8:7c:67:40:9c:e4:38:51:eb:ba:9c:71:5c:19:2c:97:
c8:d8:85:1d:af:70:f0:ef:2d:9d:09:7b:02:ad:2e:2c:13:23:
67:1c:cd:4b:5e:dd:6a:b1:c9:af:e2:72:54:a4:92:9e:f5:ac:
6f:05:74:1e:82:49:42:bf:38:53:08:93:7f:3a:dc:24:6e:3f:
d2:df:c8:c6:56:32:76:83:dc:4d:0c:b9:31:47:c3:e0:19:b6:
44:12:4d:6f:e4:e0:bb:35:1f:95:11:10:e7:e1:4f:fb:f7:3b:
12:3c:36:4c:4d:1a:c6:c1:9c:a2:31:77:99:7c:9b:b9:82:7e:
b8:f2:52:54:12:ce:62:6c:94:b5:e2:c5:0e:db:d6:f6:63:e8:
70:58:d3:e2:ef:4c:ba:d6:6b:29:d3:06:70:4f:cf:61:cb:b8:
5e:ff:f9:11:1c:09:3c:d7:a8:b3:bb:53:d7:f9:bc:9b:26:c4:
ac:ce:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:15 2023 by rpki-client on console-fra.rpki-client.org