Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YiSr-Az9IKGASPGuEBADHFAbvPQ.roa
File: YiSr-Az9IKGASPGuEBADHFAbvPQ.roa (raw, json)
Hash identifier: JsauzbhQq2FQAGWfk39qG7Jmhkxnybqeyn8Ou+xbBj0=
Subject key identifier: 62:24:AB:F8:0C:FD:20:A1:80:48:F1:AE:10:10:03:1C:50:1B:BC:F4
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C3A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YiSr-Az9IKGASPGuEBADHFAbvPQ.roa
Signing time: Wed 29 Sep 2021 02:49:34 +0000
ROA not before: Wed 29 Sep 2021 02:49:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.17.73.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6224ABF80CFD20A18048F1AE1010031C501BBCF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:e1:17:16:c1:e3:79:b7:b6:e3:5d:9e:e8:
44:27:07:79:e1:88:f5:04:91:c4:fd:a0:1c:0d:99:
7a:4e:af:93:0b:ce:73:37:0e:e1:9f:5d:76:d5:66:
75:35:4a:99:f2:4f:fd:af:1d:ce:1d:e5:ea:e2:95:
eb:07:f5:67:08:8e:c8:ec:ca:7e:0b:f0:84:45:af:
a8:39:6e:20:e7:88:6c:3d:29:2d:ac:c9:e0:d7:b4:
33:34:ea:b0:bd:bd:8d:c4:2e:7d:02:e5:74:71:22:
b6:6f:87:81:05:20:b2:55:76:3e:92:59:6c:89:3e:
57:fe:8a:a9:26:d2:03:d9:5b:30:b6:de:7f:50:ed:
ad:6c:6d:64:b8:eb:77:f8:8f:ce:a3:6a:0b:d5:5d:
f6:99:68:d9:08:9a:8a:18:db:14:6a:88:f7:82:50:
19:ce:30:fc:c1:ce:54:e0:8d:b1:05:c4:93:cf:3a:
2e:21:24:ec:fd:2e:88:53:2d:5b:05:6f:4b:32:3a:
7a:41:ee:b4:74:17:ec:e8:2c:62:b3:f3:b2:c3:cf:
74:66:db:0f:ab:a3:3c:85:3e:91:55:e0:67:6b:51:
fd:0d:93:7a:f7:cf:88:45:c9:67:00:84:bc:5d:4b:
13:a5:29:ab:13:78:d0:76:9c:4b:cb:7c:d5:07:1e:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:AB:F8:0C:FD:20:A1:80:48:F1:AE:10:10:03:1C:50:1B:BC:F4
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YiSr-Az9IKGASPGuEBADHFAbvPQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5c:af:30:1a:7e:42:ec:38:7f:b4:87:ac:6f:37:9e:22:ac:
03:1f:a3:6c:54:69:75:35:e0:b2:cc:f0:a3:ab:52:2d:00:1a:
ad:ec:88:b5:ea:31:ca:1c:1a:28:dc:cc:17:bb:05:df:a7:74:
e6:4f:10:85:d8:fc:08:bb:ef:06:05:c3:c2:a6:00:40:c2:a0:
14:ff:a0:9a:fe:dd:9d:4b:29:d1:90:cf:29:b9:50:c7:9b:4f:
76:f9:3c:48:d0:30:e2:9c:50:ba:b3:55:a5:88:df:82:70:8c:
8c:97:b9:d0:6b:c8:d4:32:c7:88:c0:4c:c3:b1:2d:8d:9b:90:
ea:81:38:6d:88:91:0e:c4:27:57:94:28:6f:45:ac:c2:5a:24:
18:f3:ef:d1:85:28:cd:52:3c:62:b6:d5:22:4c:85:c1:97:bc:
fc:cf:c3:9c:ef:1f:ae:f5:25:f2:35:46:c6:11:f4:86:f0:11:
a3:45:6a:c4:35:5f:10:34:d2:19:b4:7f:d9:a9:5c:f6:00:04:
92:81:f0:9d:1e:43:8c:52:c6:a6:a7:42:1a:9c:46:50:34:00:
1e:aa:d3:cc:33:52:ca:3b:97:77:2f:d0:01:7f:4a:a1:77:d8:
eb:11:e1:ae:54:c4:aa:96:84:5a:61:6e:70:ff:7e:c0:dc:d7:
9f:8d:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org