Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZYSJtqINVDei5oeXpXu2Sp6OlNc.roa
File: ZYSJtqINVDei5oeXpXu2Sp6OlNc.roa (raw, json)
Hash identifier: IdjnsFmEX0hZm/gvQwr7n342+2E7mqdgTj5k2kcDXb4=
Subject key identifier: 65:84:89:B6:A2:0D:54:37:A2:E6:87:97:A5:7B:B6:4A:9E:8E:94:D7
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 07EF
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZYSJtqINVDei5oeXpXu2Sp6OlNc.roa
Signing time: Tue 29 Sep 2020 09:57:34 +0000
ROA not before: Tue 29 Sep 2020 09:57:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24158
IP address blocks: 61.30.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2031 (0x7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=658489B6A20D5437A2E68797A57BB64A9E8E94D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:cf:8d:be:4a:b1:b5:1d:27:62:69:46:41:
a3:6e:3a:25:01:da:98:ac:86:16:21:72:f2:c0:4e:
72:cb:cd:bf:30:16:18:16:30:a8:90:5b:b7:c1:eb:
e6:6b:c8:61:12:bb:cd:ab:82:7b:a6:15:b2:25:ec:
e0:c7:35:c0:64:07:02:4d:98:dd:35:7a:a1:64:01:
60:d7:61:4f:12:c7:77:15:82:83:2d:10:66:9a:64:
56:fb:4c:07:f6:83:c0:05:bb:2f:4d:fa:78:b4:df:
11:2e:c6:da:1b:99:7b:68:e7:23:81:a8:3b:99:69:
34:ce:cb:c1:a2:7e:14:4b:4f:65:0f:96:b5:61:67:
60:98:5f:c7:9e:28:0b:0b:b5:bc:d5:2c:ac:64:8d:
af:b8:cd:33:f1:16:78:14:8a:45:8d:45:05:01:68:
c1:6a:0e:a7:b8:4f:e3:7a:bc:49:cf:54:34:7f:3e:
7b:8b:76:ba:93:9e:ed:2b:cb:fc:89:b9:e9:97:e4:
73:f3:c5:9e:92:2c:86:43:e8:e0:ee:fa:59:ea:73:
49:88:95:4c:99:5b:75:9d:48:39:4a:68:50:05:b0:
37:8a:59:40:71:57:d7:8f:5f:21:96:f5:1c:e0:c9:
10:80:9c:11:cc:97:59:c6:3b:3d:bf:ae:c0:cb:08:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:89:B6:A2:0D:54:37:A2:E6:87:97:A5:7B:B6:4A:9E:8E:94:D7
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZYSJtqINVDei5oeXpXu2Sp6OlNc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.30.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6c:64:36:20:85:e3:28:94:cc:f7:f3:ad:f5:71:29:37:4a:
1f:cb:86:2f:d7:ea:58:98:7b:4c:0a:1e:41:59:93:16:99:e0:
bc:50:4d:b2:c3:83:57:cc:fb:1c:42:4f:42:b1:ef:1d:59:6c:
d7:a0:4e:97:1a:fd:b2:e5:3d:c2:e4:d0:3b:8b:7d:b0:f4:59:
7a:b1:3d:54:5e:8d:3d:63:34:73:1d:a0:18:5e:1f:98:1f:e9:
c3:f7:8d:c3:da:f0:77:ee:84:1f:e0:a7:01:5c:dd:5c:fd:1a:
8e:40:e6:f0:db:1f:fa:9b:4e:4d:fe:53:e5:0d:52:2e:bd:c7:
c8:c4:30:78:d8:39:47:a9:69:1c:18:c3:fe:75:de:cf:e3:28:
62:9d:53:df:1b:aa:a2:23:08:aa:c7:ee:46:73:87:d8:36:fc:
76:f8:c3:48:c3:a4:73:e1:f2:8a:fc:31:8b:14:03:8d:72:9b:
d0:aa:5b:1e:70:7a:f6:b3:bd:c5:78:10:41:44:b4:2f:6e:47:
0a:32:89:46:06:0c:a5:0f:6d:c5:0d:b2:81:77:b9:80:23:29:
03:f0:2e:37:7d:ba:4d:70:47:51:dc:7a:44:ea:07:14:f6:f0:
da:a0:7a:d7:68:c9:83:18:32:19:de:1b:5c:82:81:99:3f:ef:
5d:9b:17:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org