Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_HeBCpg3-5MgfO-B4rE3MXOXre8.roa
File: _HeBCpg3-5MgfO-B4rE3MXOXre8.roa (raw, json)
Hash identifier: Wlhxlh/tcqfR3sAqVrYAmh/3XTwNQq/zDJJ08KegniE=
Subject key identifier: FC:77:81:0A:98:37:FB:93:20:7C:EF:81:E2:B1:37:31:73:97:AD:EF
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_HeBCpg3-5MgfO-B4rE3MXOXre8.roa
Signing time: Thu 15 Sep 2022 02:46:52 +0000
ROA not before: Thu 15 Sep 2022 02:46:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 60.199.107.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC77810A9837FB93207CEF81E2B137317397ADEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:48:bd:8d:e5:47:a4:6e:0e:5a:29:5f:52:
ea:97:c1:e1:a6:cd:47:a3:74:bf:f7:0a:d8:4e:f8:
28:3a:73:7b:da:2b:90:03:94:ba:4a:cb:3c:e5:39:
a2:dd:88:42:d1:f9:eb:08:b6:34:56:96:48:50:6e:
55:23:27:ca:15:fd:7a:7f:a6:95:ea:0c:b3:9f:6d:
6a:a5:e6:32:8f:b9:88:4d:91:84:e3:8f:08:de:0b:
49:bc:57:12:ea:21:39:71:35:f4:7d:a0:e3:dc:b8:
9c:6c:2c:5f:ea:a4:af:83:f5:a5:cd:00:c2:12:92:
e1:61:01:ee:bb:3e:08:05:6e:8c:6d:e0:f5:d4:6e:
de:19:93:3f:98:ca:8a:77:3d:22:ac:68:db:3c:3e:
02:73:09:50:17:bc:6c:13:cf:1b:d6:f2:3e:9f:f5:
6f:5d:7c:9f:3b:04:39:8b:d7:e3:02:b1:fa:0f:49:
78:ad:22:2d:ee:c2:b5:04:59:e4:fb:59:3e:af:6b:
2f:c7:7d:38:2c:65:74:02:dc:2b:62:93:88:3c:d0:
2b:b3:f2:5c:0f:e0:c0:14:83:f3:e1:2f:18:6d:0a:
2d:05:c1:22:50:0c:d1:e0:a4:76:bc:6b:8d:c2:a1:
d8:9c:57:26:78:51:d2:f8:52:20:45:58:67:e4:c5:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:81:0A:98:37:FB:93:20:7C:EF:81:E2:B1:37:31:73:97:AD:EF
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_HeBCpg3-5MgfO-B4rE3MXOXre8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.107.0/24
Signature Algorithm: sha256WithRSAEncryption
94:98:3a:b1:d2:8e:41:41:2e:fb:98:aa:2a:6e:27:f5:d8:22:
09:ff:2d:6f:a0:4f:a0:06:5e:63:60:cf:26:9f:74:8f:57:77:
3a:9e:96:a5:f2:ba:1b:0d:f4:c2:6c:82:4e:71:45:a9:38:21:
7b:02:58:10:92:de:96:18:34:74:26:55:2c:7c:d6:15:57:94:
ab:4f:06:f0:12:98:c0:54:54:b1:96:a2:b2:4b:8c:67:c3:b3:
7b:9e:ad:85:08:05:bc:6e:a5:4b:b3:45:cc:a0:8b:c5:d2:18:
fb:8b:5a:49:34:31:86:d6:05:4b:97:86:40:bf:42:ff:73:0e:
b6:ff:cf:58:2a:11:22:29:cd:92:8d:49:6a:61:55:fc:02:09:
74:9a:b4:7b:bb:22:b2:71:a1:b6:91:6d:7c:47:f8:3e:e0:91:
1b:cb:e0:61:03:c4:9f:6f:7e:b0:c7:67:a1:11:71:bc:05:10:
7b:1c:2b:6f:8f:5e:4d:35:c3:f5:b3:a6:13:10:96:7f:82:d9:
56:ca:57:58:63:b6:08:ea:53:19:6c:5d:11:5d:e7:d8:98:58:
f3:6f:4a:cd:d1:01:b1:f2:d1:ca:0f:27:97:4d:5a:26:63:a4:
84:f8:f9:12:cb:ad:b7:d2:73:70:44:ea:2b:da:19:a5:e2:51:
37:06:97:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org