Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aadBmiAWAtRSiJYllX9W9K50tZ8.roa
File: aadBmiAWAtRSiJYllX9W9K50tZ8.roa (raw, json)
Hash identifier: 5IU+3npLYOctBtq8jP6d9ygrE/oLDtiYGphyIcFjyXQ=
Subject key identifier: 69:A7:41:9A:20:16:02:D4:52:88:96:25:95:7F:56:F4:AE:74:B5:9F
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C5E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aadBmiAWAtRSiJYllX9W9K50tZ8.roa
Signing time: Wed 29 Sep 2021 02:49:45 +0000
ROA not before: Wed 29 Sep 2021 02:49:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.62.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=69A7419A201602D452889625957F56F4AE74B59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:9c:a9:19:80:82:f3:64:a5:b2:a1:46:27:
6c:00:b5:fd:36:f6:80:c2:5d:c8:77:ce:07:1c:65:
40:cc:3c:82:3c:94:63:7e:70:e3:6e:82:fd:24:7d:
03:4e:d7:5a:86:20:3d:cb:e6:8e:0d:51:da:3e:a8:
cc:31:5f:1f:8f:1d:27:58:5c:80:3b:ec:d6:29:f7:
1a:3c:7d:f0:45:10:92:c9:00:57:ec:c9:f5:8c:71:
9f:8f:a1:6e:1a:be:04:c4:e2:64:1b:80:cb:66:bf:
ac:f5:5c:78:af:7b:9d:20:de:7c:cf:40:26:a2:08:
ec:aa:ca:de:ed:b6:dd:47:84:64:42:94:ee:b6:c0:
d7:40:52:36:a9:0c:23:e5:ab:68:3b:4d:e8:a7:61:
e6:20:6e:ee:a2:10:61:fb:c7:f8:04:5d:29:0d:96:
6c:ee:26:cb:22:f4:6f:0b:42:1f:1e:ec:7d:d0:e8:
ea:c1:f2:88:7f:9a:e7:e4:3a:cc:2a:7e:5c:41:92:
6d:b6:be:28:38:45:5c:1a:cf:4d:54:f4:19:c8:71:
e3:42:b0:9c:90:2e:3b:82:6c:e6:be:12:02:45:63:
a7:c6:db:46:49:1d:53:e9:dd:8e:48:34:70:77:21:
8d:66:a4:23:80:79:db:fc:99:b7:80:0f:b3:18:7a:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A7:41:9A:20:16:02:D4:52:88:96:25:95:7F:56:F4:AE:74:B5:9F
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aadBmiAWAtRSiJYllX9W9K50tZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.192.0/19
Signature Algorithm: sha256WithRSAEncryption
18:d8:66:a6:5d:94:95:58:d0:4f:84:4d:ad:5a:4c:cb:a4:fc:
ab:46:af:79:d3:bb:c3:2f:d4:38:ba:b0:12:2d:82:d0:ad:8a:
cc:dd:26:26:2a:b3:bd:ae:c5:fe:2d:dc:ed:11:31:48:41:5f:
cc:58:b4:89:17:99:f3:14:b3:5d:07:77:e4:50:08:ed:fb:b0:
70:73:1b:40:f2:9f:bb:de:ed:b7:50:01:33:ae:d7:14:46:92:
ba:82:73:d1:e1:f0:37:9c:cf:72:1d:ed:20:b0:33:bd:58:3d:
c3:51:30:f1:dd:70:b0:d9:88:28:e9:18:b3:bf:70:47:5b:1a:
0f:a8:83:ae:a8:ed:d5:c8:ad:8e:ee:1a:6f:2b:4e:cd:e5:0a:
b1:b6:c1:96:fd:22:bd:25:b1:2c:ab:12:b8:1f:78:3f:58:16:
2c:f2:89:6d:2b:a3:d5:7c:fc:89:64:b4:9f:f5:c6:c7:51:8d:
b1:21:b5:f0:46:1c:32:40:8a:b9:5d:16:ea:1c:8a:79:9e:21:
9a:eb:c2:00:28:55:b6:ac:61:08:80:f9:70:fb:b3:f5:75:db:
b8:a6:2c:7b:09:cb:c4:59:ae:2d:c3:71:e0:f0:71:ed:d9:b3:
19:58:e6:6e:b3:f0:56:5d:9a:92:90:ab:a1:32:1c:45:57:7d:
8b:80:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org