Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bN1PX9quBAc1sNhW1ToKAQYNtOw.roa
File: bN1PX9quBAc1sNhW1ToKAQYNtOw.roa (raw, json)
Hash identifier: HG6fR9pDboxvRagxkBaVAckKGlXosBekQ8d2u94EzRE=
Subject key identifier: 6C:DD:4F:5F:DA:AE:04:07:35:B0:D8:56:D5:3A:0A:01:06:0D:B4:EC
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bN1PX9quBAc1sNhW1ToKAQYNtOw.roa
Signing time: Thu 15 Sep 2022 02:47:35 +0000
ROA not before: Thu 15 Sep 2022 02:47:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 133747
IP address blocks: 60.198.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6CDD4F5FDAAE040735B0D856D53A0A01060DB4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:6c:8f:bb:22:7e:74:13:cc:71:ad:ad:ae:
aa:ab:8e:25:46:df:94:b3:82:03:aa:fe:7d:ce:39:
33:cc:c6:00:4c:6d:be:35:66:29:4a:69:10:d9:88:
8a:0a:bf:b6:3e:e6:0d:ba:af:25:e0:2a:14:8e:8f:
35:1f:0b:90:94:d2:b3:ce:87:eb:8b:4f:1f:35:d4:
28:61:08:24:c3:5c:18:25:c1:c2:c5:e8:b2:76:a5:
3e:c4:b8:ef:f9:ac:d0:5c:8a:fb:31:fa:f8:ff:65:
89:37:0d:66:73:7e:f1:0c:19:ed:a0:dc:67:0d:4c:
10:52:c0:bf:d2:0f:27:89:29:84:50:98:21:34:af:
c0:0c:32:a8:1e:02:7c:f9:dd:5b:fc:e6:ad:e4:2f:
ac:7c:61:54:36:fb:08:3c:f1:76:b9:b6:ff:f8:fe:
98:8c:51:84:37:4c:b2:b2:24:7a:62:23:a2:2b:c3:
69:c7:26:e2:ef:00:18:a6:99:c7:31:bf:90:f7:06:
27:44:e9:8c:5f:20:01:22:71:4f:b7:16:f7:94:39:
d2:22:8c:a0:a3:02:63:1b:f9:6e:fe:c7:85:ba:65:
79:2a:bc:8a:f6:cc:67:9d:c4:f6:f6:19:66:b7:f8:
69:b1:b9:3d:aa:b6:91:76:32:b2:43:e5:59:ae:29:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DD:4F:5F:DA:AE:04:07:35:B0:D8:56:D5:3A:0A:01:06:0D:B4:EC
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bN1PX9quBAc1sNhW1ToKAQYNtOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.136.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3b:9e:4b:03:6d:e8:03:32:77:85:f2:08:56:d2:89:f4:40:
66:c9:27:d1:e0:18:c0:78:58:66:d7:c3:a0:85:3e:04:89:9f:
82:bb:6a:b5:fc:2c:65:03:a2:57:5c:f0:e9:bf:29:de:fb:6a:
47:f8:67:eb:be:6c:13:38:6f:00:e0:4e:5b:51:c3:dc:02:f9:
63:76:ee:03:38:67:53:2e:6b:c9:da:92:3f:d9:09:ea:a8:3b:
9f:c2:73:0b:ac:26:58:01:dd:b0:4f:f0:10:f7:3a:44:36:6e:
1d:ad:c2:cf:2b:29:6c:81:68:93:a5:18:90:39:0c:7a:0b:be:
29:e3:b3:c2:59:42:8d:08:95:ed:77:00:4c:8a:ac:64:a4:64:
6c:c6:b9:f4:8e:e2:c5:e0:50:ec:48:f2:07:e4:13:0e:1c:39:
77:4a:86:4d:4c:f8:b8:9f:60:91:88:e7:6a:70:88:c0:0b:62:
fd:17:76:da:a4:2e:de:cb:5a:a4:02:65:dc:bf:e1:e5:2b:40:
20:ef:4d:2b:b1:0e:77:c2:90:d7:fb:bb:3c:59:fe:1d:7d:f7:
a3:de:b9:8a:87:f5:db:3d:3b:bd:a3:1b:49:fe:13:16:2d:51:
81:b4:78:11:e2:df:30:98:39:06:c1:8e:e0:e6:bc:57:6d:d2:
ad:72:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:46 2025 by rpki-client