Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bkn-9G4o4AX0t2Vuy6Wr_AWYl6U.roa
File: bkn-9G4o4AX0t2Vuy6Wr_AWYl6U.roa (raw, json)
Hash identifier: rQrktgeV8nuHZJ6gUPI1259PLOw/brwbxFR+2bYgx60=
Subject key identifier: 6E:49:FE:F4:6E:28:E0:05:F4:B7:65:6E:CB:A5:AB:FC:05:98:97:A5
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C73
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bkn-9G4o4AX0t2Vuy6Wr_AWYl6U.roa
Signing time: Wed 29 Sep 2021 02:49:51 +0000
ROA not before: Wed 29 Sep 2021 02:49:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.67.144.0/20 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3187 (0xc73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6E49FEF46E28E005F4B7656ECBA5ABFC059897A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:e8:ed:cc:63:45:9a:92:8e:87:9b:5f:51:
1b:f6:79:10:71:73:81:a8:5b:f1:de:6c:8f:99:3d:
a4:a1:f0:8e:a7:c2:e4:f0:6e:a1:90:3a:e1:f6:02:
a3:9f:7f:ef:d5:97:17:f6:7f:99:ce:a9:ea:70:06:
db:25:5c:b2:e2:20:fa:ad:46:5c:36:28:b6:9f:79:
58:00:01:8e:c3:38:30:01:e9:96:01:9e:14:42:df:
5d:82:49:fd:e6:85:34:b6:04:45:fc:48:17:bd:57:
56:3f:e4:f1:d4:cd:f2:16:a8:d6:db:66:11:ec:fe:
4d:a8:c2:f9:fb:0f:04:83:15:35:29:44:46:f6:79:
ed:ff:d3:93:04:77:ca:78:a5:7a:f7:49:be:c9:10:
43:8a:ba:86:7b:56:ad:08:5f:08:d2:d1:92:18:a3:
e1:1d:99:cb:35:45:f2:c8:00:87:04:5c:f9:df:c0:
ee:cf:d4:a4:11:cf:ba:76:15:70:be:d9:91:78:d1:
42:8c:d4:7c:28:f2:3b:98:5c:1d:95:29:6a:71:b3:
84:df:9c:62:e8:b2:8c:db:f2:71:97:ab:8f:66:5d:
ca:24:3d:cb:88:eb:e9:d6:8d:a7:8e:23:ed:9f:0d:
b5:9f:e7:fb:ee:cf:32:1b:a1:fa:d4:58:7e:18:77:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:49:FE:F4:6E:28:E0:05:F4:B7:65:6E:CB:A5:AB:FC:05:98:97:A5
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bkn-9G4o4AX0t2Vuy6Wr_AWYl6U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:07:9a:b2:bc:4a:69:d9:f4:ab:5d:3f:bc:db:11:20:2e:39:
a8:b8:7d:99:e9:53:93:e9:3f:7f:88:be:fb:41:3f:65:80:60:
07:31:db:fb:c4:d7:a1:60:2b:4b:24:b7:a2:c5:0c:b4:06:c6:
0f:b8:ef:aa:db:69:ec:9d:ea:b4:80:39:fc:e3:a0:99:66:f7:
10:e3:ea:d1:98:6d:e1:42:8d:ea:b0:e5:9d:38:33:95:7d:e6:
2b:67:9b:b9:3b:5f:61:8f:de:c2:d8:64:f6:c6:fa:9e:9d:7c:
47:00:08:6e:b7:46:66:70:fe:7f:97:11:d4:0f:a6:68:57:bc:
4f:ec:7f:24:0b:cb:a7:37:6f:31:17:f4:d2:1b:8b:05:93:90:
24:37:15:cf:70:5f:c9:9f:53:eb:73:41:44:f7:83:d2:11:01:
9b:ee:07:1e:25:0b:95:4a:6e:c9:c7:57:2d:ba:c5:2f:c9:2a:
f7:d0:f7:c1:bb:21:57:07:f1:35:ac:dd:d3:47:10:96:a5:12:
c0:00:50:d4:e7:87:67:d0:56:32:80:0f:5d:bf:ef:22:8a:df:
22:4b:a1:aa:00:bb:29:63:f3:d2:74:90:ed:35:6d:1c:a7:0a:
ec:af:9d:4c:15:99:5c:a8:c3:57:e4:8b:45:ce:94:3a:44:7e:
13:f0:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:15 2023 by rpki-client on console-fra.rpki-client.org