Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cLhWu-nKk3CEBXClzs5oJsxee4s.roa
File: cLhWu-nKk3CEBXClzs5oJsxee4s.roa (raw, json)
Hash identifier: /1wzCUUVCElNYCiLHCFWltHbCMPPJCl2RvafSJDBcnM=
Subject key identifier: 70:B8:56:BB:E9:CA:93:70:84:05:70:A5:CE:CE:68:26:CC:5E:7B:8B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0823
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cLhWu-nKk3CEBXClzs5oJsxee4s.roa
Signing time: Tue 29 Sep 2020 09:57:48 +0000
ROA not before: Tue 29 Sep 2020 09:57:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 203.77.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2083 (0x823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=70B856BBE9CA9370840570A5CECE6826CC5E7B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:46:e1:32:4b:18:29:d4:0c:44:b7:1b:df:
f3:8d:96:b5:14:af:d4:1e:a3:a2:72:e5:b3:46:8c:
fa:39:f3:d9:6b:40:a3:f7:80:d4:38:ff:10:ea:33:
40:e4:3c:e2:92:7c:02:2f:86:af:7c:07:00:e3:1d:
a3:db:9f:f5:78:0b:c5:78:bf:3d:f0:e5:8c:a1:4b:
a7:d5:e1:61:ac:60:51:01:10:45:ad:e0:14:9f:17:
96:61:33:8e:83:ae:3e:a1:ba:ac:a0:e7:a4:07:8a:
b7:13:2a:97:d3:aa:e4:d6:a1:89:38:f3:f7:1c:10:
20:d1:b5:3b:58:65:bb:74:c9:e5:5b:e8:e8:c5:2e:
d8:19:35:88:83:7f:c0:64:6d:32:a1:f5:f3:0d:89:
6a:3d:f4:dc:15:4d:6f:85:df:1e:73:e0:d6:66:bc:
68:d6:fb:e8:20:a9:ce:77:26:20:cf:e4:70:6d:5d:
a5:9a:ab:8d:32:10:4a:a2:fc:9c:f3:4e:1d:31:e1:
0b:96:eb:bd:87:8f:96:d8:84:d4:70:34:22:1e:7b:
c8:da:8f:29:27:6d:4c:b8:24:1d:f9:1d:5a:b4:4c:
2e:7a:66:a3:29:6c:ea:99:4f:64:00:d8:c3:ad:7d:
7d:8b:8f:83:9b:85:5c:0f:ae:52:c9:84:40:3e:51:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:56:BB:E9:CA:93:70:84:05:70:A5:CE:CE:68:26:CC:5E:7B:8B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cLhWu-nKk3CEBXClzs5oJsxee4s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:6d:ba:af:4c:5a:c5:ce:ba:25:cf:b7:30:b8:73:68:b0:93:
e1:cf:cd:c7:27:ed:24:10:c9:4b:92:9b:5b:7b:fc:98:8a:9c:
ae:b3:90:1d:9a:63:47:ee:63:f6:b6:6b:11:0e:ec:e6:3a:be:
a0:c0:2a:79:7d:34:de:20:08:f7:ff:81:fd:24:53:b4:01:60:
6a:3b:58:1f:8f:61:85:c6:43:1f:ae:15:27:cb:a9:27:83:3d:
ed:0f:15:3e:24:ed:eb:31:e5:aa:c7:ec:d9:06:29:1a:9a:84:
f6:e1:09:30:77:d0:2f:9c:49:f5:8d:9f:eb:47:b3:05:0b:ea:
4d:b6:7a:22:8d:29:4e:84:41:8a:b4:e1:77:a8:16:5d:5d:ea:
0f:7a:1d:39:b4:a7:13:26:da:88:f5:c2:3a:66:b7:1f:af:d2:
d1:a4:da:dc:b2:a6:6e:3c:98:59:b1:59:a6:8d:3a:4b:49:a0:
13:28:f3:58:78:28:9e:ba:ab:0c:4b:13:b3:eb:af:d6:ef:e5:
7e:c3:62:b3:8c:88:ab:2a:cc:2c:e2:24:f9:03:89:98:c0:e7:
01:dd:d3:f7:96:22:2f:7e:4e:06:19:80:40:37:e3:4a:ff:43:
86:a6:ba:64:bf:ce:d2:53:95:9a:02:df:62:54:f9:6b:41:8a:
98:9f:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org