Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dscrjl5kCRFx28xgoQqbqkEawco.roa
File: dscrjl5kCRFx28xgoQqbqkEawco.roa (raw, json)
Hash identifier: vVE5QHWvtWm4uFsctd+uOxs5kaB2WkFeFpKMfIjdoBU=
Subject key identifier: 76:C7:2B:8E:5E:64:09:11:71:DB:CC:60:A1:0A:9B:AA:41:1A:C1:CA
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0806
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dscrjl5kCRFx28xgoQqbqkEawco.roa
Signing time: Tue 29 Sep 2020 09:57:40 +0000
ROA not before: Tue 29 Sep 2020 09:57:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.62.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2054 (0x806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=76C72B8E5E64091171DBCC60A10A9BAA411AC1CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:38:74:0c:c0:ff:f1:5b:58:e4:7d:7e:91:
99:1e:b9:85:55:30:e1:9d:99:7b:68:18:02:42:ee:
e9:6d:22:a9:d8:95:42:d2:01:91:a8:cb:e8:2d:5c:
e6:7a:58:87:1c:8e:65:c7:fe:65:60:cf:23:af:33:
d1:eb:06:ca:b2:0d:34:d5:8b:3c:da:b7:84:36:4d:
d4:84:e5:dc:d7:84:bf:22:44:9d:9c:64:5f:a3:17:
36:61:90:6f:12:52:0f:0f:7a:e7:34:c5:98:81:ea:
7e:c0:37:a2:cb:c8:80:57:35:78:44:32:1c:ed:a8:
f9:f1:63:c9:58:4f:68:da:6d:8a:2b:bc:c7:fc:f0:
82:74:6c:30:af:4e:aa:a0:e2:0f:73:9b:7f:53:e1:
4c:7d:91:f8:56:df:db:dc:07:25:6d:d5:00:37:97:
1e:e4:dc:19:46:c5:8a:cc:52:0b:53:5c:c8:cc:a9:
1a:eb:ab:b4:a1:02:17:fc:75:cb:1d:d9:25:10:36:
a8:51:a7:23:ed:46:ac:00:f7:c2:25:43:6b:c8:b9:
19:79:d7:04:ce:82:8f:62:a9:a6:39:e7:3e:75:85:
4c:cb:e7:56:51:19:a7:41:e5:a0:1e:0f:44:ce:2b:
9c:3c:68:b1:3a:24:84:18:be:3a:c5:58:e2:b2:22:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:2B:8E:5E:64:09:11:71:DB:CC:60:A1:0A:9B:AA:41:1A:C1:CA
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dscrjl5kCRFx28xgoQqbqkEawco.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.192.0/19
Signature Algorithm: sha256WithRSAEncryption
27:2a:cf:66:e2:de:9e:df:b6:39:70:01:00:bb:2d:a0:4b:f9:
03:39:46:59:eb:68:b6:fc:81:18:4f:43:a1:57:ed:56:a2:50:
2c:43:11:34:b6:2b:bf:f3:e9:b1:7d:83:42:16:b9:3c:f4:0c:
32:de:33:a7:b5:c5:79:96:3c:b3:b9:44:b5:7c:6e:3d:7c:b4:
d3:c9:ab:ae:c6:4c:ba:dc:cf:08:19:f1:24:1c:a5:03:2a:31:
80:d3:19:07:ed:36:c4:36:59:23:98:11:e3:ac:70:76:82:78:
af:04:f8:b6:a5:c9:70:cf:36:61:48:81:df:a8:de:aa:eb:f5:
8c:15:3e:cd:0b:05:9c:1f:57:48:39:11:9d:1d:9c:9a:32:75:
a2:0c:80:35:12:92:85:7e:54:05:8e:a1:5b:83:8f:01:02:2f:
30:9c:d6:b2:44:e9:6d:23:12:ac:4e:d3:7b:e9:c3:3f:3b:50:
59:e2:b3:7d:9a:41:05:44:5b:eb:8f:61:bc:b9:2d:f2:c7:4e:
ef:e1:fb:99:69:ba:44:96:51:ed:76:b9:49:95:a5:11:3d:3e:
df:a4:71:09:79:69:0d:4b:0c:5b:7f:e5:3c:3e:af:1e:19:39:
50:ea:f9:81:75:34:16:59:56:c1:41:7c:99:f4:18:c4:4b:bb:
61:b6:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org