Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eEzUipjJ8JwFgxTPawj4D2PE91w.roa
File: eEzUipjJ8JwFgxTPawj4D2PE91w.roa (raw, json)
Hash identifier: viX9DdlBSJCGik1XN4yvv6uidwYqSUUAW/LRGGuI1Cc=
Subject key identifier: 78:4C:D4:8A:98:C9:F0:9C:05:83:14:CF:6B:08:F8:0F:63:C4:F7:5C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C6C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eEzUipjJ8JwFgxTPawj4D2PE91w.roa
Signing time: Wed 29 Sep 2021 02:49:49 +0000
ROA not before: Wed 29 Sep 2021 02:49:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 219.80.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=784CD48A98C9F09C058314CF6B08F80F63C4F75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:f6:0a:0b:16:e1:3f:70:5a:e8:b1:15:bc:
07:e4:3e:a8:28:a3:74:ad:db:06:5c:10:b9:08:07:
73:89:ae:7c:64:90:83:e2:48:a1:dc:22:b1:6d:eb:
10:9c:cc:84:b7:8d:02:14:57:de:34:e3:d4:2a:20:
fd:d8:f3:e3:79:9e:46:bd:40:50:ea:77:33:31:1c:
fd:9c:ff:b3:c3:a9:e0:97:db:6e:fe:ab:a8:a0:79:
72:7e:31:49:98:da:e3:86:02:0b:39:de:56:08:21:
12:8a:96:68:87:73:0e:d6:a8:07:8a:5d:f1:87:01:
8b:00:d2:f8:19:3d:75:68:35:c9:da:29:d9:e5:59:
16:c2:da:06:08:81:63:5f:a8:2f:a7:d5:ab:cd:28:
f2:eb:17:9d:97:94:ab:a9:5c:4a:2a:c2:fe:6d:15:
ab:b4:87:73:2d:84:27:bd:a1:3d:b3:df:4c:b8:ee:
4a:a0:d5:d2:98:a8:0d:28:a0:08:35:3d:23:29:98:
4f:a7:2a:c6:d1:e1:e9:5e:c7:00:9c:c9:36:2a:90:
b5:e0:0f:f5:83:4f:69:07:38:cf:c7:bd:38:34:44:
32:1d:ba:64:c3:cf:f2:20:8f:f8:c9:c3:ad:a9:d4:
83:a2:04:38:0d:73:7a:26:44:d7:c5:a4:1c:49:db:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:D4:8A:98:C9:F0:9C:05:83:14:CF:6B:08:F8:0F:63:C4:F7:5C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eEzUipjJ8JwFgxTPawj4D2PE91w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:0a:ad:aa:0d:69:15:24:21:87:b0:bf:a6:4b:54:31:d5:4d:
e9:32:e9:4b:56:8e:cd:d6:04:cd:03:bc:e5:6a:54:ee:a6:64:
65:0b:56:b6:7c:02:a9:44:28:57:1e:86:cf:29:75:a2:39:b0:
f8:10:ef:5b:e1:64:32:46:fd:57:ed:01:28:4a:a6:24:87:93:
cb:c4:a7:40:6f:dc:8d:bf:f1:95:50:26:0c:57:96:bc:67:b4:
94:07:75:91:06:89:fe:89:ec:3c:10:8b:f5:3d:e1:64:c7:1a:
60:67:55:8e:28:4c:6b:6e:4c:e6:f9:a8:b7:a2:48:76:58:d3:
9f:3a:b0:da:c6:dd:c8:cd:c3:df:43:0e:0f:fb:91:da:f4:36:
3e:4e:8e:07:7b:5e:ce:19:38:30:fc:f9:de:9f:54:59:fe:f1:
22:29:cc:65:ca:fd:41:81:80:f8:9c:74:f7:26:9c:aa:0b:5e:
43:16:09:93:85:cb:2d:14:88:fe:14:da:be:68:a0:6c:ac:54:
24:79:8d:a0:37:a3:38:8a:b1:a2:88:04:8f:e5:bc:01:36:b9:
83:c2:ac:03:fe:0a:02:c7:12:78:1d:f9:ca:ad:e9:7b:fc:56:
9c:19:d9:2b:bd:08:ca:16:91:22:bc:d6:ab:6b:32:be:fe:b3:
7c:65:95:14
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjQ5NDlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc4NENENDhBOThDOUYw
OUMwNTgzMTRDRjZCMDhGODBGNjNDNEY3NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkv/YKCxbhP3Ba6LEVvAfkPqgoo3St2wZcELkIB3OJrnxkkIPi
SKHcIrFt6xCczIS3jQIUV94049QqIP3Y8+N5nka9QFDqdzMxHP2c/7PDqeCX227+
q6igeXJ+MUmY2uOGAgs53lYIIRKKlmiHcw7WqAeKXfGHAYsA0vgZPXVoNcnaKdnl
WRbC2gYIgWNfqC+n1avNKPLrF52XlKupXEoqwv5tFau0h3MthCe9oT2z30y47kqg
1dKYqA0ooAg1PSMpmE+nKsbR4elexwCcyTYqkLXgD/WDT2kHOM/HvTg0RDIdumTD
z/Igj/jJw62p1IOiBDgNc3omRNfFpBxJ28yxAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUeEzUipjJ8JwFgxTPawj4D2PE91wwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZUV6VWlwako4SndGZ3hU
UGF3ajREMlBFOTF3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
ANtQMA0GCSqGSIb3DQEBCwUAA4IBAQBvCq2qDWkVJCGHsL+mS1Qx1U3pMulLVo7N
1gTNA7zlalTupmRlC1a2fAKpRChXHobPKXWiObD4EO9b4WQyRv1X7QEoSqYkh5PL
xKdAb9yNv/GVUCYMV5a8Z7SUB3WRBon+iew8EIv1PeFkxxpgZ1WOKExrbkzm+ai3
okh2WNOfOrDaxt3IzcPfQw4P+5Ha9DY+To4He17OGTgw/Pnen1RZ/vEiKcxlyv1B
gYD4nHT3JpyqC15DFgmThcstFIj+FNq+aKBsrFQkeY2gN6M4irGiiASP5bwBNrmD
wqwD/goCxxJ4HfnKrel7/FacGdkrvQjKFpEivNarazK+/rN8ZZUU
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org