Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gYg5cJEUy4sZLymB_UX0x4H_ar0.roa
File: gYg5cJEUy4sZLymB_UX0x4H_ar0.roa (raw, json)
Hash identifier: RWReKI32NsSEhHSJVUd6V/v9dD3vVXcmc0gqtp0xkdc=
Subject key identifier: 81:88:39:70:91:14:CB:8B:19:2F:29:81:FD:45:F4:C7:81:FF:6A:BD
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F83
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gYg5cJEUy4sZLymB_UX0x4H_ar0.roa
Signing time: Fri 01 Sep 2023 09:36:56 +0000
ROA not before: Fri 01 Sep 2023 09:36:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.67.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3971 (0xf83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=818839709114CB8B192F2981FD45F4C781FF6ABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:90:a4:ec:93:5b:8d:01:78:e9:87:97:3e:
37:ea:64:6e:d4:1e:57:80:21:fb:e7:73:fc:91:6b:
52:8b:88:66:8c:a4:1e:40:18:4b:82:64:42:c3:41:
76:09:51:c3:88:2c:f3:78:02:0d:42:c8:05:70:5e:
60:e7:24:fe:4d:e6:e1:0a:45:3c:b6:5c:33:ed:e8:
59:29:84:03:fb:54:5a:6e:5f:d4:34:11:77:b6:11:
8f:6b:15:72:09:9b:3f:6d:2a:3d:d2:b2:bb:10:66:
b6:af:e5:56:1b:48:cd:9f:62:b5:a0:e6:5c:74:83:
fd:af:15:e3:11:c4:e3:bb:ba:66:46:3b:a3:0b:8e:
d7:f1:51:fd:b0:0f:ca:72:b1:c7:29:59:db:4d:74:
9d:bb:51:9a:a8:07:6d:66:b1:34:45:f8:6a:6c:5a:
3a:2a:28:d0:07:c4:f1:ec:6f:aa:5c:dd:45:08:e3:
26:f0:03:a5:a6:14:5e:a7:fa:6e:4e:b4:05:17:1a:
1d:15:16:b5:28:27:d1:40:1a:aa:05:d6:5e:f2:d2:
2b:ef:2c:0d:3c:47:10:48:e0:dd:dc:24:46:8e:85:
e6:38:93:11:e9:ac:26:7a:c8:dc:eb:df:97:f6:87:
01:71:d3:fc:4d:db:2d:82:7e:12:42:6e:fc:95:25:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:88:39:70:91:14:CB:8B:19:2F:29:81:FD:45:F4:C7:81:FF:6A:BD
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gYg5cJEUy4sZLymB_UX0x4H_ar0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:09:57:b5:1c:23:64:db:04:0f:90:bc:ee:30:f0:bb:58:d9:
9c:ec:b4:80:09:c7:8c:65:2a:d6:fa:c5:d0:cc:a0:18:d2:09:
b1:f0:d4:1a:f6:a9:f4:17:d7:b7:34:80:1b:50:b7:86:18:d2:
7b:a9:a6:4f:82:51:8c:1c:c5:67:45:00:42:55:f4:e1:ae:b4:
e9:00:99:ae:2d:04:49:46:41:53:24:c0:ed:aa:1a:b6:01:ce:
b0:cf:6f:82:b5:68:5c:ba:11:f3:05:78:c1:33:5f:94:96:dc:
20:ae:2f:c5:99:22:e7:26:43:a2:f4:42:9f:0c:35:8f:f6:78:
27:20:76:53:f3:06:57:99:ed:ed:64:d1:64:b8:ac:78:b3:3d:
51:07:06:7b:10:0e:ae:73:2a:fe:80:65:ef:d1:fc:fb:7d:ef:
fa:f3:59:82:b8:3d:12:56:61:cc:ad:2a:4b:1e:fe:df:54:86:
ac:c2:31:09:c9:fb:f3:74:9a:1b:ac:ea:81:a0:8f:b0:1f:dc:
40:f2:6e:38:e9:cf:b8:a7:cb:44:75:ff:84:01:96:79:3c:75:
95:3f:05:21:73:d9:9b:05:5b:6a:08:6d:4b:7d:c1:47:06:56:
d0:09:61:18:a4:83:80:2d:1f:8f:fd:08:60:52:bb:1d:e8:7f:
00:2e:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:10 2025 by rpki-client