Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hFHIbOneaUWnL2_oz-t3ZfIhIW4.roa
File: hFHIbOneaUWnL2_oz-t3ZfIhIW4.roa (raw, json)
Hash identifier: hyvfKMUzCZfMybDPTOOz3FMKsihxHoACteoH+iuUP1o=
Subject key identifier: 84:51:C8:6C:E9:DE:69:45:A7:2F:6F:E8:CF:EB:77:65:F2:21:21:6E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B00
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hFHIbOneaUWnL2_oz-t3ZfIhIW4.roa
Signing time: Sun 07 Feb 2021 13:04:20 +0000
ROA not before: Sun 07 Feb 2021 13:04:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131628
IP address blocks: 175.99.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2816 (0xb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:04:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8451C86CE9DE6945A72F6FE8CFEB7765F221216E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:58:9c:cf:bd:e9:43:49:ff:7d:22:fd:79:
fb:a7:61:91:e7:02:a1:0c:eb:82:9a:e0:4e:b4:a2:
17:86:3e:de:7e:73:aa:24:f2:9e:3e:33:bd:a6:39:
2f:dd:02:03:5e:d0:fc:fd:58:8d:d8:52:9a:ba:53:
1b:bc:f1:95:26:6b:81:f5:3e:bc:c3:b7:3c:34:ee:
9e:43:95:71:02:93:82:26:bd:c1:a0:7e:d7:8a:4f:
d6:d2:72:c9:32:df:dd:7a:44:ee:a1:0e:7b:28:08:
d8:5c:9b:58:5d:01:12:c1:a9:c3:73:2e:1c:fb:68:
6b:dc:d5:7e:ff:e5:ba:a8:58:c1:f9:98:e4:13:f4:
85:6a:fc:c6:f6:25:ba:5f:94:28:26:a2:36:f6:08:
aa:2b:20:f8:12:41:b5:73:8b:c5:ff:b2:40:e0:07:
99:03:9b:d4:a3:77:f1:b3:6d:54:64:d6:e5:ae:e5:
b6:9d:27:15:84:0b:a6:82:4a:c0:56:c0:2c:9b:e3:
c0:01:89:3b:9c:15:f0:46:67:73:0b:58:a8:22:6f:
66:eb:a9:66:3f:4b:94:88:ac:1f:3a:df:88:9e:7b:
01:a0:3a:1b:3f:6a:d4:10:bf:a1:d8:98:eb:5a:05:
66:99:b5:c4:a1:40:8c:73:60:77:1d:08:5d:d0:dc:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:C8:6C:E9:DE:69:45:A7:2F:6F:E8:CF:EB:77:65:F2:21:21:6E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hFHIbOneaUWnL2_oz-t3ZfIhIW4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.0.0/19
Signature Algorithm: sha256WithRSAEncryption
69:2d:d7:1f:aa:28:38:48:02:55:81:36:1d:12:87:1b:3f:c6:
ea:26:4a:43:84:3e:d1:95:63:c2:5b:48:ce:b4:41:3b:e3:34:
4f:e9:a3:cc:bd:04:66:d6:8a:a3:a9:b2:a3:9b:8a:5e:76:3b:
65:e6:bd:95:6c:dc:44:dd:be:41:29:94:63:49:a8:2c:16:e8:
06:3b:07:56:b9:ed:36:8c:b5:54:2e:38:e5:10:bd:9f:35:6c:
c1:16:2d:5d:60:3b:62:dd:b0:a9:a0:f1:ad:23:0d:f3:14:3b:
c8:d3:87:2a:0b:8e:fc:cb:5f:fb:00:98:52:f4:df:92:9f:4b:
71:0e:f1:61:a1:04:96:da:13:34:07:02:5b:83:61:8c:60:38:
39:11:97:6a:96:6f:7c:3b:77:a4:74:89:ae:c7:42:ee:e8:16:
d4:de:12:c5:ef:43:8d:6b:07:4e:80:4f:8f:59:c4:13:56:c3:
2a:9b:cd:2d:cc:58:b3:d0:39:30:0e:81:19:45:66:00:02:55:
59:88:d0:29:24:3f:ae:4a:b1:68:dd:d1:07:fc:35:44:a8:ab:
64:39:aa:d0:60:64:79:97:4f:6e:58:12:f2:84:52:a2:cd:a5:
d1:0f:18:98:92:ec:b7:43:c3:7a:28:be:5a:79:b5:8c:0a:3d:
03:d7:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org