Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ifss659KIRhwMIjlj-AcPSyqXxE.roa
File: ifss659KIRhwMIjlj-AcPSyqXxE.roa (raw, json)
Hash identifier: H+j5NRjh3qGwxTr1V6j3FBkDoLq+8hV7EBeZB7cF3Iw=
Subject key identifier: 89:FB:2C:EB:9F:4A:21:18:70:30:88:E5:8F:E0:1C:3D:2C:AA:5F:11
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B34
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ifss659KIRhwMIjlj-AcPSyqXxE.roa
Signing time: Sun 07 Feb 2021 13:10:48 +0000
ROA not before: Sun 07 Feb 2021 13:10:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.43.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:10:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=89FB2CEB9F4A2118703088E58FE01C3D2CAA5F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:5f:32:4d:a4:1c:20:4f:72:87:81:9b:b9:
e7:7b:68:d5:5b:5a:71:a6:25:bd:03:0b:39:a3:7e:
6c:39:46:41:b9:62:4f:45:7a:06:2e:9b:8f:2e:f6:
21:7f:61:05:cb:5f:4e:c5:8e:48:95:30:25:a8:af:
0f:77:69:4c:fc:e7:04:27:f2:0d:47:a8:fe:f9:a5:
60:b2:7a:aa:bb:31:24:1e:6a:18:ec:0d:75:81:e0:
c4:cb:16:9a:74:24:29:42:6c:53:a7:16:cd:48:d0:
82:13:44:cd:a6:b3:20:36:d7:de:85:cd:18:c2:8f:
65:a9:9f:11:db:cf:cb:81:2c:90:85:09:91:fd:24:
1a:4d:e7:ed:2c:86:79:f3:4d:d2:be:f0:1f:75:ff:
0c:8b:7c:ef:1e:d7:d9:0d:f3:a9:94:d5:5b:24:e4:
12:46:e1:a9:3d:0a:db:4b:29:aa:7e:48:33:24:43:
d0:b1:42:62:af:ad:3b:a2:3a:8e:0c:1c:76:8c:20:
1c:c4:52:c8:b1:42:8c:fa:0f:0b:6a:9c:14:85:1d:
ba:71:75:a5:c1:56:77:b2:c5:0a:3f:e2:36:8b:e7:
e9:12:e1:2e:cf:5e:57:4d:84:16:73:4f:4e:5f:c7:
4a:1a:e3:b2:3b:17:69:20:97:f0:2e:a1:2c:59:e9:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:2C:EB:9F:4A:21:18:70:30:88:E5:8F:E0:1C:3D:2C:AA:5F:11
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ifss659KIRhwMIjlj-AcPSyqXxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.43.0/24
Signature Algorithm: sha256WithRSAEncryption
58:08:0c:06:fd:51:0a:03:30:a3:7f:77:fd:93:df:92:ab:21:
11:48:12:2a:73:f9:c0:73:9e:0b:30:e9:5d:a5:4e:d5:24:ab:
1d:97:39:e1:fa:a1:10:53:38:83:5e:6d:f2:9e:bf:a7:91:a5:
0d:7b:dd:51:f5:45:12:b5:95:b3:18:3d:59:1c:63:70:38:83:
d0:ba:fa:ba:c3:89:7c:f7:6a:9d:09:7f:86:c4:f6:de:e2:8f:
8a:c2:c5:cc:e4:95:25:e9:b1:28:a3:d7:77:61:ff:1c:bb:51:
06:90:08:b2:e0:b4:22:7b:3d:f7:f1:84:ef:ed:7b:4b:8a:6a:
eb:4b:1c:7c:c8:3b:75:a4:38:91:a2:ad:a8:b4:ca:8f:c9:0a:
63:d7:18:99:29:b4:c8:0a:e2:1c:9f:71:b1:6a:eb:0f:d8:91:
42:ab:98:31:f9:2a:06:04:32:9b:7f:ab:be:10:e9:d6:a7:83:
86:8b:a7:c6:43:16:eb:46:73:00:66:3b:85:4f:39:e7:86:d2:
74:23:64:32:d1:0c:19:95:84:78:d6:b0:00:57:8f:88:81:44:
36:7b:4a:8b:e2:a7:9c:f8:a5:32:a1:ef:4c:1a:00:a5:19:9e:
7e:c7:c6:df:3c:7e:fb:5e:06:8f:bc:04:07:06:29:ae:fa:0c:
0a:14:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org