Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lrm7jFHzunBm6KA7UwI2qYq10YE.roa
File: lrm7jFHzunBm6KA7UwI2qYq10YE.roa (raw, json)
Hash identifier: eFK1D9Grqr+R9wDRyGKlLjFxR/l+yJkofLGhXhs15C8=
Subject key identifier: 96:B9:BB:8C:51:F3:BA:70:66:E8:A0:3B:53:02:36:A9:8A:B5:D1:81
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lrm7jFHzunBm6KA7UwI2qYq10YE.roa
Signing time: Thu 15 Sep 2022 02:47:33 +0000
ROA not before: Thu 15 Sep 2022 02:47:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 49.216.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=96B9BB8C51F3BA7066E8A03B530236A98AB5D181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:6d:ea:2d:4c:dc:d9:8f:e0:fe:45:2b:74:
17:39:39:73:69:a8:75:82:04:9a:7b:1b:60:f9:08:
d9:4f:5e:6b:a3:39:d8:5b:fb:43:50:39:cb:ff:3e:
48:11:93:d4:27:45:95:39:9d:2d:ec:8d:c7:68:06:
f7:98:5c:7d:88:91:7b:9c:a0:8a:65:df:93:2d:e8:
d3:a5:29:a3:a7:13:ab:0f:de:a1:d7:89:99:ae:31:
2a:d1:f2:9b:42:9b:1c:92:28:80:19:a4:2a:ce:ff:
46:04:99:3e:16:b3:9b:dd:88:24:03:4c:22:7b:f5:
a5:e0:8d:f2:e9:d2:8e:2a:a8:ed:a2:a2:62:6b:25:
3a:28:bd:15:3a:ec:d2:f7:0d:44:8d:90:a6:74:8d:
b3:73:06:a6:c6:d3:a9:42:7c:f5:ab:a5:a6:8b:76:
7d:32:aa:44:88:73:f4:4f:95:c8:10:ca:ac:27:e8:
f2:b8:ef:03:52:4d:81:c7:26:8e:94:e0:54:df:cf:
a1:3d:0f:f1:df:fb:52:ee:d9:87:d5:8e:d1:b0:54:
9c:18:8d:84:ac:73:56:57:89:a6:b1:df:24:a7:16:
bd:e5:b9:96:c2:f1:6b:a5:c1:90:de:bf:23:9f:dd:
9b:3b:07:a6:9f:03:1b:2d:a3:f9:90:ab:70:c8:e5:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B9:BB:8C:51:F3:BA:70:66:E8:A0:3B:53:02:36:A9:8A:B5:D1:81
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lrm7jFHzunBm6KA7UwI2qYq10YE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
32:ec:49:6f:eb:65:15:56:84:22:ef:60:d6:4f:b3:3e:9b:08:
ac:39:35:d5:1c:c8:29:78:df:05:bb:33:e0:10:5e:97:bb:77:
10:ec:e4:a4:92:be:38:31:54:b8:80:4a:a4:94:37:36:90:e7:
bc:5c:7f:d2:21:bc:d1:da:f5:88:7c:39:c1:8a:72:4f:c2:e1:
b4:d5:bc:32:d9:32:9d:9a:da:bd:cb:7a:fd:80:5f:c4:e6:38:
0b:7d:0b:d2:6b:bb:a2:e7:a3:6d:64:f2:bc:3d:17:89:7d:01:
3a:fe:5f:10:a1:30:36:7a:57:1c:0b:36:16:2e:a9:ad:40:4b:
06:b9:98:e6:7f:13:db:5b:28:9c:b3:1b:4f:35:df:52:db:30:
4d:1c:f1:7c:a6:35:c0:e1:24:2b:28:2b:6c:52:fe:e8:df:c3:
7d:5f:d4:26:c0:d2:e6:5a:af:4d:a6:dd:cf:8f:ae:74:a8:9c:
0d:09:65:be:89:e1:31:bd:1e:30:9f:82:03:2b:62:71:85:f0:
f8:da:98:50:07:74:e0:3f:30:61:e3:ed:34:05:30:54:80:91:
49:da:b4:4e:58:c5:56:6e:82:76:c7:e6:12:dc:53:5d:48:79:
08:fc:f1:49:73:02:7a:11:42:2a:f6:4b:09:b9:a9:ef:02:b6:
51:75:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org