Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/m1mArsGPJBfgsR5gMuQeVrpyCSA.roa
File: m1mArsGPJBfgsR5gMuQeVrpyCSA.roa (raw, json)
Hash identifier: T5BX9qpkb4eNktFvL/30CsMRmUz4PodWfY5m/VxJRiU=
Subject key identifier: 9B:59:80:AE:C1:8F:24:17:E0:B1:1E:60:32:E4:1E:56:BA:72:09:20
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0CC4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/m1mArsGPJBfgsR5gMuQeVrpyCSA.roa
Signing time: Wed 29 Sep 2021 02:50:14 +0000
ROA not before: Wed 29 Sep 2021 02:50:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 60.199.224.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3268 (0xcc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9B5980AEC18F2417E0B11E6032E41E56BA720920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:82:a6:42:e2:e5:24:a5:1f:9e:e3:34:46:
e2:f3:81:11:99:80:72:05:c1:f2:98:71:27:19:7c:
03:95:32:5e:8e:6d:26:a6:0e:88:85:1f:b2:ec:28:
81:c2:73:d8:65:74:e7:71:21:0a:bf:b1:76:be:0d:
d6:e1:78:44:ad:f3:a0:11:8f:4a:b1:14:f6:e8:9d:
f4:99:45:1f:4b:47:ee:e3:8e:40:7c:67:d6:fd:a1:
67:b5:75:ae:22:df:ab:41:16:e5:3c:fe:dd:49:ec:
12:c1:6c:10:99:2a:57:3f:ba:66:f2:20:16:55:5f:
1d:e0:bc:0f:f6:c6:bb:14:84:6c:e2:13:2a:59:94:
81:e7:53:23:57:0f:d0:32:26:f5:cb:52:7f:fb:73:
7f:7f:53:c2:5c:7b:36:8f:d2:b4:43:1d:7b:83:a6:
91:4b:65:24:eb:89:70:bd:34:a0:ef:c3:12:05:a4:
ec:99:75:9d:61:c4:aa:f2:b8:11:fc:9e:33:7b:81:
dd:94:d5:af:71:f1:7b:72:e1:83:52:ae:5c:46:46:
c8:dd:8a:da:95:ac:ac:29:ae:60:8a:78:60:02:c8:
44:f7:63:54:c4:c2:95:44:c8:37:7b:7b:48:38:6f:
9f:34:da:57:ab:f9:2e:8d:97:f2:18:fa:d4:0d:23:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:80:AE:C1:8F:24:17:E0:B1:1E:60:32:E4:1E:56:BA:72:09:20
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/m1mArsGPJBfgsR5gMuQeVrpyCSA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0c:69:25:1e:3d:1b:3f:22:33:75:b2:80:f1:7b:43:9f:73:
4a:a3:88:dc:31:20:71:27:99:93:ca:cf:64:91:6a:0d:f4:54:
4e:8c:df:fe:fd:86:b9:06:a7:45:aa:b8:b4:50:88:0d:45:8d:
0c:83:c3:1c:64:72:b4:e5:56:77:c3:a5:a7:be:ea:ae:93:02:
a8:e2:80:a8:4a:19:48:b3:11:45:97:83:5c:bf:b3:ef:cc:6e:
4f:05:bb:41:b4:14:cb:52:3c:bd:7f:d8:20:53:3a:af:bd:04:
37:cb:b5:b1:d7:59:36:5c:92:40:56:64:bd:f8:66:ed:8e:6a:
3c:b6:52:56:5b:c9:c7:89:96:89:1b:ed:8c:85:b8:33:d9:f5:
3b:67:ba:71:65:43:bc:76:95:92:73:f3:71:65:81:02:d1:ce:
c0:4d:bc:88:c8:f2:bf:1f:37:09:7b:48:01:fc:e8:8b:ef:f8:
20:9f:43:42:cb:bc:b3:46:b5:41:b9:79:4f:6a:47:4b:8d:bc:
72:28:1d:c6:db:06:a0:6a:9b:3c:f1:e9:53:2f:6a:b3:5a:6b:
4d:27:e1:08:ed:78:0e:90:1b:1f:51:8a:6f:c3:2d:0f:ca:9a:
33:87:9f:ee:f8:e9:d7:c5:37:9d:4d:8d:e4:6c:a7:32:9a:72:
8f:c2:5b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org