Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/m4qA0zwnmLxTu46cgENQBgqTAjQ.roa
File: m4qA0zwnmLxTu46cgENQBgqTAjQ.roa (raw, json)
Hash identifier: WdyR4gE+Cqk1y965pT/svaPawM8SWofmWwePLf5cg/0=
Subject key identifier: 9B:8A:80:D3:3C:27:98:BC:53:BB:8E:9C:80:43:50:06:0A:93:02:34
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B06
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/m4qA0zwnmLxTu46cgENQBgqTAjQ.roa
Signing time: Sun 07 Feb 2021 13:04:38 +0000
ROA not before: Sun 07 Feb 2021 13:04:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131628
IP address blocks: 175.99.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2822 (0xb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:04:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9B8A80D33C2798BC53BB8E9C804350060A930234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:61:b6:00:08:82:ce:47:05:26:fe:33:cd:
ae:d8:6d:0b:e8:9b:5d:6d:d5:1b:25:fd:9c:40:24:
a0:3f:ad:b9:8a:74:29:ef:f2:8f:c8:55:62:e9:d1:
c7:1c:38:6b:9f:54:a9:49:a6:a7:22:69:32:0b:d3:
ac:6e:a1:86:e6:7b:7a:61:f2:21:bc:ef:7c:56:1d:
58:18:b8:30:37:c3:43:42:d5:1c:de:06:99:17:04:
60:24:af:b0:ab:4a:e8:d1:b8:6a:a0:97:a4:91:42:
ae:9d:c3:83:03:ac:42:c3:a9:d6:63:0e:b3:64:6f:
c4:3c:e8:a5:0a:10:f5:f0:bd:7c:09:11:72:4f:62:
c2:b8:2a:de:50:e0:a3:c4:6b:14:6d:61:a8:ab:a2:
bb:ab:c9:1f:74:7d:40:3a:54:2d:ff:7f:39:cf:32:
4c:b6:c9:f0:18:56:21:c4:2d:23:86:ff:8d:53:76:
69:5c:09:46:6d:3e:74:65:18:07:b8:c2:73:50:b8:
7c:88:fc:6a:0a:7e:17:c9:af:fa:8b:26:a8:7e:87:
c6:f1:af:e7:86:b0:b1:03:9c:7c:14:0d:34:19:4a:
a8:55:a9:cf:9a:00:dd:be:f3:f9:a3:f8:28:1f:72:
95:7d:c6:c2:ea:f2:d5:fe:82:a6:56:38:ae:63:1e:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8A:80:D3:3C:27:98:BC:53:BB:8E:9C:80:43:50:06:0A:93:02:34
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/m4qA0zwnmLxTu46cgENQBgqTAjQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:91:76:0e:92:2b:b9:49:91:10:8d:0c:8d:5b:b4:13:31:42:
d9:84:38:a9:03:be:62:e1:77:14:50:4c:cd:10:63:63:18:a0:
82:40:47:af:a1:98:95:22:e0:8b:78:0f:0c:f1:b9:c5:2b:4c:
43:d3:fe:0f:8b:64:f9:d8:05:02:d0:aa:c7:9e:1d:c7:9c:25:
f2:54:a3:ba:c3:e5:e1:6a:38:bb:30:9e:33:0b:82:14:e3:9a:
d0:70:ae:82:4e:8d:df:c6:13:f7:2c:14:51:30:00:57:00:0e:
a8:b3:93:2b:b1:03:0d:e9:31:10:56:eb:36:e8:0e:96:c5:ba:
fa:46:26:d0:62:7f:66:c8:03:3d:fe:de:1c:fd:c4:15:38:f4:
fd:93:59:6d:5a:68:da:8d:e0:1b:eb:e8:f1:6d:c5:a2:82:18:
e4:9d:58:a8:0d:b6:1a:e9:91:d7:97:2a:b9:b2:c3:81:8a:2b:
00:93:4e:63:c4:27:b1:49:d0:a6:b5:6e:2d:b9:09:d9:04:60:
1f:37:e6:53:bb:05:8c:84:52:e9:6f:06:7c:32:a8:2a:8e:7f:
54:64:db:20:69:f0:43:12:a7:6e:14:4b:e6:85:57:57:a6:8a:
32:2c:4a:91:c2:dd:18:d4:2d:75:c8:d4:8e:17:a1:19:c4:f9:
a1:6a:97:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org