Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mNJ68VJY9B2FQ1_un57KBRXnIzY.roa
File: mNJ68VJY9B2FQ1_un57KBRXnIzY.roa (raw, json)
Hash identifier: tGVIMCvwlmD1wkIiS+zoUdByWPhWqCLX8MDC30doP6k=
Subject key identifier: 98:D2:7A:F1:52:58:F4:1D:85:43:5F:EE:9F:9E:CA:05:15:E7:23:36
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0CC6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mNJ68VJY9B2FQ1_un57KBRXnIzY.roa
Signing time: Wed 29 Sep 2021 02:50:15 +0000
ROA not before: Wed 29 Sep 2021 02:50:15 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 60.199.193.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3270 (0xcc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:15 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=98D27AF15258F41D85435FEE9F9ECA0515E72336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:23:a5:3a:f5:7c:56:12:c3:95:97:05:b3:
49:c5:a6:31:1d:1d:13:ec:49:4e:a3:ae:07:eb:57:
d3:d5:a7:58:bd:d9:ec:61:f8:71:50:a4:07:17:0f:
a0:fd:df:66:de:23:f0:06:07:6d:fc:65:ab:ac:8e:
03:b6:97:81:b6:ff:7d:3a:de:61:5f:38:1e:ac:be:
db:66:e0:71:d1:25:d0:aa:25:f2:96:f6:b1:b8:ea:
20:b7:de:27:09:e3:2b:8b:9d:97:9c:e4:5b:58:60:
ae:87:64:dc:f0:f8:47:08:5a:96:f7:71:e5:31:49:
04:42:56:75:4a:bf:d2:c2:4e:fc:e2:8d:c9:7a:82:
68:85:ac:a5:12:d5:2b:6f:d5:80:c2:f5:e8:5e:da:
20:b5:06:1e:7a:af:cb:14:38:8f:7f:19:82:6a:41:
1a:92:7f:ab:8d:bf:6e:8c:70:68:37:05:c2:8b:9e:
d5:47:59:a4:37:89:65:49:b1:53:b3:d5:5e:12:b2:
6b:23:d8:77:09:07:57:20:a7:ce:60:6d:3c:78:40:
25:40:b8:b7:22:e0:d6:d4:3b:33:3d:11:fd:97:29:
2e:48:65:ea:cb:80:53:eb:2d:45:6e:0c:d5:e8:51:
9a:12:b5:b5:30:8f:83:1a:98:62:e5:01:d9:f6:13:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:7A:F1:52:58:F4:1D:85:43:5F:EE:9F:9E:CA:05:15:E7:23:36
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mNJ68VJY9B2FQ1_un57KBRXnIzY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.193.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d6:77:ba:6b:2d:81:1b:f0:e8:4f:29:cf:e3:61:1d:66:e1:
41:be:9a:8a:a7:c2:90:44:53:09:4d:23:67:f3:2b:d5:17:93:
95:65:76:c4:2d:80:15:c3:97:34:62:1d:35:5b:5a:91:d8:f3:
e5:a5:6e:8e:65:a5:21:d7:9d:a4:d2:89:27:20:d8:c7:0b:9a:
2a:b6:ab:bd:f4:e3:90:83:eb:f0:23:f2:eb:75:1f:d5:16:52:
f1:3a:89:fc:9b:1d:32:65:4d:16:fd:e0:f3:9e:e0:d1:e7:14:
f2:3c:09:4b:4b:47:eb:8c:bb:49:1a:67:fb:9e:00:9f:7c:5a:
70:6f:4b:50:3e:45:da:d4:bf:cd:12:8c:1a:f7:1d:82:2a:4d:
c7:7e:ef:72:36:22:51:20:63:9a:de:6c:92:0f:e9:80:e2:9c:
92:08:73:5e:8b:64:e9:26:00:fe:de:0d:2c:45:1c:27:e6:82:
75:7a:67:6e:07:1a:96:74:96:87:85:04:94:3c:a7:cc:8c:8e:
78:72:51:f3:b4:33:e2:fb:c9:b0:bf:33:aa:1b:f2:d1:6d:73:
e0:6a:59:c0:61:02:da:fe:f9:ca:48:20:85:98:76:ac:c1:46:
9c:8b:58:e6:0b:b0:b1:4c:6f:bf:ec:c6:94:f6:d4:4c:03:e5:
e4:01:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:32 2025 by rpki-client