Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mRzqODYFTtvloAfCUXMLL3cfRGY.roa
File: mRzqODYFTtvloAfCUXMLL3cfRGY.roa (raw, json)
Hash identifier: BTaVgM9wQs1O/lblO7i1H89DjxV3ujNJ9WnQy0oRRNw=
Subject key identifier: 99:1C:EA:38:36:05:4E:DB:E5:A0:07:C2:51:73:0B:2F:77:1F:44:66
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 087D
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mRzqODYFTtvloAfCUXMLL3cfRGY.roa
Signing time: Tue 13 Oct 2020 05:41:32 +0000
ROA not before: Tue 13 Oct 2020 05:41:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131628
IP address blocks: 175.99.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Oct 13 05:41:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=991CEA3836054EDBE5A007C251730B2F771F4466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:a4:26:4b:65:e7:d4:7f:6c:35:02:5e:95:
61:1a:e9:14:bc:6f:c5:bb:f8:15:e4:59:13:af:08:
68:74:3c:29:b9:67:d0:55:92:73:46:75:e1:70:6f:
02:ae:b4:ee:52:4f:a4:13:93:c4:08:f9:04:31:8f:
1f:44:d5:14:11:aa:6d:83:1a:57:7e:5d:be:4e:09:
72:6a:e1:83:84:5a:e6:b2:6e:7d:9c:4a:4a:57:ec:
35:6f:23:9d:c3:01:41:ae:e4:a5:29:3a:18:88:ef:
d2:2d:5a:96:8b:bd:ef:12:72:71:19:4d:ac:b8:76:
57:fd:78:ee:9e:17:d5:02:d1:d1:9e:ee:24:e9:6d:
99:0d:5c:93:3f:f4:71:d1:97:8f:51:81:fc:5e:c9:
aa:49:1f:d4:bb:d5:ed:b8:af:5b:54:e9:59:73:da:
b9:07:14:f3:08:78:27:25:af:52:c7:95:2c:3e:18:
2d:6b:10:c8:2c:ee:04:bf:76:85:94:bd:1c:58:ef:
6e:ae:49:51:07:a2:2f:85:9c:ff:b4:4e:a4:62:5e:
7a:b3:30:b4:dd:30:bc:4a:58:d3:b3:7a:67:5a:8b:
3a:38:8e:b2:88:46:86:e8:0f:ac:d2:ec:ae:c1:6e:
2f:d0:fb:5f:9f:0c:fd:04:2c:aa:10:f3:17:a2:8a:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1C:EA:38:36:05:4E:DB:E5:A0:07:C2:51:73:0B:2F:77:1F:44:66
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mRzqODYFTtvloAfCUXMLL3cfRGY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.225.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f4:a8:7a:06:da:03:b5:cf:82:ab:87:a5:f6:14:4d:8d:71:
12:63:f6:be:5c:22:bf:b5:8f:ab:f4:8a:b5:8b:85:c8:78:a3:
96:6a:3b:2c:bd:cf:f8:9e:b5:9e:00:0d:59:d3:b2:1c:2d:c4:
c5:b4:fb:35:da:16:b0:c9:fb:3b:f3:64:28:0d:d5:fe:22:ca:
7c:b1:7f:00:a9:fb:0e:87:12:f7:15:56:f4:fa:2c:eb:e1:56:
7c:37:54:34:8e:50:be:f7:08:e1:33:c8:13:5b:78:3a:0a:b9:
8e:45:34:92:6f:62:9d:03:bf:1b:c7:ee:25:d5:73:f2:ea:3e:
d9:34:9b:18:86:57:e9:80:41:89:df:aa:c6:c4:cd:19:30:c8:
41:d4:6b:74:80:20:b0:cc:46:fb:e6:47:8c:77:08:a1:24:b7:
00:81:31:90:95:79:3b:15:9b:3a:8c:35:01:8d:21:2c:96:64:
3b:ed:08:cd:59:67:e1:69:c7:38:91:85:31:33:36:a9:6b:6b:
13:8a:3c:24:89:5a:cd:83:f8:f6:94:2c:99:94:d5:5b:12:1c:
64:ed:75:d4:ce:53:28:a5:e6:22:eb:65:17:e5:7a:26:e3:4d:
14:3e:f3:b5:26:b6:da:c7:d1:37:b5:af:60:c2:c5:0e:96:ba:
fb:69:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org