Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n7QaYUHYwqiLXCZjn-_4BEbLqkA.roa
File: n7QaYUHYwqiLXCZjn-_4BEbLqkA.roa (raw, json)
Hash identifier: nytuDgMSzJwVpdy608kCjECoBRzyb0Lp+XjbnFLhDWE=
Subject key identifier: 9F:B4:1A:61:41:D8:C2:A8:8B:5C:26:63:9F:EF:F8:04:46:CB:AA:40
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C69
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n7QaYUHYwqiLXCZjn-_4BEbLqkA.roa
Signing time: Wed 29 Sep 2021 02:49:48 +0000
ROA not before: Wed 29 Sep 2021 02:49:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.243.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3177 (0xc69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9FB41A6141D8C2A88B5C26639FEFF80446CBAA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:99:ef:4e:1b:f7:c0:28:b9:07:fb:78:18:
58:92:49:e2:35:1c:1b:60:12:00:51:e0:c6:5e:1d:
d9:fe:d8:96:d7:23:5c:2a:00:eb:40:5a:a6:74:c8:
47:25:e4:1c:d5:7c:df:2e:60:1d:0f:59:7e:4c:8d:
d0:47:32:42:0e:3f:3c:3a:87:45:26:21:d7:76:59:
51:87:f3:aa:5a:c5:08:e5:c7:73:df:bb:3d:47:e7:
58:58:24:ac:30:2c:2d:21:0c:bb:8a:f4:12:7a:b8:
c3:a3:52:8d:4d:7c:61:80:39:66:24:ae:76:69:3e:
f9:a8:4e:16:c4:f0:b2:59:68:65:70:0a:50:5d:10:
81:78:ff:6f:2f:5b:f1:70:13:8f:4a:cd:71:b8:b2:
1a:a3:eb:a5:d4:64:e6:15:5b:a1:7a:1f:89:57:8f:
01:4f:36:5f:06:98:29:9c:3d:a0:5d:63:db:0a:5e:
30:93:3d:d1:1e:83:de:43:62:a3:dc:5b:69:0c:df:
a7:c0:48:a2:7d:dc:ac:8c:43:63:25:13:7b:2a:47:
65:c4:d0:0a:b2:1d:a7:41:ba:96:1c:cc:0d:5e:1c:
bb:49:40:4e:68:ea:47:6e:eb:e0:b3:e1:70:fe:1b:
f0:3a:af:9a:7e:b7:c2:65:32:e8:5a:5f:e8:e7:77:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:1A:61:41:D8:C2:A8:8B:5C:26:63:9F:EF:F8:04:46:CB:AA:40
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n7QaYUHYwqiLXCZjn-_4BEbLqkA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.243.96.0/19
Signature Algorithm: sha256WithRSAEncryption
99:16:84:dc:2e:ad:fe:12:34:af:34:2a:58:d4:a7:7f:22:78:
72:a4:3e:5f:74:13:bc:23:39:28:ac:99:e1:a3:d5:fa:ac:e2:
ca:3e:6e:d4:b9:56:d6:ab:db:f2:67:55:5b:55:61:87:77:ff:
47:a1:7d:60:48:11:23:e0:91:81:54:44:af:90:70:28:2d:52:
10:4c:6c:61:1e:8b:33:d4:e5:db:eb:1c:e8:62:4f:a8:b1:ba:
b1:8e:09:81:ba:9c:66:5b:7a:48:69:d2:f0:88:b8:f2:9f:d8:
95:44:2e:1b:21:b4:20:bc:4b:25:48:37:dc:c2:1d:c5:d5:49:
cd:c8:e0:14:ed:b1:f5:9d:dd:55:8c:5d:5c:00:45:37:83:00:
16:26:52:af:5e:a5:f4:68:2f:56:5c:fa:7a:ce:21:31:28:6e:
6c:b1:81:8a:36:9a:53:2e:c0:e2:1f:2a:28:f5:45:50:65:0d:
02:0a:59:24:f7:51:f8:fb:3d:f1:16:46:16:fd:29:1f:a3:0c:
1e:a6:ec:b8:f2:5b:33:e8:a3:4d:f9:ae:72:09:d6:f6:52:3c:
fe:a1:36:f2:28:3e:b4:a9:1e:4f:fe:42:e0:c3:98:c7:d8:f1:
b8:b9:32:9d:f3:6e:9c:f3:da:ba:db:54:50:ef:3b:c9:f0:43:
21:c1:71:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org