Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n9-Vny-QYMBXcKeVHw2bsAr4j8k.roa
File: n9-Vny-QYMBXcKeVHw2bsAr4j8k.roa (raw, json)
Hash identifier: ikNlYa5C9TSgw9FxuVSPC1RJfY/kaEIBHnnz9TiL33w=
Subject key identifier: 9F:DF:95:9F:2F:90:60:C0:57:70:A7:95:1F:0D:9B:B0:0A:F8:8F:C9
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C58
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n9-Vny-QYMBXcKeVHw2bsAr4j8k.roa
Signing time: Wed 29 Sep 2021 02:49:42 +0000
ROA not before: Wed 29 Sep 2021 02:49:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 203.77.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3160 (0xc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9FDF959F2F9060C05770A7951F0D9BB00AF88FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:15:a4:b9:b0:c6:87:f3:3a:39:d0:55:00:
25:11:4e:23:6a:61:94:bc:87:72:30:08:aa:57:7d:
ef:82:87:7e:cb:16:7e:f8:f0:b7:7a:ac:54:72:ef:
c1:21:9b:b7:33:a4:77:05:ba:7a:bb:e1:91:6e:a3:
f1:8a:e7:66:a5:92:83:c9:b0:b0:67:e5:00:78:ea:
c5:44:fc:ce:2b:f1:ec:d7:fd:9a:46:8c:29:72:aa:
d7:27:35:d4:f2:ca:41:72:4d:c2:e5:04:97:55:5c:
79:05:3a:98:63:6d:07:b9:48:fa:5a:7d:d0:c1:fd:
9a:6b:47:4e:ef:b4:bf:bd:fe:13:be:5d:f7:09:46:
46:22:92:6d:66:29:2e:31:c1:44:8e:27:94:28:57:
46:62:3a:41:4e:65:eb:77:85:f3:40:59:7d:eb:1d:
46:07:12:f3:97:86:82:93:27:a1:c3:f6:0c:28:e6:
ca:c9:d8:eb:d9:be:f7:0d:3e:13:a4:52:d6:ea:44:
71:fb:9a:84:50:62:9a:e4:cf:a4:ab:5f:a4:61:15:
b3:4c:99:f0:c0:10:12:a5:d9:cd:e1:d9:64:96:6a:
c0:90:28:b2:db:0e:3b:60:90:15:6c:aa:cb:da:7e:
49:7d:78:9f:64:d5:53:21:b6:b1:2f:05:9b:c3:f6:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DF:95:9F:2F:90:60:C0:57:70:A7:95:1F:0D:9B:B0:0A:F8:8F:C9
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n9-Vny-QYMBXcKeVHw2bsAr4j8k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
90:d2:a9:65:43:4c:97:71:af:db:9b:a3:f9:ed:43:aa:4f:35:
03:33:fb:86:46:85:6a:c9:9b:e1:b1:60:2d:2d:c8:7a:76:98:
20:04:74:75:34:43:58:cd:0b:3b:ba:16:82:44:3c:26:01:a3:
94:c9:60:c4:c4:6e:ee:d8:a3:0f:db:38:5c:d2:29:44:f7:07:
d7:2a:ce:56:1f:f2:b6:01:d4:43:a9:d3:1b:57:5e:c8:68:b8:
27:cf:7f:49:2c:19:37:42:f3:5d:b6:9e:47:85:8a:6a:39:0f:
69:97:fd:ce:36:7b:f1:81:4d:05:2c:d7:05:38:5f:10:9a:2f:
0a:5a:ef:6c:d4:e6:60:b3:b3:05:3d:4c:a5:98:1c:b7:7d:66:
32:19:0e:22:9e:b6:e0:f6:4e:8d:c8:43:24:10:bb:00:f7:c4:
c7:39:91:6d:62:57:4d:1e:a8:be:f0:5f:1c:a2:44:f4:06:d0:
2c:64:ba:3d:60:d7:70:7d:4a:fd:cf:71:53:05:fe:77:c2:b7:
8e:ea:52:b8:68:cd:94:b0:e9:18:0b:56:d6:98:1b:e5:e7:54:
28:fb:57:e8:04:1d:e4:4d:50:42:66:58:5c:0c:65:93:cb:7a:
59:bc:ac:b2:ba:51:a7:92:cb:ff:6b:27:28:93:93:c6:8e:d2:
ad:a3:f1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org