Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nq4JslQpDdvwD8coBJrNbhc4Zok.roa
File: nq4JslQpDdvwD8coBJrNbhc4Zok.roa (raw, json)
Hash identifier: PvjA/uASTfLdtklcP4T4r4qztOrIkrbtyybws681TXA=
Subject key identifier: 9E:AE:09:B2:54:29:0D:DB:F0:0F:C7:28:04:9A:CD:6E:17:38:66:89
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nq4JslQpDdvwD8coBJrNbhc4Zok.roa
Signing time: Thu 15 Sep 2022 02:47:18 +0000
ROA not before: Thu 15 Sep 2022 02:47:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 203.77.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9EAE09B254290DDBF00FC728049ACD6E17386689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:76:51:9c:8c:20:03:3c:4a:f4:70:25:b3:
e9:46:ad:72:26:1c:8f:63:4a:66:9e:91:9b:90:8f:
0b:42:cf:f7:89:f7:8b:1d:14:cb:ab:cb:67:af:a4:
ef:3e:8e:ab:10:51:ad:2a:20:1a:5d:d6:1d:3e:eb:
99:38:9e:7d:86:d3:c8:55:ce:3d:17:83:7e:9d:1b:
62:08:cd:53:4c:22:47:1b:90:12:7a:42:b1:76:f2:
b6:7c:49:bb:c9:13:1c:70:06:dc:73:d1:0d:0a:13:
68:a9:41:10:11:f2:2b:67:9d:bd:5d:84:7a:32:8a:
d9:1f:d0:b7:77:cb:42:84:b6:44:62:51:de:1a:ba:
47:0a:b9:f6:cb:8f:aa:f5:99:26:ae:c9:d4:8a:bc:
de:53:a9:61:da:f7:7c:a9:90:49:fe:ba:18:ef:eb:
56:d7:00:e5:b7:fe:eb:e9:d2:27:b5:8c:f6:30:8e:
1a:f7:d0:ac:d0:e0:62:7b:42:c4:f5:fb:d2:82:a1:
07:f7:64:78:41:11:51:25:64:2b:5e:5d:67:ff:54:
a9:5e:b2:fc:d3:00:5d:e2:d6:5e:9c:2c:4f:85:2e:
6a:48:7c:da:3b:00:d6:ee:4f:e4:24:84:48:38:46:
b3:a9:dd:33:07:e1:30:55:f0:dc:fe:e0:32:8a:29:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:09:B2:54:29:0D:DB:F0:0F:C7:28:04:9A:CD:6E:17:38:66:89
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nq4JslQpDdvwD8coBJrNbhc4Zok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:d5:a9:fe:c8:f2:d5:39:fb:2e:d3:37:45:41:21:39:42:65:
6e:8c:8d:de:35:2b:fe:88:97:ea:46:df:80:21:43:41:6b:7e:
0d:00:d9:3f:7f:e3:81:26:f0:5a:d2:5e:9c:4c:2b:01:18:89:
33:0e:f9:2e:a5:34:4d:72:a1:9c:9b:3d:ca:23:d8:ec:cc:70:
1f:d8:8e:c8:4a:02:e9:f4:4f:84:b5:49:6e:5a:c0:dd:a9:b6:
52:56:f2:d0:f9:c7:6a:7c:5d:80:b4:16:ef:d2:d6:10:d1:6d:
c0:bd:62:03:df:62:31:ec:c4:70:19:e2:67:b6:97:5a:a0:9c:
b0:3a:71:f5:5b:43:2c:a6:85:d4:b7:68:de:34:4f:2e:8c:ef:
58:7f:1f:2f:be:b2:eb:cc:e5:1e:d2:ae:f6:b2:8e:34:ba:9a:
85:0d:8d:fb:37:a4:0f:35:53:4d:29:b3:1e:03:84:b8:aa:bf:
ae:25:ee:41:ea:5a:b1:cd:a3:87:2f:7d:c1:c1:65:fb:50:ff:
30:83:02:d3:65:86:13:c5:6b:a2:3a:d1:83:f2:cd:44:e0:ff:
c4:f8:ed:fa:a8:c2:c1:36:dd:bd:1f:a4:1f:50:f3:1e:b6:8d:
12:97:65:4d:86:0a:fb:69:23:fb:06:b3:1a:d1:77:65:89:c3:
55:2c:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org