Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/obmgQRrYJW2xZDi-DaHc_astJHU.roa
File: obmgQRrYJW2xZDi-DaHc_astJHU.roa (raw, json)
Hash identifier: D0F/ZHezzy9JuSIiLhfzf+az2C3Gw6MWg/LxHxbl7DE=
Subject key identifier: A1:B9:A0:41:1A:D8:25:6D:B1:64:38:BE:0D:A1:DC:FD:AB:2D:24:75
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0817
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/obmgQRrYJW2xZDi-DaHc_astJHU.roa
Signing time: Tue 29 Sep 2020 09:57:45 +0000
ROA not before: Tue 29 Sep 2020 09:57:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 203.77.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2071 (0x817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A1B9A0411AD8256DB16438BE0DA1DCFDAB2D2475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:c5:d2:8b:0b:3d:6e:e8:5d:c6:6c:27:cc:
a4:d4:39:48:84:f9:1b:61:86:12:4e:b6:79:e0:5b:
92:aa:28:f1:16:5e:e1:59:a4:8d:83:91:cc:18:81:
42:78:8e:60:01:39:a8:d4:41:67:29:d4:85:23:b5:
7a:54:a0:71:0b:9f:97:32:d2:bb:43:ec:3e:93:10:
bd:2d:86:09:c7:33:35:2c:11:19:68:0e:cb:9b:2e:
c5:dc:60:69:c2:db:8c:37:af:5d:bf:b8:53:bb:6a:
e8:6e:45:c8:79:1b:69:0a:9e:5a:b1:79:c7:64:20:
f9:cd:0a:fb:a2:85:d2:7b:b6:c0:34:73:16:49:5d:
62:d1:31:c6:8e:c8:1c:51:dd:ed:ce:21:fe:8c:28:
8a:b2:22:e0:f6:5f:2c:7d:3f:a1:61:27:ec:72:f1:
03:57:6d:d3:7e:2e:ef:ea:e6:70:d3:75:01:e7:e5:
82:6a:2b:bf:bd:30:88:42:52:11:c7:42:b7:3c:4c:
66:e8:24:0b:56:5b:42:f9:6f:f6:b8:8c:81:04:cc:
9e:71:f8:74:18:4b:8b:6c:9c:76:b3:23:a8:58:8d:
e5:b7:2d:ba:72:71:95:08:a1:e8:cb:b6:c8:f3:85:
d1:74:b7:06:2d:97:53:cd:29:a2:f8:f9:ce:44:36:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:A0:41:1A:D8:25:6D:B1:64:38:BE:0D:A1:DC:FD:AB:2D:24:75
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/obmgQRrYJW2xZDi-DaHc_astJHU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.0.0/18
Signature Algorithm: sha256WithRSAEncryption
79:68:f9:92:36:5e:c7:ea:27:fe:1c:7e:a2:3b:18:56:90:e6:
c8:e3:e5:c6:6f:d3:81:9b:ea:16:16:8f:d8:20:94:66:7d:a5:
de:57:ea:b3:93:0f:da:17:2c:96:1e:da:b1:d7:3e:cc:5b:42:
67:25:23:65:b5:3c:5b:54:27:38:4b:f2:da:fa:85:bc:6c:6d:
b1:88:1c:c1:48:f7:bf:70:72:74:81:1e:c4:89:96:54:84:36:
18:19:ed:71:33:37:da:1c:b5:54:9d:a1:92:03:d2:d3:2a:a3:
a4:b7:43:3d:71:57:79:72:98:56:ed:19:e5:65:c4:60:26:1f:
f9:b6:56:81:92:f2:be:8f:88:5a:7a:ca:94:91:43:3e:00:b9:
4e:74:fb:47:65:bd:8a:48:90:52:b9:28:a2:3d:eb:c7:28:47:
45:29:69:3b:26:c3:fd:2b:32:04:79:25:bc:25:41:4c:69:43:
d8:c6:f1:da:1c:8e:dd:05:0c:f3:4b:9f:d3:6e:ad:93:b2:9d:
7a:1a:dd:99:7f:ab:85:7e:7d:ce:85:16:fe:5d:4a:d5:27:d1:
f0:e4:b5:81:aa:72:57:14:1b:3b:a6:6b:71:f1:69:46:ae:98:
12:93:c2:7c:bf:63:f5:23:fa:8c:ee:bc:0c:a3:b0:1e:4a:27:
8b:45:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org