Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pDw5wba9r3bvoRBoV9awoBMCyUo.roa
File: pDw5wba9r3bvoRBoV9awoBMCyUo.roa (raw, json)
Hash identifier: q5v2QPlCUBcUos7t3JUs8qiCYNmZBovmJNQrTbTYbfs=
Subject key identifier: A4:3C:39:C1:B6:BD:AF:76:EF:A1:10:68:57:D6:B0:A0:13:02:C9:4A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C3B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pDw5wba9r3bvoRBoV9awoBMCyUo.roa
Signing time: Wed 29 Sep 2021 02:49:34 +0000
ROA not before: Wed 29 Sep 2021 02:49:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.17.72.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A43C39C1B6BDAF76EFA1106857D6B0A01302C94A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:cd:04:fa:97:1b:cf:22:61:b3:38:51:93:
d5:21:bd:a8:13:fb:13:1d:20:f4:c8:0c:a8:86:38:
6c:29:e1:ab:4c:3f:dd:14:ff:22:54:42:c8:04:a4:
47:fb:af:da:bd:57:9d:c3:16:2a:3b:9d:bf:4f:ad:
dd:f8:84:68:88:11:5e:02:b2:11:06:86:d0:c5:64:
9f:5e:fb:9f:f9:41:7e:db:a4:ee:74:a8:67:cb:86:
06:58:a1:2d:d5:3e:ba:fb:bc:40:52:b8:18:10:fd:
66:48:d0:4b:10:c1:ce:21:ec:ed:04:51:2b:fb:20:
a2:ca:ef:c8:06:9c:1c:3f:23:fd:02:17:92:96:19:
d3:36:1a:f7:38:b7:20:48:50:52:d7:9c:c9:b4:66:
33:9a:3a:70:17:43:35:e4:d2:97:90:da:2b:a5:09:
d9:05:9c:17:be:9c:c3:77:e3:e6:ad:b1:3e:3e:a9:
10:d4:21:6b:6b:31:04:8a:00:f8:91:06:66:d4:76:
34:91:72:80:aa:fe:f5:01:e9:8d:32:2b:07:46:99:
e0:9d:94:ae:ce:02:39:1e:1d:47:39:b1:81:55:63:
27:bc:23:cc:09:59:0e:86:aa:7c:88:31:47:ed:70:
dc:ce:42:51:c4:63:e9:87:55:3c:92:26:07:0d:d8:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3C:39:C1:B6:BD:AF:76:EF:A1:10:68:57:D6:B0:A0:13:02:C9:4A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pDw5wba9r3bvoRBoV9awoBMCyUo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.72.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0e:eb:db:78:86:d0:95:51:c4:e1:0d:b5:58:ad:f5:8d:79:
87:93:d4:9d:6d:89:a5:87:79:67:43:41:98:7d:d4:95:48:7c:
f6:41:76:57:62:0c:22:58:0c:1b:45:a6:34:f4:21:77:54:f1:
25:a4:43:ab:aa:6c:ef:12:4a:25:a0:f2:79:e4:f8:d9:f4:a4:
c3:a6:4c:bf:15:57:44:00:2a:9c:f5:1e:b8:1c:ba:24:a0:fa:
64:ca:8c:ff:a1:a8:ff:e2:25:41:b8:63:61:74:b9:64:5d:8d:
b6:eb:af:e8:15:b2:16:9e:3e:b9:15:03:f7:d9:8f:63:f9:00:
ae:57:1a:a3:bf:00:8c:99:83:04:45:32:f1:9e:1f:58:24:cd:
fd:77:01:0a:92:6a:7c:55:7b:f4:8c:4c:71:5d:55:6e:65:dd:
ea:6f:b8:69:a6:8e:bf:40:c5:2b:83:02:b9:c7:43:b2:43:a3:
23:87:b1:f3:b3:80:b4:d5:a5:b1:cd:4d:00:b7:e1:e0:f4:a7:
ee:49:43:3c:09:1d:9f:8a:ae:f3:bc:c0:87:c4:c3:34:ba:40:
4f:2b:b3:b3:f9:b5:50:23:44:37:57:e2:0c:b4:08:b1:4d:c2:
83:19:71:c1:3e:0d:a9:c0:5d:cc:1e:09:a9:5b:60:26:1a:5c:
2e:b1:f3:00
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjQ5MzRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEE0M0MzOUMxQjZCREFG
NzZFRkExMTA2ODU3RDZCMEEwMTMwMkM5NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvLM0E+pcbzyJhszhRk9UhvagT+xMdIPTIDKiGOGwp4atMP90U
/yJUQsgEpEf7r9q9V53DFio7nb9Prd34hGiIEV4CshEGhtDFZJ9e+5/5QX7bpO50
qGfLhgZYoS3VPrr7vEBSuBgQ/WZI0EsQwc4h7O0EUSv7IKLK78gGnBw/I/0CF5KW
GdM2Gvc4tyBIUFLXnMm0ZjOaOnAXQzXk0peQ2iulCdkFnBe+nMN34+atsT4+qRDU
IWtrMQSKAPiRBmbUdjSRcoCq/vUB6Y0yKwdGmeCdlK7OAjkeHUc5sYFVYye8I8wJ
WQ6GqnyIMUftcNzOQlHEY+mHVTySJgcN2PATAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUpDw5wba9r3bvoRBoV9awoBMCyUowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvcER3NXdiYTlyM2J2b1JC
b1Y5YXdvQk1DeVVvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRSDANBgkqhkiG9w0BAQsFAAOCAQEAcQ7r23iG0JVRxOENtVit9Y15h5PUnW2J
pYd5Z0NBmH3UlUh89kF2V2IMIlgMG0WmNPQhd1TxJaRDq6ps7xJKJaDyeeT42fSk
w6ZMvxVXRAAqnPUeuBy6JKD6ZMqM/6Go/+IlQbhjYXS5ZF2Ntuuv6BWyFp4+uRUD
99mPY/kArlcao78AjJmDBEUy8Z4fWCTN/XcBCpJqfFV79IxMcV1VbmXd6m+4aaaO
v0DFK4MCucdDskOjI4ex87OAtNWlsc1NALfh4PSn7klDPAkdn4qu87zAh8TDNLpA
Tyuzs/m1UCNEN1fiDLQIsU3CgxlxwT4NqcBdzB4JqVtgJhpcLrHzAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org