Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/r586imrRBTY-Z8z5Nuetjh0hWDE.roa
File: r586imrRBTY-Z8z5Nuetjh0hWDE.roa (raw, json)
Hash identifier: /Fb3olh0jM7Fft67zMTgB94mUUOoXi1DptRD7FYzYtk=
Subject key identifier: AF:9F:3A:8A:6A:D1:05:36:3E:67:CC:F9:36:E7:AD:8E:1D:21:58:31
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C61
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/r586imrRBTY-Z8z5Nuetjh0hWDE.roa
Signing time: Wed 29 Sep 2021 02:49:45 +0000
ROA not before: Wed 29 Sep 2021 02:49:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.67.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3169 (0xc61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AF9F3A8A6AD105363E67CCF936E7AD8E1D215831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:2e:91:2e:1f:7d:9e:27:f1:f7:4e:f0:4f:
aa:85:68:8e:0b:b8:32:3d:4d:f7:4e:14:0b:2a:84:
ea:2c:e1:df:be:d2:91:e6:84:5e:08:1a:98:22:d8:
1c:bd:13:4c:ea:8e:c2:83:f2:a3:37:39:32:23:e0:
e4:36:8a:eb:2d:5c:4c:9c:2f:01:f6:96:f0:93:d5:
c3:c0:11:04:0e:b4:b4:21:38:8f:ce:c8:1b:1f:a7:
fb:dd:12:92:4b:ea:e1:90:31:c7:2d:f3:99:52:7f:
30:3f:2c:16:2f:fb:db:b7:cf:2a:50:9f:26:17:bc:
93:d9:26:27:c6:27:24:9e:0c:3d:9b:f1:ba:33:7f:
f2:57:66:aa:90:61:c9:a1:28:5e:52:dd:56:ec:11:
6f:cb:75:c7:6d:aa:b0:1a:5c:e5:dc:b9:c7:98:b0:
60:e5:d4:d5:45:ba:20:83:11:7d:8c:89:9f:c0:a4:
a0:62:95:65:e6:80:1f:a2:61:d1:87:0c:fe:cb:5e:
bc:3c:8e:dd:16:e0:70:b6:8e:f6:8b:3a:5d:99:5e:
95:b0:e7:61:5c:dd:8b:95:73:a5:c7:e8:02:de:62:
79:62:eb:32:60:51:e4:23:6b:4a:52:11:af:55:00:
d5:c4:a7:e8:18:79:7d:4f:7c:2d:e0:63:e9:88:19:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:3A:8A:6A:D1:05:36:3E:67:CC:F9:36:E7:AD:8E:1D:21:58:31
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/r586imrRBTY-Z8z5Nuetjh0hWDE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:5a:6f:99:56:09:a1:a8:f4:19:17:d5:e2:f4:f6:73:01:e1:
96:78:5d:3e:e0:11:03:0c:37:43:25:0b:ce:00:42:8b:a0:b5:
1d:9a:b5:5e:69:05:cf:4a:6d:c5:46:87:b6:21:6a:35:97:18:
a8:a4:af:dd:6f:07:73:f2:ff:38:80:0c:e8:f9:d0:f3:5f:10:
7d:41:de:48:be:77:16:2d:53:db:bd:37:8b:bd:90:fa:e6:ca:
91:f9:f2:6a:58:f9:7e:6d:ab:e9:ba:d0:62:19:a5:6c:9e:9a:
72:77:e7:ce:47:20:4a:83:f4:42:dc:3a:bb:f6:35:6b:88:a8:
fe:68:f8:cb:fb:33:0d:4e:65:23:cc:88:3b:9e:a2:ee:3e:b0:
46:44:c7:ee:be:2e:32:e5:bf:df:03:b4:87:cd:ee:2e:cb:89:
ca:5b:ea:54:e2:51:c2:de:ce:48:1d:4f:2d:e4:59:c4:ba:2f:
d4:08:e4:93:4c:de:1b:40:f2:2e:6f:68:8f:07:4d:84:a0:c1:
c5:5b:35:7d:d0:f3:84:d2:ef:ff:23:68:9e:e8:7a:50:00:d8:
eb:23:6e:72:af:0b:a7:7f:46:d3:29:0f:a1:8f:0c:be:cd:23:
48:fb:fc:b4:22:42:38:39:cc:b3:fa:01:92:13:94:f3:5a:42:
a9:4d:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org