Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sZ0D7aKoatAdT9RhoBbRUjzdQAw.roa
File: sZ0D7aKoatAdT9RhoBbRUjzdQAw.roa (raw, json)
Hash identifier: nwl1wNTPHmon39Z9ZJVYOhZBMrDm/o7wtsc7I6e6NbI=
Subject key identifier: B1:9D:03:ED:A2:A8:6A:D0:1D:4F:D4:61:A0:16:D1:52:3C:DD:40:0C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 07E5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sZ0D7aKoatAdT9RhoBbRUjzdQAw.roa
Signing time: Tue 29 Sep 2020 09:57:31 +0000
ROA not before: Tue 29 Sep 2020 09:57:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 203.105.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B19D03EDA2A86AD01D4FD461A016D1523CDD400C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e1:28:50:16:d5:e9:72:ab:d5:9e:98:1a:71:
f1:6c:ac:01:3b:67:4c:6b:4d:c6:cf:ca:9e:b7:31:
54:d7:9c:8b:0d:69:fa:e5:4f:f4:73:d7:4b:d1:f9:
1f:91:a8:9d:67:6d:d2:56:e2:58:3b:dd:e8:79:fb:
d1:fe:dc:f9:a2:aa:a4:49:da:89:72:f7:ff:6a:c2:
d5:51:a9:da:41:cf:d2:9a:b5:64:74:40:54:f4:8d:
cd:2d:0f:d6:7b:c7:e9:0e:e3:32:95:ca:e7:33:b2:
f3:dd:26:1c:30:98:47:6c:d3:2d:98:c8:36:42:91:
9b:11:18:ce:24:92:33:cc:60:09:c7:91:40:f3:f9:
6c:2c:97:38:1d:66:c3:b6:e9:ab:c4:c5:1a:7f:a7:
fc:8b:78:f1:5e:ce:ae:89:b8:56:bc:13:8e:dc:4e:
4c:ee:ed:88:43:84:2f:ea:70:96:f8:b1:4d:22:10:
13:e3:8a:e4:dc:08:43:d9:e2:25:90:3f:7a:f2:e1:
2f:64:51:83:c0:f8:06:87:f8:23:8a:17:1f:c4:86:
82:82:2f:2e:29:62:8c:1e:47:14:a7:c8:5a:eb:14:
04:ea:d5:d0:99:3c:5c:0a:6b:44:b8:fa:b9:8b:f8:
fb:f9:83:f9:71:fb:8c:9c:3e:ac:c0:68:5e:68:14:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9D:03:ED:A2:A8:6A:D0:1D:4F:D4:61:A0:16:D1:52:3C:DD:40:0C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sZ0D7aKoatAdT9RhoBbRUjzdQAw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.224.0/19
Signature Algorithm: sha256WithRSAEncryption
28:55:68:0c:d4:ef:a3:75:9e:44:bd:6f:04:b0:7c:0a:e4:ac:
5f:3b:ab:58:43:31:92:bf:d0:72:37:c3:4f:29:c5:4c:75:3a:
35:65:9d:1f:f7:77:d4:ff:26:a5:c1:d9:eb:13:de:28:53:49:
83:ef:e7:2a:b1:98:2b:e6:b9:35:13:88:a3:ce:41:e9:49:b9:
08:e7:03:47:ce:e6:5b:83:93:ce:7b:2e:cd:bb:8b:92:0a:78:
46:21:40:22:fd:2b:b2:11:5a:de:f5:5e:04:9c:69:62:37:2a:
7a:c2:58:2d:64:48:8b:21:97:14:c8:8c:58:df:f1:14:39:0a:
17:8d:19:3a:a6:dc:3a:e8:9f:76:6f:58:2f:ea:f6:ec:a9:f2:
44:53:85:f6:b1:c0:b0:72:ab:91:4b:d1:93:47:e0:72:32:75:
d0:f6:02:9f:5f:56:d1:57:2b:fc:6a:6f:05:1e:c8:4d:ac:8d:
e8:8a:26:56:36:8c:6f:f3:a5:74:a6:5e:f7:57:09:96:0a:89:
bc:03:75:e7:db:6a:67:0c:a7:63:21:21:d2:aa:66:f1:a2:00:
08:5b:21:df:83:75:9f:70:32:7c:33:5e:a8:e2:23:12:6a:5e:
b1:d8:19:26:63:af:c9:7e:a9:dd:49:4e:1c:32:cd:70:a5:80:
db:3d:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:58 2025 by rpki-client