Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/tMD_Dnj20E5ORN9rQ390RDSgc4U.roa
File: tMD_Dnj20E5ORN9rQ390RDSgc4U.roa (raw, json)
Hash identifier: UVkaVjuH0TjIVFjunh9gSryYd+5AsGWfUeeIPWw9O0M=
Subject key identifier: B4:C0:FF:0E:78:F6:D0:4E:4E:44:DF:6B:43:7F:74:44:34:A0:73:85
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0800
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/tMD_Dnj20E5ORN9rQ390RDSgc4U.roa
Signing time: Tue 29 Sep 2020 09:57:38 +0000
ROA not before: Tue 29 Sep 2020 09:57:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 203.77.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4C0FF0E78F6D04E4E44DF6B437F744434A07385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:60:5b:e4:44:fd:35:fc:8b:72:9c:43:37:
8c:1b:2a:d2:fc:f0:91:e8:d8:97:ea:e9:46:66:1d:
61:de:2c:c7:2b:d9:b4:7f:9d:59:cc:20:6f:e4:3b:
49:46:ce:23:b9:99:b6:5f:f2:3c:4d:2f:f9:08:f6:
85:b6:29:5a:5a:d2:04:11:8e:b9:f1:f2:07:32:da:
e2:0d:06:42:78:a3:fc:77:34:5a:63:81:34:85:48:
e6:09:4c:86:b5:1a:e6:18:77:d6:65:60:43:d2:0f:
64:aa:58:f4:15:22:6a:e5:0c:05:9b:ba:d7:04:df:
99:0f:61:48:fc:c0:b8:db:26:28:96:66:1a:51:48:
e4:8b:e6:74:d0:b6:ca:38:7e:2f:5c:a2:fd:b3:db:
64:46:16:a8:e8:c5:70:7d:5f:94:d4:80:d7:72:0d:
f4:c8:c7:48:6b:3d:e4:ee:5a:d7:ce:44:0d:07:67:
ab:17:d6:30:fb:4f:2f:53:56:7f:75:f3:76:0c:59:
3d:9d:65:37:2a:77:12:fc:bd:63:ae:3f:56:08:0d:
18:d4:e5:69:e0:84:f4:48:97:17:ab:10:d2:fe:c2:
50:eb:c8:13:35:70:f8:b4:7f:98:7a:2f:00:b5:01:
36:02:1b:18:3f:5a:ba:80:36:c9:82:e4:10:23:e9:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:FF:0E:78:F6:D0:4E:4E:44:DF:6B:43:7F:74:44:34:A0:73:85
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/tMD_Dnj20E5ORN9rQ390RDSgc4U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:c9:ad:41:35:e0:0c:94:c3:4a:84:ea:9a:4a:7f:d5:b3:2c:
2e:6a:28:ce:49:db:e4:c8:f0:42:83:ce:4e:f4:5f:3c:51:dc:
de:ab:53:34:f5:8f:15:ec:52:e4:80:32:71:a6:e5:b1:6a:c0:
eb:47:78:52:13:e5:c0:4c:d3:3f:66:e5:5b:73:d7:8d:c9:f6:
f6:ed:51:44:0b:c7:a5:35:4d:db:51:b1:c1:17:af:8b:c0:3c:
22:82:c7:51:df:0d:2a:db:28:bb:58:98:1c:fc:27:f8:69:a2:
ef:a4:87:94:04:f6:4c:24:20:e5:24:c8:b2:77:d0:76:58:d6:
52:18:a6:ff:ab:d9:a5:df:4f:c5:20:d6:86:33:1b:00:66:c4:
8c:8b:50:0d:f5:c4:fd:72:da:ba:29:ab:46:ca:6b:8d:ab:57:
93:8d:4a:f1:33:44:d6:aa:d4:fe:35:31:ca:ed:9c:c7:e6:0e:
50:d8:a4:e2:a4:ea:49:91:de:55:7f:ba:7e:55:43:d9:52:9c:
52:2f:57:42:06:30:c2:07:03:cf:1e:28:09:1d:f1:0a:1d:2b:
6d:fe:42:af:34:63:d6:1f:98:5a:b2:c5:6f:d6:0d:42:3e:de:
82:57:10:d1:aa:08:31:13:b0:1a:d9:65:ec:3f:ec:56:dc:41:
5d:81:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org