Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/v-2qR_tBCeHPVYxV3fREw6wvGTs.roa
File: v-2qR_tBCeHPVYxV3fREw6wvGTs.roa (raw, json)
Hash identifier: w5fV5uTcmFPjGKoOrwaIR5Xhf7eJLXG4kPLdVLjqRtk=
Subject key identifier: BF:ED:AA:47:FB:41:09:E1:CF:55:8C:55:DD:F4:44:C3:AC:2F:19:3B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0982
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/v-2qR_tBCeHPVYxV3fREw6wvGTs.roa
Signing time: Wed 16 Dec 2020 02:18:14 +0000
ROA not before: Wed 16 Dec 2020 02:18:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.51.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2434 (0x982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 16 02:18:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BFEDAA47FB4109E1CF558C55DDF444C3AC2F193B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c9:23:52:0f:e3:c7:80:64:84:89:73:1a:ba:
94:9d:cf:c8:50:1d:ef:4c:d9:b7:eb:58:ac:ed:3d:
5f:47:f4:8f:8a:1c:d9:ec:36:01:78:73:a3:81:1c:
b8:77:17:fa:50:66:44:dc:e9:83:0b:a2:19:dd:51:
8c:5c:6d:16:1c:bb:f2:09:5e:14:17:9a:37:ce:70:
12:e1:75:a2:2f:ef:b0:8d:26:19:c9:4b:76:a5:c4:
95:53:0d:75:ee:a9:87:f8:b0:5c:ba:cc:f4:3e:50:
e2:5b:a9:cc:a9:dd:20:53:e3:95:99:82:48:02:b6:
fa:e4:67:f5:15:ff:84:cd:80:31:2d:a7:e3:a9:73:
d0:eb:1f:df:0e:74:66:71:f9:d1:85:82:e2:1d:77:
61:07:3b:3d:fc:5f:31:bc:b1:3f:f9:2a:15:6d:b1:
3a:6c:70:52:04:e6:a2:fa:73:6e:fd:6e:64:18:08:
36:95:9d:f3:0a:b8:1b:a9:25:25:85:24:45:68:04:
da:80:be:16:57:bb:31:86:47:45:d9:01:b1:a5:e6:
57:10:1e:07:e0:34:a8:93:b9:11:35:71:ad:31:be:
60:74:4b:5d:4b:1a:15:7c:af:4d:81:31:a3:08:f1:
66:e6:81:22:c1:45:2c:93:ef:b8:9c:d3:a5:fc:72:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:AA:47:FB:41:09:E1:CF:55:8C:55:DD:F4:44:C3:AC:2F:19:3B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/v-2qR_tBCeHPVYxV3fREw6wvGTs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.51.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bc:f2:88:a7:22:a4:53:ed:7e:82:f9:46:e2:9a:05:20:a0:
73:57:3a:be:ef:f4:26:bd:7f:b6:ce:7a:36:c2:90:c6:cb:eb:
9d:3a:1c:47:0d:a8:61:cf:01:9c:00:1c:5f:c7:3a:16:e2:22:
54:cf:a9:22:48:f3:ec:ef:aa:79:3b:6c:bc:e9:88:f6:f1:04:
03:6b:45:92:ae:ee:12:d1:4f:9a:38:d2:bc:98:a6:37:87:be:
c2:9b:82:e8:54:fc:97:4d:29:c0:9d:9e:46:45:ea:69:43:d4:
ad:a0:92:1d:b6:45:59:21:3a:30:cb:92:47:b2:9a:99:ca:f6:
38:37:d0:c8:55:f5:c1:9a:32:10:5c:bc:8f:50:36:b0:fc:42:
a8:f2:2d:ef:53:41:7f:b1:ab:11:3a:03:ab:89:f8:78:e7:71:
e4:0b:94:d2:bb:19:52:a0:e8:4f:37:ec:78:fa:5c:6b:db:07:
bd:ac:88:69:c6:54:57:74:a1:31:22:ab:23:a5:00:56:b3:3e:
42:47:a2:ad:3e:37:c7:4d:64:a5:28:40:bf:e8:9b:48:da:90:
c0:c7:5b:0c:cc:70:f4:4e:0f:cf:e2:9b:ee:6e:dc:e1:14:da:
f6:02:42:20:0a:eb:e8:a9:d3:47:94:cd:de:ba:ed:23:42:65:
c2:a4:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org