Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vOs2wXXseYsM5lHX0xPWRaMloH4.roa
File: vOs2wXXseYsM5lHX0xPWRaMloH4.roa (raw, json)
Hash identifier: 0aM2/0rADJwd28ICTV8ULwAtqp7ZIZT1BOWND5/ivjk=
Subject key identifier: BC:EB:36:C1:75:EC:79:8B:0C:E6:51:D7:D3:13:D6:45:A3:25:A0:7E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vOs2wXXseYsM5lHX0xPWRaMloH4.roa
Signing time: Thu 15 Sep 2022 02:46:56 +0000
ROA not before: Thu 15 Sep 2022 02:46:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 219.80.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BCEB36C175EC798B0CE651D7D313D645A325A07E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:64:d6:37:a9:a8:31:f7:31:59:95:4c:fe:
d7:44:3b:ef:ef:86:57:99:46:5d:49:53:6c:bc:bb:
da:ac:88:30:4b:b0:05:0d:21:95:a7:02:50:cc:55:
79:55:64:cb:8d:63:82:d0:92:42:68:f8:4a:d9:bf:
ad:1e:0e:28:0b:77:c9:72:2c:cd:62:b0:98:26:00:
56:34:c3:cd:8c:2b:46:7a:e6:e8:40:f2:2a:47:73:
6c:a9:2e:7f:54:aa:f5:25:9d:d9:b7:88:3a:4f:42:
ce:b3:91:17:f1:e8:d7:74:d1:2b:35:f1:23:b5:5d:
57:ef:74:a5:8f:19:15:ad:53:6e:4d:3b:e8:44:b7:
c6:00:ed:7e:ba:1b:26:48:14:aa:50:6b:ec:12:76:
a1:7d:c8:29:6a:8e:ec:cb:bb:54:76:ed:aa:75:ec:
66:a8:45:88:10:20:4b:ee:7c:83:11:59:2c:28:ea:
fa:45:f3:f2:82:a8:5a:23:bb:1e:39:fa:9a:8c:0f:
4a:ee:dd:6c:41:da:eb:d1:cd:5a:04:1a:77:8b:9f:
38:4f:f7:8d:60:ef:24:50:b4:6d:39:3b:bb:7d:68:
16:49:1d:16:71:2b:c0:30:86:a7:3d:5d:2f:63:bf:
9d:96:1c:aa:9d:2a:c2:38:70:b0:5b:51:72:cb:29:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:36:C1:75:EC:79:8B:0C:E6:51:D7:D3:13:D6:45:A3:25:A0:7E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vOs2wXXseYsM5lHX0xPWRaMloH4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:d1:3e:a8:9f:c2:df:12:07:51:fb:cd:ca:43:f6:be:5e:f2:
f9:a8:02:1b:09:32:fd:26:b7:f7:03:e4:b0:9c:26:7e:d7:39:
3d:9c:62:58:b0:43:84:c6:76:08:94:c3:eb:e1:7e:08:4a:12:
a6:95:73:1c:aa:0a:02:00:8e:35:ed:b5:1f:92:c7:f1:78:92:
0d:2e:22:b4:a0:a1:03:27:3e:78:74:6d:d7:a8:5c:f1:fd:76:
01:51:a0:90:3e:8f:42:9f:d3:be:59:5d:37:b1:17:fd:9a:09:
aa:35:86:cc:95:93:27:6a:7e:d5:cc:66:a7:32:56:fd:54:17:
36:05:85:7b:ad:ff:1c:cd:d0:d1:80:be:8d:20:5b:25:95:fe:
91:ac:78:6b:f8:83:49:5b:b6:3c:e1:08:34:33:44:3a:49:4f:
8e:27:91:88:75:5d:00:07:9d:64:41:9d:dd:6d:f8:8e:81:2c:
78:27:51:57:2c:2b:e6:3c:47:17:6a:0f:2f:5d:0a:fe:24:7e:
59:46:22:61:89:8a:9c:bb:f4:5e:77:80:a3:19:4e:3f:30:d5:
d7:b1:78:90:ff:53:e0:59:33:65:06:ad:e5:86:0d:9e:19:76:
61:dc:38:c4:a2:7f:fa:d8:84:81:db:2d:53:87:f3:2e:48:6b:
1e:5d:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org