Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vmTq1oLdcCJiD4j2zYJm5cydMAk.roa
File: vmTq1oLdcCJiD4j2zYJm5cydMAk.roa (raw, json)
Hash identifier: EOC/HRrmTRboc40cwncu4aDVlY9a7/Yvjr0ocKVigUI=
Subject key identifier: BE:64:EA:D6:82:DD:70:22:62:0F:88:F6:CD:82:66:E5:CC:9D:30:09
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0A92
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vmTq1oLdcCJiD4j2zYJm5cydMAk.roa
Signing time: Sun 07 Feb 2021 11:36:38 +0000
ROA not before: Sun 07 Feb 2021 11:36:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.62.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2706 (0xa92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:36:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE64EAD682DD7022620F88F6CD8266E5CC9D3009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7e:78:52:3a:f7:8f:6f:c5:cb:e8:f9:52:f8:
36:23:71:14:eb:0b:de:58:4c:8a:ef:0e:4a:a7:05:
73:b4:6f:94:a5:43:bc:97:4f:e1:23:7c:52:da:6c:
a6:6f:4a:cb:b9:e9:0b:89:84:18:b5:b5:55:05:cd:
9c:70:8c:12:8a:42:b9:09:60:4f:b1:d1:22:aa:0a:
12:ae:e6:30:20:f9:e6:1a:8c:25:d8:89:71:f3:fb:
85:24:fe:21:11:f9:db:16:46:1f:d9:23:78:07:c3:
14:20:8a:4a:f3:ed:72:f4:c4:a4:41:54:f2:72:f3:
ea:46:c1:84:77:00:6f:2c:0b:18:12:2a:b9:ba:39:
36:f6:38:92:12:0d:70:95:16:80:7d:6e:00:b7:33:
70:e3:4e:d4:93:7b:4f:bf:91:30:8e:bf:74:52:cd:
f4:23:b0:7a:1c:2b:54:65:81:ca:dc:c9:cb:d7:82:
5b:6e:3e:92:15:cf:d6:50:a8:88:54:44:d5:3a:a2:
ed:25:dd:74:0b:9d:7d:57:4a:55:40:df:46:59:e1:
c1:8d:a4:99:ef:2f:de:7c:68:5c:1e:65:d8:e2:cd:
bd:55:5b:de:c8:ab:34:35:d7:16:8e:60:3e:7c:d1:
62:fb:7a:9d:00:e0:9c:39:bb:af:63:2f:a3:e5:02:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:EA:D6:82:DD:70:22:62:0F:88:F6:CD:82:66:E5:CC:9D:30:09
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vmTq1oLdcCJiD4j2zYJm5cydMAk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.32.0/19
Signature Algorithm: sha256WithRSAEncryption
74:5a:13:c8:80:e5:3f:99:46:ea:7c:cc:89:85:6c:c3:41:02:
6f:32:96:27:40:6e:12:05:a2:2e:2c:b9:b7:49:b5:e2:00:90:
4f:f6:2a:88:fa:ac:84:04:71:12:ff:c9:75:cc:7d:43:b4:e9:
33:b7:1e:2e:20:fd:c1:e4:19:99:92:45:19:aa:0f:ae:55:73:
2a:65:12:95:c8:e9:1b:4b:88:8c:ee:0b:c2:4c:52:36:02:0d:
22:cb:e2:76:d1:42:7a:71:ce:23:1c:53:a7:30:f6:d2:9a:43:
a1:4c:e8:58:40:c4:36:c7:06:a7:bd:eb:00:23:1b:02:73:ec:
59:db:bb:a2:71:07:2f:8e:48:ff:0f:ba:87:e4:b4:63:2e:70:
26:40:88:94:44:5a:05:17:11:59:0e:d6:72:9f:ff:b7:b0:d5:
5d:51:c0:5e:62:60:84:79:00:19:2d:4b:7d:e1:d1:0e:22:91:
18:00:f1:6d:4f:d2:77:05:34:b6:9d:6b:e7:6f:54:fd:17:16:
38:6b:b5:05:1a:a4:d1:23:a5:c0:12:3c:36:d0:cf:3c:96:b9:
45:5a:78:c3:9b:02:42:53:c8:40:c7:ca:1f:9d:5a:54:45:a9:
46:36:93:c6:d7:bd:fb:02:58:10:9e:11:a9:b1:27:75:10:17:
5e:b8:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org