Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vp4JhVYyCFdZHAB5GK2iM3plY0Q.roa
File: vp4JhVYyCFdZHAB5GK2iM3plY0Q.roa (raw, json)
Hash identifier: 7REqUexiShA0W6e6XyNfCaAew3ucJxM3h0ah0DwPaPs=
Subject key identifier: BE:9E:09:85:56:32:08:57:59:1C:00:79:18:AD:A2:33:7A:65:63:44
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0CA3
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vp4JhVYyCFdZHAB5GK2iM3plY0Q.roa
Signing time: Wed 29 Sep 2021 02:50:05 +0000
ROA not before: Wed 29 Sep 2021 02:50:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131634
IP address blocks: 210.17.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BE9E098556320857591C007918ADA2337A656344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2e:e4:24:30:ba:01:66:63:45:89:c9:fa:09:
49:24:8f:db:e0:d0:56:80:d4:7e:01:92:1e:e3:a0:
5f:85:80:8d:6b:7e:2b:b4:4f:6b:cc:62:75:42:9c:
00:14:93:60:8f:62:b0:d0:ae:6f:5f:ff:4a:b0:35:
e3:2c:6f:70:e3:71:63:79:a8:7d:27:d6:a8:8c:9c:
01:c4:e7:45:5f:e8:b0:01:22:4d:88:e3:b3:8b:ed:
ed:89:3c:82:06:8b:c6:cd:6e:df:62:33:85:5b:b9:
3e:52:8b:71:0f:c3:82:76:c8:3d:6e:be:0b:fa:f8:
1d:97:11:a7:c7:2a:43:f8:9c:1d:67:4d:bb:3f:b5:
ea:11:b6:89:01:0f:d7:3f:ef:bb:09:e2:c1:44:2d:
26:b2:f8:8c:bb:66:ad:14:91:43:36:6c:7c:83:55:
a7:05:d9:90:d1:4e:fa:d8:01:94:7d:49:f6:21:9b:
b5:51:19:a3:ee:2f:58:42:19:a9:62:51:6f:7d:c8:
17:e1:c9:c6:a1:34:5f:09:75:ea:49:fe:3a:87:52:
ec:92:0d:55:0d:3c:34:c8:f0:b2:62:af:a4:09:26:
ca:53:a4:ae:ed:ed:be:43:74:8e:93:9a:26:0a:fe:
45:2e:81:e3:cf:8b:96:f5:26:d4:a9:e3:e6:9e:ff:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:09:85:56:32:08:57:59:1C:00:79:18:AD:A2:33:7A:65:63:44
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vp4JhVYyCFdZHAB5GK2iM3plY0Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.80.0/24
Signature Algorithm: sha256WithRSAEncryption
17:97:54:8e:02:ad:ee:0d:34:82:f4:c9:58:15:92:b9:46:ec:
c1:f1:1e:00:63:e9:5c:1f:bf:9e:d1:77:11:08:ec:f4:9a:42:
e9:c8:8b:7e:0f:00:73:02:f0:3f:d8:8b:ed:dd:21:c7:96:c3:
38:c1:7a:d7:a5:27:c4:d3:67:ee:53:a6:bf:0e:b9:2b:70:19:
25:53:2c:d2:df:e1:8d:45:ee:3d:3f:1f:0f:cf:02:61:ab:0d:
6b:5c:b0:13:d0:ab:43:2a:84:a5:ff:79:a5:bb:62:ea:7e:4b:
9e:62:a8:dc:96:f5:ec:42:d4:b9:71:f1:e3:78:8a:f7:f0:b0:
45:59:ea:8f:84:d0:f8:d2:fa:3d:56:84:82:18:57:a2:04:b7:
d2:c8:bf:c0:e3:10:79:37:ed:80:67:73:e5:13:36:07:1a:13:
46:84:27:74:3a:7e:da:f1:b3:11:2b:c1:d3:ec:de:ef:75:0e:
4d:dc:8c:57:03:11:f8:0c:42:20:66:ee:6d:b0:be:cd:13:e6:
b5:ee:4f:9b:f1:e0:ff:71:04:c3:0e:3c:0a:b4:a9:67:6c:a6:
a7:ae:66:87:a4:b9:59:ff:3d:b9:20:72:82:c0:db:5e:0e:9f:
38:24:15:a7:c6:2f:eb:99:7a:1d:e3:04:30:b4:4d:ad:11:ba:
98:bd:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org