Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vpmE7qMWD3WBBC89hs0S_ytVrS4.roa
File: vpmE7qMWD3WBBC89hs0S_ytVrS4.roa (raw, json)
Hash identifier: 1pgen+okv7TCkvwlyL4HEFw/bdmedlXve1K13bWZtdo=
Subject key identifier: BE:99:84:EE:A3:16:0F:75:81:04:2F:3D:86:CD:12:FF:2B:55:AD:2E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 081F
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vpmE7qMWD3WBBC89hs0S_ytVrS4.roa
Signing time: Tue 29 Sep 2020 09:57:47 +0000
ROA not before: Tue 29 Sep 2020 09:57:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131628
IP address blocks: 175.99.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE9984EEA3160F7581042F3D86CD12FF2B55AD2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:06:7e:fa:e4:61:00:c9:43:65:fd:97:cf:
e0:cc:fe:61:af:9f:de:8e:48:d1:9b:19:2f:7d:ac:
9d:2a:75:da:83:b2:2a:1b:50:5c:5b:16:5b:e7:4f:
49:1f:96:d2:20:ac:6b:11:b2:93:ed:8b:7f:74:03:
03:60:ab:d8:22:82:8f:d6:59:c6:0e:22:bd:ba:a9:
88:16:6a:18:71:b1:a0:8f:ed:e5:0d:34:04:ab:e6:
22:c0:5e:61:b4:9f:e9:0d:e8:1f:a5:00:89:58:b8:
d9:54:8f:82:bd:bc:9d:0d:47:cf:47:f7:aa:05:d0:
61:bd:40:c3:f9:f7:ad:99:76:48:fb:84:66:c9:19:
8f:31:b6:cd:89:7a:36:91:1b:04:4c:13:fa:f6:b4:
f6:b6:52:f9:40:0d:34:85:f2:4c:c5:d9:f7:d7:fc:
ef:d4:9c:90:bd:d9:2d:97:50:d0:29:db:70:92:21:
92:bc:f9:9d:f5:70:35:a2:bc:01:c4:c3:9c:29:71:
45:85:72:ca:72:d7:66:88:dd:e9:bb:d9:2f:64:48:
ac:af:28:0d:3e:3e:f5:30:07:c8:7b:1a:19:a2:5f:
24:17:32:42:93:12:70:e3:a6:87:98:ba:6d:31:f3:
69:b6:56:1b:db:bc:d2:15:4f:69:7e:cb:e3:e5:36:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:99:84:EE:A3:16:0F:75:81:04:2F:3D:86:CD:12:FF:2B:55:AD:2E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vpmE7qMWD3WBBC89hs0S_ytVrS4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:16:92:1e:29:81:e3:b4:a8:9c:83:66:fe:03:e1:0f:1f:90:
3f:c4:76:5d:28:55:10:9a:1f:ce:aa:91:f4:74:16:fa:d9:40:
72:38:fa:5a:c2:c9:0f:09:6a:22:f0:a9:32:a2:46:f3:b8:5b:
20:c9:eb:4d:2d:89:26:fc:e6:a4:e3:fd:9f:d4:3f:45:90:e0:
56:83:6b:af:4d:fa:23:47:6d:48:11:44:e6:62:4f:1e:15:72:
fe:ec:2c:57:f3:aa:35:3d:ea:39:88:9b:71:34:d1:7d:7a:01:
56:2f:6e:99:d7:de:0d:1a:6a:5f:91:1c:e8:ae:94:38:34:f3:
e4:93:30:95:73:e2:7a:d6:fd:67:5f:ed:4c:09:c2:e8:a0:bf:
30:4f:4c:74:c5:84:d6:ce:4f:27:a7:47:97:7f:2f:f2:27:a1:
ea:28:20:e6:7c:9d:ad:4e:50:c9:34:44:88:ea:5c:ba:2f:3c:
b9:95:34:3c:97:66:52:6f:94:79:ec:a8:5a:b3:3c:31:56:1c:
e6:29:f1:e8:c9:8d:dc:db:d4:d4:62:bd:83:67:e0:fe:8b:2a:
ca:09:c0:fb:20:6d:30:5f:8b:53:d2:ec:65:be:f0:86:9e:64:
ab:ef:7b:1a:04:be:a1:1f:14:eb:35:65:4b:49:65:58:67:50:
c6:2b:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org