Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wHCrgO76WE8NeLPFIx4CoE3lYyg.roa
File: wHCrgO76WE8NeLPFIx4CoE3lYyg.roa (raw, json)
Hash identifier: yh8d0dcoa6l2pKsMmZhsf/yXV9fU18aGGYvh7M+exrQ=
Subject key identifier: C0:70:AB:80:EE:FA:58:4F:0D:78:B3:C5:23:1E:02:A0:4D:E5:63:28
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0CCD
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wHCrgO76WE8NeLPFIx4CoE3lYyg.roa
Signing time: Wed 29 Sep 2021 02:50:17 +0000
ROA not before: Wed 29 Sep 2021 02:50:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 60.199.110.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:50:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C070AB80EEFA584F0D78B3C5231E02A04DE56328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:56:ed:2d:54:92:96:24:ad:ac:f1:d8:1f:
b2:36:e0:a0:7f:5a:98:71:dc:b5:28:e4:11:f3:49:
0f:95:fb:9f:bc:78:91:96:5a:5f:58:f5:14:76:d5:
a1:98:ab:f9:06:71:f3:d6:c7:96:ff:c1:70:eb:13:
8e:18:a8:c2:f1:7b:a6:18:44:42:8c:da:88:c1:65:
d2:fa:e5:a6:62:92:ab:b9:1b:52:da:16:0f:ad:5d:
e7:a4:ff:49:97:26:4a:a1:38:22:91:17:ba:9d:0c:
db:d5:3b:b8:f8:ea:3b:59:4d:80:46:c6:a2:30:4d:
6c:fe:15:ec:56:a1:89:8e:bb:aa:cc:03:6f:f2:a0:
d4:31:c8:a1:14:f8:79:ab:2d:c3:6a:f1:b5:ce:3c:
0b:55:a1:a7:78:ac:87:53:e7:e1:70:a1:06:04:a7:
e3:c9:1d:59:1c:67:f6:36:3c:8b:00:c5:62:c8:7b:
04:67:dc:2b:98:ad:35:e3:99:cb:77:43:52:33:29:
6b:51:b9:a8:c1:6a:96:f7:0f:09:3c:aa:b4:6f:de:
82:92:91:73:b0:3f:d6:b3:b8:14:34:dc:c8:2d:f1:
ea:ce:13:d5:ca:82:77:d9:00:84:f1:30:55:d2:e2:
c1:00:e9:f1:a3:8e:0a:e3:46:cc:cd:a7:bd:f4:ab:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:AB:80:EE:FA:58:4F:0D:78:B3:C5:23:1E:02:A0:4D:E5:63:28
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wHCrgO76WE8NeLPFIx4CoE3lYyg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f2:df:8e:ba:87:65:5b:bd:58:57:c4:7f:e2:e9:24:95:51:
cb:f1:72:34:39:03:81:46:f5:54:a6:9f:c6:8e:29:84:08:4f:
42:2d:93:3b:e5:5e:f0:bd:46:bd:d0:ff:7e:05:25:90:eb:01:
d4:1f:09:f8:74:0c:a0:11:4a:da:65:7e:60:b1:6d:14:a4:e6:
0f:f0:3a:64:5f:ce:a6:aa:12:9b:ae:53:0b:ec:4a:31:fa:4d:
ce:66:dc:aa:0d:b2:68:9b:a9:19:ba:5d:88:18:32:53:68:86:
2b:3d:d4:20:3d:fc:09:43:06:36:d7:48:4f:17:d7:35:fc:c2:
2b:29:61:16:01:db:84:8e:a0:91:f4:64:fb:1a:94:40:91:aa:
24:f9:96:8c:cc:18:94:84:d8:cb:14:00:18:4b:f0:04:98:f9:
2c:2c:c0:6b:78:99:6e:72:d3:1f:e5:0b:63:9f:f2:e4:58:2b:
4d:89:c5:08:1e:2d:a3:89:73:b2:7b:d7:89:32:fa:79:35:33:
f5:3c:e8:11:78:90:31:aa:d4:93:86:5e:ae:22:45:6a:ff:94:
16:c8:d7:0f:dc:fb:95:a4:24:f7:c6:83:e8:71:31:2e:98:3e:
76:34:3f:c9:66:26:06:02:ff:8d:bc:12:c8:d2:ae:19:4a:52:
d6:a2:93:5d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjUwMTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEMwNzBBQjgwRUVGQTU4
NEYwRDc4QjNDNTIzMUUwMkEwNERFNTYzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNUlbtLVSSliStrPHYH7I24KB/Wphx3LUo5BHzSQ+V+5+8eJGW
Wl9Y9RR21aGYq/kGcfPWx5b/wXDrE44YqMLxe6YYREKM2ojBZdL65aZikqu5G1La
Fg+tXeek/0mXJkqhOCKRF7qdDNvVO7j46jtZTYBGxqIwTWz+FexWoYmOu6rMA2/y
oNQxyKEU+HmrLcNq8bXOPAtVoad4rIdT5+FwoQYEp+PJHVkcZ/Y2PIsAxWLIewRn
3CuYrTXjmct3Q1IzKWtRuajBapb3Dwk8qrRv3oKSkXOwP9azuBQ03Mgt8erOE9XK
gnfZAITxMFXS4sEA6fGjjgrjRszNp730q+65AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUwHCrgO76WE8NeLPFIx4CoE3lYygwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvd0hDcmdPNzZXRThOZUxQ
Rkl4NENvRTNsWXlnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzHbjANBgkqhkiG9w0BAQsFAAOCAQEAWvLfjrqHZVu9WFfEf+LpJJVRy/FyNDkD
gUb1VKafxo4phAhPQi2TO+Ve8L1GvdD/fgUlkOsB1B8J+HQMoBFK2mV+YLFtFKTm
D/A6ZF/OpqoSm65TC+xKMfpNzmbcqg2yaJupGbpdiBgyU2iGKz3UID38CUMGNtdI
TxfXNfzCKylhFgHbhI6gkfRk+xqUQJGqJPmWjMwYlITYyxQAGEvwBJj5LCzAa3iZ
bnLTH+ULY5/y5FgrTYnFCB4to4lzsnvXiTL6eTUz9TzoEXiQMarUk4ZeriJFav+U
FsjXD9z7laQk98aD6HExLpg+djQ/yWYmBgL/jbwSyNKuGUpS1qKTXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org