Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wf2nizyHRBtaCC3901SU8Ebk0_s.roa
File: wf2nizyHRBtaCC3901SU8Ebk0_s.roa (raw, json)
Hash identifier: dhXXCQ54I50C/1AAEY01jJx4UwA90RVEyPgvKt3XXsg=
Subject key identifier: C1:FD:A7:8B:3C:87:44:1B:5A:08:2D:FD:D3:54:94:F0:46:E4:D3:FB
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C63
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wf2nizyHRBtaCC3901SU8Ebk0_s.roa
Signing time: Wed 29 Sep 2021 02:49:46 +0000
ROA not before: Wed 29 Sep 2021 02:49:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.67.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3171 (0xc63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C1FDA78B3C87441B5A082DFDD35494F046E4D3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:71:1d:37:68:cd:82:50:ae:e9:fa:67:ae:
7f:a0:d5:d0:a0:02:98:61:4f:82:45:43:0a:5f:5d:
16:5f:04:99:da:91:bb:d6:69:39:90:91:fa:26:b1:
c6:97:24:16:c0:19:e6:26:24:d7:83:bd:12:22:c7:
3e:2a:7d:18:be:24:93:d2:dc:94:5d:f3:bf:bf:f7:
c9:70:aa:35:ac:ea:55:37:a7:2e:ca:d4:bb:b9:c1:
40:a0:51:f2:30:9f:2e:2d:ea:7c:30:fe:b7:b7:44:
28:38:41:a1:fd:89:ec:f8:81:6d:ab:fb:f3:4e:f0:
5a:49:92:45:63:2a:df:61:b0:ce:bd:4e:dc:c7:2a:
36:e6:b3:df:92:16:b4:5a:9a:9e:ad:6a:48:48:a1:
79:8e:da:6b:dc:0a:7c:9c:94:0f:a8:d8:e8:04:93:
a1:21:76:9f:15:ee:e7:af:26:16:79:c1:18:47:1b:
02:dc:c0:b9:43:dd:82:0d:7d:f0:c2:c3:07:4e:bc:
fb:e1:9c:c3:54:cd:27:dc:91:d6:6e:62:7f:be:aa:
2a:8c:b6:af:0a:61:b3:dd:23:dd:4a:f5:2a:04:ad:
9a:d6:ca:6e:f3:4e:d0:23:6c:e6:86:a5:bb:96:85:
75:66:2c:5d:29:a8:41:e8:37:31:22:49:54:6a:27:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:A7:8B:3C:87:44:1B:5A:08:2D:FD:D3:54:94:F0:46:E4:D3:FB
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wf2nizyHRBtaCC3901SU8Ebk0_s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.208.0/20
Signature Algorithm: sha256WithRSAEncryption
94:4d:aa:11:36:0d:b5:5c:a3:2f:b0:b1:c0:8a:cd:65:bf:c5:
27:61:c1:ba:8f:95:d4:8a:49:b4:97:c4:c1:91:4f:ef:e9:de:
db:8a:40:ac:f3:0a:cd:bd:56:9b:0b:a1:ea:af:a8:f5:d9:c3:
cd:60:53:ea:93:ec:85:ac:ca:31:dd:b7:86:cc:d1:c0:35:d3:
fe:ae:ff:ce:0d:58:5d:85:59:36:c2:6b:56:24:b0:c9:42:01:
06:e9:bb:4a:cf:83:72:11:98:98:f3:b0:40:3d:88:64:ee:ca:
79:0d:bd:26:cc:a8:48:e4:e3:b9:78:9a:04:08:87:83:3c:0a:
85:fc:b9:e2:70:50:18:8e:0d:b9:2d:cd:76:10:dc:33:e4:43:
0e:5f:5e:f1:38:2b:04:9f:92:c4:68:69:2b:cc:de:b1:4d:be:
d1:27:27:ae:4b:55:ae:66:03:3e:36:f3:18:08:13:e2:d6:31:
5b:ac:82:4d:78:6a:65:31:a8:d9:27:05:4b:a3:ac:77:fd:36:
2f:f0:bb:9a:b5:aa:b7:da:b3:28:77:9b:2d:7d:8b:bb:58:9c:
65:26:c0:e7:46:00:00:e2:c3:0c:64:fb:08:f7:5d:d5:b1:f8:
5d:54:40:11:e9:80:67:19:f4:58:32:a4:76:4f:07:32:67:76:
6e:7d:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org