Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wqzz8WtF8uBoDqh8dhXsXq_VcXA.roa
File: wqzz8WtF8uBoDqh8dhXsXq_VcXA.roa (raw, json)
Hash identifier: rkDeg7G/6tZO3kR5vxkj3AtLE0KXOb2FfuD2CzabOns=
Subject key identifier: C2:AC:F3:F1:6B:45:F2:E0:68:0E:A8:7C:76:15:EC:5E:AF:D5:71:70
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0A84
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wqzz8WtF8uBoDqh8dhXsXq_VcXA.roa
Signing time: Sun 07 Feb 2021 11:36:29 +0000
ROA not before: Sun 07 Feb 2021 11:36:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 203.77.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692 (0xa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:36:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C2ACF3F16B45F2E0680EA87C7615EC5EAFD57170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:9d:14:f4:04:43:36:dd:3a:0c:22:27:86:
a8:1e:29:b1:a3:22:ec:13:85:c1:74:96:c7:c2:81:
2a:be:c8:e0:9f:f8:d2:df:51:16:06:81:6b:52:32:
f7:b9:53:61:71:fd:30:5b:4e:05:45:72:1f:44:9a:
1d:fd:f2:d3:79:61:b4:d8:89:06:cb:f2:22:2d:26:
38:68:05:f4:e8:89:fb:9c:12:e2:78:08:4f:28:c4:
d9:6d:2d:f3:d4:48:42:e1:3d:28:2c:be:b2:5f:e4:
50:dc:13:12:d2:21:3a:4e:b3:bf:f2:fa:d0:6e:e3:
17:cf:05:d4:15:95:df:d4:ef:68:86:f5:53:c0:19:
09:70:0c:55:8a:05:fb:bf:70:de:13:43:f6:d9:dc:
e0:f7:e9:c1:55:e8:7c:84:37:04:b7:37:f8:68:02:
3d:ab:29:2d:4d:4a:c2:a3:09:40:e3:21:11:55:38:
d2:a3:21:0f:20:40:c3:95:43:4b:07:32:75:48:cd:
ab:16:2f:29:c6:f4:44:d3:2d:ed:4a:1c:7b:eb:c5:
e9:aa:8c:5f:53:9b:f6:68:6a:94:d6:79:35:88:c3:
48:63:18:b6:77:54:ec:1c:26:a6:9c:78:87:bf:39:
93:5a:14:e9:85:8c:a7:a3:c7:de:c4:47:00:37:1d:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:F3:F1:6B:45:F2:E0:68:0E:A8:7C:76:15:EC:5E:AF:D5:71:70
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wqzz8WtF8uBoDqh8dhXsXq_VcXA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.0.0/19
Signature Algorithm: sha256WithRSAEncryption
41:b9:4f:a2:e5:1c:ac:40:50:bc:33:96:40:41:f2:ce:fc:b8:
c6:38:a7:d6:3b:ef:de:48:85:9c:fa:0b:b1:8f:76:53:33:27:
9c:61:78:eb:41:26:58:da:5b:36:a9:3c:4f:e5:8a:3f:76:bf:
13:60:07:33:92:4b:5a:a5:f2:9f:94:63:31:b6:ee:af:e8:5d:
45:8d:42:00:f2:3e:cb:0d:7a:76:39:ef:e5:87:61:bf:dc:28:
30:b7:03:30:2c:75:67:36:bb:da:c8:60:ad:1c:26:3e:3c:11:
e9:bb:72:fa:b7:3f:4a:4c:18:b6:50:32:bc:19:1b:7c:ba:2d:
ea:73:03:9e:c8:4c:a8:67:25:15:29:af:ca:17:72:f3:50:f9:
bf:c0:8c:8c:2b:b9:a8:4a:65:61:48:f7:82:c9:8e:f9:fc:a0:
d2:24:1e:a6:19:4b:52:ad:a2:dd:88:c9:30:dc:e8:41:24:28:
78:78:83:ea:c5:36:71:24:c2:98:3f:b2:dd:32:bb:15:3f:00:
0c:5c:41:36:c0:a2:1b:c7:fb:16:a5:e9:a0:0a:42:43:15:e6:
cb:2d:3c:7a:3a:32:c5:89:f2:3f:bd:70:e9:a1:0c:39:b7:a2:
d5:5f:01:b9:53:73:c2:9f:83:e2:d9:8a:1d:01:10:c4:a4:0b:
74:2f:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org