Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yEfGdxMUxXlVjeqxhTLrnxJhPRM.roa
File: yEfGdxMUxXlVjeqxhTLrnxJhPRM.roa (raw, json)
Hash identifier: 7bHMP/91ykhzwUIeZ3lZXRW/8gbarUU9hiPL2cRfaEU=
Subject key identifier: C8:47:C6:77:13:14:C5:79:55:8D:EA:B1:85:32:EB:9F:12:61:3D:13
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yEfGdxMUxXlVjeqxhTLrnxJhPRM.roa
Signing time: Thu 15 Sep 2022 02:47:16 +0000
ROA not before: Thu 15 Sep 2022 02:47:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 210.17.13.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C847C6771314C579558DEAB18532EB9F12613D13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:7c:1a:6b:4e:34:2d:00:49:dd:52:f4:1d:
90:e0:3c:de:b8:31:99:7f:e4:c5:a9:80:89:36:81:
65:f1:91:3e:fb:59:c7:ec:74:1d:4f:43:02:f9:eb:
f9:42:c1:8d:9e:f3:45:a1:a1:8e:b7:ac:a7:63:ab:
01:0a:00:85:b4:2a:ce:d3:96:a3:3b:ae:c0:6b:70:
84:91:91:57:29:50:aa:51:ef:88:d1:34:f1:25:61:
d3:85:c0:04:68:55:da:88:01:21:ab:a6:c5:66:96:
67:cd:f5:be:c1:ce:01:44:86:10:f2:67:29:ad:ae:
06:fb:33:77:35:24:5a:96:73:9e:9a:e5:ce:4c:e8:
53:95:65:68:94:a5:0c:d3:70:c7:f3:fa:5b:a0:11:
18:c0:85:a2:b6:e1:8c:41:f0:54:d3:60:98:c1:88:
91:bb:eb:48:73:c6:54:39:6a:00:40:d9:af:f9:fa:
f5:b4:91:27:53:cb:c9:4d:cd:88:54:38:53:71:db:
d2:e1:53:42:d8:5c:1e:59:7d:3c:6e:e9:64:a9:21:
0e:b8:33:e1:73:7a:d3:2a:f8:23:59:f2:b6:b7:a5:
a2:a5:d7:b5:a8:44:69:44:c1:74:1b:df:3c:e7:66:
b6:9e:1f:b4:12:10:75:62:ca:81:0e:86:52:54:23:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:47:C6:77:13:14:C5:79:55:8D:EA:B1:85:32:EB:9F:12:61:3D:13
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yEfGdxMUxXlVjeqxhTLrnxJhPRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.13.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:89:e0:ea:05:14:0a:aa:d7:15:ce:b8:92:a1:e0:51:36:44:
7f:13:dc:03:ff:5b:c5:6b:08:42:88:ca:ad:26:f5:71:8c:99:
16:8f:d7:26:5b:a4:98:7e:96:36:85:13:8c:ab:28:ba:fd:78:
bc:7b:b7:e3:db:6e:ea:7b:cb:31:97:30:68:5e:65:7f:d1:2d:
db:04:d1:dd:03:c0:42:59:6a:12:84:df:48:b4:06:2a:00:bc:
2a:62:a1:57:03:40:f7:44:f3:b7:4c:9d:20:63:ff:bc:c5:e0:
41:f7:8c:21:37:23:23:16:11:b9:28:f0:ed:3b:08:42:42:18:
2f:38:95:79:76:d6:4d:84:74:55:c7:98:e0:ca:1f:b3:7b:86:
f0:e4:9b:68:78:25:eb:21:e2:3b:e6:13:29:7f:db:85:a1:63:
9d:2e:22:37:0f:70:7b:92:ad:b0:b2:02:08:72:f5:ca:c8:ce:
32:20:b9:4e:69:ce:2f:30:46:28:22:fb:f2:7e:fb:7d:9e:25:
e4:80:dc:a8:4f:2a:0b:78:11:ea:1b:d8:b3:5b:25:ea:b8:f1:
aa:b2:3f:f6:8a:47:a2:bd:44:9a:7c:aa:30:03:d7:f8:2d:18:
4a:2a:c8:7f:76:a8:77:47:73:36:98:a6:a4:bb:c4:f8:6a:cc:
21:41:1a:f1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM4NDdDNjc3MTMxNEM1
Nzk1NThERUFCMTg1MzJFQjlGMTI2MTNEMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZCHwaa040LQBJ3VL0HZDgPN64MZl/5MWpgIk2gWXxkT77Wcfs
dB1PQwL56/lCwY2e80WhoY63rKdjqwEKAIW0Ks7TlqM7rsBrcISRkVcpUKpR74jR
NPElYdOFwARoVdqIASGrpsVmlmfN9b7BzgFEhhDyZymtrgb7M3c1JFqWc56a5c5M
6FOVZWiUpQzTcMfz+lugERjAhaK24YxB8FTTYJjBiJG760hzxlQ5agBA2a/5+vW0
kSdTy8lNzYhUOFNx29LhU0LYXB5ZfTxu6WSpIQ64M+FzetMq+CNZ8ra3paKl17Wo
RGlEwXQb3zznZraeH7QSEHViyoEOhlJUI6QdAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUyEfGdxMUxXlVjeqxhTLrnxJhPRMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQveUVmR2R4TVV4WGxWamVx
eGhUTHJueEpoUFJNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRDTANBgkqhkiG9w0BAQsFAAOCAQEAH4ng6gUUCqrXFc64kqHgUTZEfxPcA/9b
xWsIQojKrSb1cYyZFo/XJlukmH6WNoUTjKsouv14vHu349tu6nvLMZcwaF5lf9Et
2wTR3QPAQllqEoTfSLQGKgC8KmKhVwNA90Tzt0ydIGP/vMXgQfeMITcjIxYRuSjw
7TsIQkIYLziVeXbWTYR0VceY4Mofs3uG8OSbaHgl6yHiO+YTKX/bhaFjnS4iNw9w
e5KtsLICCHL1ysjOMiC5TmnOLzBGKCL78n77fZ4l5IDcqE8qC3gR6hvYs1sl6rjx
qrI/9opHor1EmnyqMAPX+C0YSirIf3aod0dzNpimpLvE+GrMIUEa8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org