Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yev3xCpJJohpWGlzBkjcyq7_Gtc.roa
File: yev3xCpJJohpWGlzBkjcyq7_Gtc.roa (raw, json)
Hash identifier: x486xoHTMnZzow89QqL+og0w5blpj61Tufh9F230PrQ=
Subject key identifier: C9:EB:F7:C4:2A:49:26:88:69:58:69:73:06:48:DC:CA:AE:FF:1A:D7
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0ADC
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yev3xCpJJohpWGlzBkjcyq7_Gtc.roa
Signing time: Sun 07 Feb 2021 11:40:41 +0000
ROA not before: Sun 07 Feb 2021 11:40:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 203.77.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780 (0xadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:40:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C9EBF7C42A492688695869730648DCCAAEFF1AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:de:7e:97:41:07:b9:c3:d6:b6:b8:b5:f5:
a5:b2:a1:f1:55:95:7e:0e:74:7d:96:b7:f3:22:d2:
74:11:90:67:7f:6a:fb:58:d0:de:bd:f9:46:68:71:
8d:54:37:e2:4d:ab:29:ce:c8:73:75:88:fe:32:95:
ad:4a:14:9d:b7:dc:86:b2:81:7f:35:cd:a7:ea:38:
ea:38:b7:00:1d:f2:93:cd:09:57:3d:83:86:2b:70:
80:e4:25:47:b2:6b:93:5f:6b:13:9e:d2:16:57:5c:
97:a1:27:8f:d6:8e:ea:21:40:47:93:3b:18:e2:87:
a9:18:c4:16:58:57:a5:45:47:48:a2:83:51:a5:59:
71:9f:01:52:95:47:67:50:e4:63:fe:52:ad:6a:07:
67:20:dc:cf:b3:c4:96:be:00:0d:06:ef:43:db:20:
df:20:78:fc:9e:8b:26:e2:38:8c:d7:aa:85:b1:3a:
37:b9:97:a4:58:51:bf:e9:dd:87:88:42:5d:76:85:
42:c4:0d:4e:c8:24:af:6b:2d:a3:3f:c9:a9:1a:f1:
09:ce:5c:a0:15:58:02:68:20:48:13:13:1b:9d:c8:
41:9f:65:be:fe:3f:9a:6c:f1:24:6d:86:8b:14:85:
15:27:88:fd:3a:26:cb:4e:d3:1e:d6:c2:fc:97:15:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:F7:C4:2A:49:26:88:69:58:69:73:06:48:DC:CA:AE:FF:1A:D7
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yev3xCpJJohpWGlzBkjcyq7_Gtc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
31:13:e5:83:27:01:6e:57:ad:72:1e:bb:f5:30:dd:b1:15:2a:
fc:e9:67:47:c4:e5:58:bf:26:73:8c:ac:c5:c7:89:51:32:80:
37:7d:cc:15:2f:a4:57:fd:e9:b3:85:b8:5d:0c:30:8f:5a:a9:
ea:5f:71:02:15:15:19:1a:aa:93:c3:f7:c5:ad:ae:8c:7e:37:
85:be:2f:d5:dc:ab:1b:ac:ac:40:5e:6d:9e:86:6c:93:60:63:
1c:43:94:d9:a3:da:8d:98:47:94:0b:7b:d9:e8:4b:2a:61:fd:
67:53:be:bf:71:db:35:7b:8f:9e:a5:d2:df:ac:c3:34:2e:a4:
4a:b8:97:3c:27:0f:d4:16:03:cd:1a:a6:26:da:14:96:be:2e:
f3:1e:f8:bf:6a:24:6b:1c:bf:fd:52:c1:49:f8:aa:8a:30:da:
4a:b7:39:b4:2d:4c:2c:cf:ff:a2:53:c9:ba:af:1f:f5:e6:65:
ac:48:70:ba:40:40:11:e4:51:01:3f:ce:1b:41:49:39:1e:44:
81:e0:1d:19:00:92:00:85:b5:46:07:82:20:50:ad:12:86:1a:
d8:2c:94:c2:1e:7c:bc:15:d9:b7:ea:03:f7:29:ff:10:be:6c:
b9:ee:37:51:42:18:38:62:ef:9d:e7:99:0e:87:c2:64:d2:1f:
07:4f:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org