Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zKtLqnPRXafRopnsNGkDtw6E0BA.roa
File: zKtLqnPRXafRopnsNGkDtw6E0BA.roa (raw, json)
Hash identifier: x8hpGXLozSkP3eAz7jj49bX3SwbFKBFlxXl469Z0yuA=
Subject key identifier: CC:AB:4B:AA:73:D1:5D:A7:D1:A2:99:EC:34:69:03:B7:0E:84:D0:10
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C78
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zKtLqnPRXafRopnsNGkDtw6E0BA.roa
Signing time: Wed 29 Sep 2021 02:49:53 +0000
ROA not before: Wed 29 Sep 2021 02:49:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24158
IP address blocks: 49.216.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3192 (0xc78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CCAB4BAA73D15DA7D1A299EC346903B70E84D010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:3f:37:43:53:30:25:41:2c:80:4f:e1:52:
45:2c:45:ea:f2:cc:b7:91:fd:8f:e6:a7:00:0f:16:
55:ca:7f:bf:85:bf:6c:2a:e2:5f:a2:fe:f6:00:1b:
c9:bd:4d:23:88:5c:82:1b:f7:ff:a6:ea:c0:da:29:
3d:d0:79:47:c7:d0:5e:ad:92:e6:c1:d7:6f:6a:51:
c3:83:20:ab:08:91:b9:1d:3e:59:28:c4:3f:fa:4e:
bd:fd:1b:9d:e0:88:0e:56:87:a0:38:c5:5a:f6:ab:
73:40:86:3d:6d:1a:04:fd:2b:c5:a6:35:a7:f1:23:
7d:3e:92:20:03:90:dc:c4:43:11:cf:1d:6e:6b:69:
ff:43:e4:ad:cd:ed:0c:d8:d9:4f:f3:fd:d9:c1:78:
cf:24:44:68:e5:92:f4:67:fe:27:82:19:cf:02:e9:
b0:1f:b8:35:48:78:73:5a:96:17:92:05:82:03:bc:
3e:92:31:75:1c:b8:69:b8:60:99:0a:50:48:ad:e5:
9e:04:13:e6:b7:0b:97:17:7a:52:6d:8f:db:52:5c:
e4:be:d5:7c:2c:17:ec:38:c8:e6:3d:54:a0:cb:40:
1e:e8:d7:16:8e:82:a8:f0:7e:9a:f6:26:b9:9f:ab:
30:3a:44:9c:84:3d:81:f1:fd:ec:dd:bb:8a:c3:13:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:4B:AA:73:D1:5D:A7:D1:A2:99:EC:34:69:03:B7:0E:84:D0:10
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zKtLqnPRXafRopnsNGkDtw6E0BA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
6b:40:35:ea:13:39:a8:0e:ae:c7:02:2e:95:c9:68:1c:0a:8b:
8e:15:35:60:b0:5c:43:a3:91:73:f9:d1:70:04:d1:51:0a:ce:
e7:26:b8:d9:d8:84:23:12:71:db:23:5b:1f:19:48:83:a6:ef:
93:91:e3:cd:38:54:ae:99:a7:22:56:db:19:b1:45:51:74:33:
af:1f:e6:be:a3:e6:3d:28:38:a5:e9:0c:17:c7:12:2c:b7:40:
28:3f:d5:70:58:0f:76:00:5d:65:8a:ca:e5:ef:95:89:eb:91:
53:0f:6b:54:0c:c6:8e:8a:68:32:88:2d:ae:be:31:b8:be:1c:
e8:23:ac:fd:bf:b5:1d:b8:72:2a:6f:71:13:07:e4:75:ae:2a:
e2:50:28:ba:3e:56:f7:19:c2:ff:27:44:d8:34:80:53:8e:ea:
5a:7c:ca:1c:53:11:c1:4e:7c:ca:ab:fe:7d:18:41:88:d4:4d:
64:32:f4:fc:e0:63:cf:45:ee:55:13:e5:c5:fc:9c:ed:15:9c:
3d:85:de:3a:a2:e7:b5:89:05:20:87:3c:dc:df:53:66:07:f2:
89:23:cd:f1:88:a7:38:5f:36:9b:58:e5:46:64:89:fb:4e:c0:
0e:0a:03:58:7a:70:50:26:bc:c9:dd:6c:48:6e:ff:6e:b8:18:
fa:a7:e9:19
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjQ5NTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKENDQUI0QkFBNzNEMTVE
QTdEMUEyOTlFQzM0NjkwM0I3MEU4NEQwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhHD83Q1MwJUEsgE/hUkUsReryzLeR/Y/mpwAPFlXKf7+Fv2wq
4l+i/vYAG8m9TSOIXIIb9/+m6sDaKT3QeUfH0F6tkubB129qUcODIKsIkbkdPlko
xD/6Tr39G53giA5Wh6A4xVr2q3NAhj1tGgT9K8WmNafxI30+kiADkNzEQxHPHW5r
af9D5K3N7QzY2U/z/dnBeM8kRGjlkvRn/ieCGc8C6bAfuDVIeHNalheSBYIDvD6S
MXUcuGm4YJkKUEit5Z4EE+a3C5cXelJtj9tSXOS+1XwsF+w4yOY9VKDLQB7o1xaO
gqjwfpr2JrmfqzA6RJyEPYHx/ezdu4rDE7jjAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUzKtLqnPRXafRopnsNGkDtw6E0BAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvekt0THFuUFJYYWZSb3Bu
c05Ha0R0dzZFMEJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AjHYMA0GCSqGSIb3DQEBCwUAA4IBAQBrQDXqEzmoDq7HAi6VyWgcCouOFTVgsFxD
o5Fz+dFwBNFRCs7nJrjZ2IQjEnHbI1sfGUiDpu+TkePNOFSumaciVtsZsUVRdDOv
H+a+o+Y9KDil6QwXxxIst0AoP9VwWA92AF1lisrl75WJ65FTD2tUDMaOimgyiC2u
vjG4vhzoI6z9v7UduHIqb3ETB+R1ririUCi6Plb3GcL/J0TYNIBTjupafMocUxHB
TnzKq/59GEGI1E1kMvT84GPPRe5VE+XF/JztFZw9hd46oue1iQUghzzc31NmB/KJ
I83xiKc4XzabWOVGZIn7TsAOCgNYenBQJrzJ3WxIbv9uuBj6p+kZ
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:34 2025 by rpki-client