Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zThOi_17sXMVjMzl7v5NVXcdjhA.roa
File: zThOi_17sXMVjMzl7v5NVXcdjhA.roa (raw, json)
Hash identifier: xANZTOFRLUgGoC2ArBdQubyuRRCVnpEeC83Va48KINI=
Subject key identifier: CD:38:4E:8B:FD:7B:B1:73:15:8C:CC:E5:EE:FE:4D:55:77:1D:8E:10
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B0A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zThOi_17sXMVjMzl7v5NVXcdjhA.roa
Signing time: Sun 07 Feb 2021 13:08:31 +0000
ROA not before: Sun 07 Feb 2021 13:08:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.19.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2826 (0xb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:08:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CD384E8BFD7BB173158CCCE5EEFE4D55771D8E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:15:ec:f8:71:1b:5e:ba:cb:e7:dd:7f:4f:
d9:d1:9e:f4:c9:3f:17:03:0e:e5:c7:ea:3b:25:4b:
d0:e3:e2:e6:c7:3b:8a:91:c8:e5:e8:06:76:e0:8a:
74:00:a6:12:c6:ac:52:8e:e9:a7:e0:84:7b:27:71:
91:8a:82:b6:e8:c4:99:af:66:a7:50:2c:bf:21:82:
8f:d7:10:62:18:03:65:ba:3b:6d:43:03:70:fb:73:
80:8b:73:ef:12:26:52:78:36:c6:46:4b:64:e7:bf:
2e:78:34:20:9e:73:dc:ad:a1:d4:08:13:11:cf:f7:
41:12:85:c2:b2:4d:54:a3:72:ae:2a:6b:25:ac:39:
06:4b:11:e0:77:90:bb:11:34:f8:6d:58:44:67:24:
96:08:3d:70:56:0e:59:70:a8:ab:54:66:12:5f:ac:
92:19:91:fa:3e:23:4c:f5:54:ea:f3:09:82:b5:91:
fc:b1:5b:e4:89:e1:b6:c1:e1:5e:93:7b:d4:d3:cf:
ea:e6:d9:11:49:a6:c0:d4:5c:10:6c:91:00:55:db:
ff:4b:61:99:9a:dd:80:42:2f:fe:bc:2e:cf:54:81:
cf:41:e7:77:ab:88:04:e0:d9:1f:42:ba:24:e0:a9:
29:1f:89:52:b3:36:d6:84:81:c0:05:36:96:58:bc:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:38:4E:8B:FD:7B:B1:73:15:8C:CC:E5:EE:FE:4D:55:77:1D:8E:10
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zThOi_17sXMVjMzl7v5NVXcdjhA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.19.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cd:35:81:86:06:a7:e8:60:fc:64:7d:89:f2:52:d7:51:7d:
ff:97:72:2a:19:a5:48:7b:ca:39:f6:a5:2a:c4:2b:29:8c:58:
fa:9e:84:97:85:db:b5:c0:36:b3:58:d4:12:fb:2a:a8:08:15:
92:89:49:b2:28:cd:60:ba:67:07:d9:6a:3d:33:f7:3a:18:25:
a2:6a:a7:01:16:7f:06:66:23:23:2a:e6:f0:07:45:7b:c9:fd:
fe:b7:d7:70:d2:3c:2d:8b:e4:f4:68:e2:8c:71:7d:98:84:e5:
3b:50:0f:1c:6a:a0:d2:ea:31:5c:aa:6c:45:a8:60:1d:d1:77:
d7:04:c6:9f:f0:bd:4f:f6:af:0f:e8:6b:c8:dd:2a:52:47:47:
b2:18:1c:71:a7:d7:b1:9c:bb:e7:dd:21:a2:83:dd:3a:35:cd:
85:b8:77:a9:7e:98:3e:39:ff:13:5f:b0:46:68:b0:a9:e5:1e:
9d:34:79:ee:86:53:ab:c4:a9:bf:bb:99:f1:38:16:de:63:59:
44:cd:ff:99:06:06:33:0d:a9:5e:8b:3e:ff:da:6b:73:33:92:
84:71:7f:e6:c2:f5:38:e4:e1:96:48:ac:64:5e:1b:05:62:6e:
5d:83:e3:d9:33:9c:1c:9a:70:b0:27:77:a5:1b:94:63:49:db:
e2:5e:8d:9a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MzA4MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENEMzg0RThCRkQ3QkIx
NzMxNThDQ0NFNUVFRkU0RDU1NzcxRDhFMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTDxXs+HEbXrrL591/T9nRnvTJPxcDDuXH6jslS9Dj4ubHO4qR
yOXoBnbginQAphLGrFKO6afghHsncZGKgrboxJmvZqdQLL8hgo/XEGIYA2W6O21D
A3D7c4CLc+8SJlJ4NsZGS2Tnvy54NCCec9ytodQIExHP90EShcKyTVSjcq4qayWs
OQZLEeB3kLsRNPhtWERnJJYIPXBWDllwqKtUZhJfrJIZkfo+I0z1VOrzCYK1kfyx
W+SJ4bbB4V6Te9TTz+rm2RFJpsDUXBBskQBV2/9LYZma3YBCL/68Ls9Ugc9B53er
iATg2R9CuiTgqSkfiVKzNtaEgcAFNpZYvN3pAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUzThOi/17sXMVjMzl7v5NVXcdjhAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvelRoT2lfMTdzWE1Wak16
bDd2NU5WWGNkamhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIREzANBgkqhkiG9w0BAQsFAAOCAQEABc01gYYGp+hg/GR9ifJS11F9/5dyKhml
SHvKOfalKsQrKYxY+p6El4XbtcA2s1jUEvsqqAgVkolJsijNYLpnB9lqPTP3Ohgl
omqnARZ/BmYjIyrm8AdFe8n9/rfXcNI8LYvk9GjijHF9mITlO1APHGqg0uoxXKps
RahgHdF31wTGn/C9T/avD+hryN0qUkdHshgccafXsZy7590hooPdOjXNhbh3qX6Y
Pjn/E1+wRmiwqeUenTR57oZTq8Spv7uZ8TgW3mNZRM3/mQYGMw2pXos+/9prczOS
hHF/5sL1OOThlkisZF4bBWJuXYPj2TOcHJpwsCd3pRuUY0nb4l6Nmg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org