Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zVqyS7UCXycigZER_8Wnr5hp6G0.roa
File: zVqyS7UCXycigZER_8Wnr5hp6G0.roa (raw, json)
Hash identifier: Ww0TlBVSX+xbxgxBoxzFU3zeaYxJQu5+9j3eV3wPC0o=
Subject key identifier: CD:5A:B2:4B:B5:02:5F:27:22:81:91:11:FF:C5:A7:AF:98:69:E8:6D
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zVqyS7UCXycigZER_8Wnr5hp6G0.roa
Signing time: Thu 15 Sep 2022 02:46:52 +0000
ROA not before: Thu 15 Sep 2022 02:46:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 210.62.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CD5AB24BB5025F2722819111FFC5A7AF9869E86D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:60:3f:8c:e7:85:40:7d:b5:ba:72:5f:77:
27:2a:3c:0f:00:8b:03:31:33:c7:77:cb:aa:1b:49:
9c:1c:0e:bd:5f:ee:0b:25:d5:bb:0a:d3:92:d5:cf:
2a:9e:d1:37:95:dc:e6:22:51:bf:0b:b5:ff:be:20:
23:af:b5:08:b9:3d:6d:02:a6:b9:09:60:9a:0b:2a:
43:5a:be:3e:b3:9f:08:a6:78:80:d9:01:6a:80:9d:
3c:4e:1c:c4:17:c8:4e:52:7a:9f:7a:7b:71:b5:56:
79:8d:08:5a:cf:52:89:0f:51:a6:63:06:e4:a5:e7:
0a:51:eb:4a:e8:9a:33:d0:b0:d3:c1:66:9a:1b:dc:
71:6f:38:f5:ef:ac:22:4f:ab:69:4e:d5:11:2f:a1:
aa:43:ec:99:30:3a:02:69:f7:10:f5:4b:3a:f8:18:
6d:09:72:dc:ac:aa:2a:bc:c3:49:22:0c:50:41:3a:
3b:52:7a:2c:d4:4e:30:60:b7:18:07:ed:fe:55:b8:
13:e4:38:3a:64:bd:99:2b:da:70:27:dd:84:0c:99:
e0:0f:47:1d:e2:b9:8c:a2:91:02:98:f6:22:8f:7c:
b8:22:ec:5d:01:e3:df:12:3b:42:18:61:81:ac:0e:
de:2c:14:52:b9:9b:0e:53:8b:40:21:6b:23:85:48:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:B2:4B:B5:02:5F:27:22:81:91:11:FF:C5:A7:AF:98:69:E8:6D
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zVqyS7UCXycigZER_8Wnr5hp6G0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.0.0/18
Signature Algorithm: sha256WithRSAEncryption
72:e7:23:09:e4:13:85:41:b0:aa:e8:77:54:ed:39:78:fd:ac:
91:e7:c1:f8:af:6c:7a:18:88:1d:19:51:4a:1c:ae:14:f3:89:
55:b8:86:8c:d4:5b:e8:2d:16:e6:c9:aa:ff:af:31:36:b8:d6:
3f:42:bd:13:8c:53:9e:3b:02:b6:e6:27:2c:85:85:88:af:cd:
90:e9:3c:be:93:b1:5f:df:fc:63:71:71:e6:c4:11:61:40:80:
2b:d4:33:27:7c:2e:4d:6f:28:4a:3e:c1:2a:a8:e7:d6:0c:8c:
d8:43:44:f0:54:18:66:db:6d:87:52:e8:44:60:c5:ef:fa:96:
8d:03:c9:26:02:76:02:97:a2:39:f2:e7:d9:3a:16:2b:31:b9:
77:43:52:4b:cf:84:82:af:a5:1d:b8:6b:99:1f:b8:39:d8:74:
ff:77:1d:2c:1a:99:3f:53:37:ad:d4:02:61:79:53:9c:23:5e:
d7:fb:1e:1d:9c:90:07:47:8e:41:75:00:5e:20:ef:f4:d4:d3:
2e:6f:72:40:57:c6:52:c5:b4:94:6e:72:c5:88:aa:9d:f6:17:
15:b3:87:97:87:4d:eb:c0:38:55:f0:e9:20:c4:65:49:84:e2:
f6:54:17:f3:b6:61:07:f9:fe:22:c8:60:01:3b:5d:b2:0d:61:
b1:ce:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:37 2025 by rpki-client