Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zWaHCkaRBVp4UaVROGET_ZA5xxM.roa
File: zWaHCkaRBVp4UaVROGET_ZA5xxM.roa (raw, json)
Hash identifier: b1cbNFO59Ue8wTo6wPdNyQBv2oPyf9V+oqi05qhRUBw=
Subject key identifier: CD:66:87:0A:46:91:05:5A:78:51:A5:51:38:61:13:FD:90:39:C7:13
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0805
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zWaHCkaRBVp4UaVROGET_ZA5xxM.roa
Signing time: Tue 29 Sep 2020 09:57:40 +0000
ROA not before: Tue 29 Sep 2020 09:57:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 49.216.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CD66870A4691055A7851A551386113FD9039C713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:d8:00:33:f9:13:8f:4d:f1:39:03:95:d6:
85:76:7e:c7:eb:84:ce:1c:9f:30:70:91:77:ef:79:
1a:04:ad:b5:77:68:83:60:a2:9c:45:4e:c3:78:f5:
69:b6:27:a5:7b:b6:db:19:df:99:07:c7:27:9b:e6:
e7:a7:1d:40:6f:c5:0b:13:27:cc:59:89:84:3c:2c:
b3:1c:b3:d7:fe:1b:33:b3:67:96:59:dc:d4:12:90:
09:54:6e:1e:f4:53:8b:76:f4:ed:12:e6:55:3f:9f:
11:ec:04:52:1d:12:1a:57:2e:6a:b9:5d:e5:3b:61:
a8:3b:27:9c:46:b7:b3:ae:89:da:cd:bf:43:b0:66:
84:13:bd:7e:51:56:26:f4:3c:b7:ab:f9:9a:23:2a:
78:f7:d3:a1:98:55:b6:0a:0c:c9:a3:9c:b4:97:6b:
d4:7c:99:60:62:0a:3a:a7:f8:a2:d1:88:19:38:e7:
06:ba:d3:3b:49:cc:13:0c:f9:c0:b6:98:c0:29:68:
f5:1f:4d:65:5f:11:db:a2:3c:3e:ad:f0:99:3f:78:
95:3e:dc:f6:fc:95:e9:51:a2:8a:64:26:1a:4f:ec:
bf:af:8a:65:50:61:5c:bb:c3:35:e2:42:70:80:d5:
82:ff:eb:66:4b:77:d8:17:a5:43:fa:33:39:59:10:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:87:0A:46:91:05:5A:78:51:A5:51:38:61:13:FD:90:39:C7:13
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zWaHCkaRBVp4UaVROGET_ZA5xxM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
36:44:d7:e0:6b:5c:e2:09:e0:af:cb:d1:70:39:f7:78:b8:d3:
b6:2f:e2:80:d4:9f:5c:52:a3:1a:78:1d:8e:e9:1d:70:07:5c:
d4:e2:59:af:33:9a:25:77:4a:39:c5:0a:b3:05:4b:22:da:09:
70:ad:d7:92:f3:c5:28:ae:95:65:dc:a1:9a:48:6f:b7:09:f5:
60:9c:a3:d4:02:7c:c7:c8:94:fb:7a:b8:89:26:e2:c4:e0:eb:
69:c8:2e:6d:5c:7d:18:f7:be:c2:e1:0a:6b:58:69:65:87:54:
50:c1:56:c3:b4:2d:fd:d3:88:31:8a:04:32:a8:91:ad:8b:5a:
ea:df:22:c1:0d:db:0a:19:d5:89:f5:74:02:4d:ce:a6:4a:a0:
3f:8d:3a:12:4d:a2:ff:d9:03:f0:83:0e:0d:e5:85:48:fa:de:
f9:85:f9:7b:b2:8e:19:d4:fe:4f:0e:89:25:80:6f:d9:7e:a6:
66:34:9a:c9:15:53:43:00:0a:a9:5a:1a:f9:4d:fb:b2:b9:e0:
9b:1f:42:5a:ba:41:26:c6:e6:21:73:14:27:b1:27:c6:0a:8c:
60:21:82:46:b9:86:f2:b3:d3:16:a7:bc:5f:67:fc:02:92:23:
b4:78:07:25:ac:bd:08:dd:5a:b5:d2:c4:df:ac:f4:54:60:ef:
95:0a:b3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:52 2025 by rpki-client