Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zq6OqGrWNoLDa63eZd-IZnBPL70.roa
File: zq6OqGrWNoLDa63eZd-IZnBPL70.roa (raw, json)
Hash identifier: stZmue8kL14Td0ND5LCcc31JwpGVOR2SHVc6U6Il0t8=
Subject key identifier: CE:AE:8E:A8:6A:D6:36:82:C3:6B:AD:DE:65:DF:88:66:70:4F:2F:BD
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FEB
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zq6OqGrWNoLDa63eZd-IZnBPL70.roa
Signing time: Fri 01 Sep 2023 09:37:31 +0000
ROA not before: Fri 01 Sep 2023 09:37:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 13335
IP address blocks: 210.17.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4075 (0xfeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CEAE8EA86AD63682C36BADDE65DF8866704F2FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:98:be:f6:5e:39:0b:07:6a:36:27:43:e7:
dd:b3:5b:c5:18:d6:b8:e8:f1:3f:bb:b5:32:b8:4e:
24:dc:df:52:d5:b1:06:43:9a:ad:ea:15:8f:e8:e0:
e0:85:55:2a:65:f2:6a:ec:58:02:42:e0:5d:84:fa:
b8:fc:ec:a7:aa:97:17:7b:ce:a7:06:01:48:90:7b:
46:97:b0:ac:2f:de:65:1c:eb:8c:14:03:b4:92:d8:
f4:2f:01:3f:e1:c8:c4:3b:90:a3:99:f0:73:fa:87:
bd:c1:cb:ea:8f:8e:c7:0c:72:a2:08:7f:0a:33:66:
29:06:b5:dc:e1:be:ee:1f:db:41:84:4c:c3:8e:15:
60:60:6a:b8:f1:5e:bb:cf:b5:8d:74:07:dd:ed:e5:
4b:63:44:48:08:3e:8a:57:fa:5a:49:59:b3:b1:ad:
cb:6b:94:96:bf:98:7b:9f:8d:6a:98:e5:11:76:eb:
54:fa:bd:76:28:07:ca:72:0b:56:be:90:b2:2e:e9:
04:25:8e:20:04:29:78:53:b1:63:d3:5e:66:72:68:
cf:8c:67:b8:a7:fe:a9:57:05:34:9a:b2:c1:e6:48:
72:dc:81:6b:c8:d9:4e:79:a1:6c:36:b4:68:28:40:
c5:06:63:fb:7c:f1:10:ea:8e:d5:92:83:52:5e:77:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:8E:A8:6A:D6:36:82:C3:6B:AD:DE:65:DF:88:66:70:4F:2F:BD
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zq6OqGrWNoLDa63eZd-IZnBPL70.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:33:ce:08:5a:ce:9a:28:16:ad:ad:0f:66:cc:25:b0:cd:a1:
03:c1:95:f5:25:da:f9:d6:d3:2f:d6:16:a5:e9:52:18:ba:4b:
a3:bd:5f:af:15:19:83:5d:69:a3:fa:7c:90:03:0c:18:51:79:
9a:ce:f4:0b:69:aa:a0:ad:e3:6b:0c:8e:26:9d:49:2a:5c:91:
03:bb:45:ac:3e:50:a3:ee:73:23:18:ea:8b:7a:79:cf:fd:6a:
9e:f7:c8:97:d2:b8:18:15:de:bc:86:e1:04:66:10:cc:9e:a1:
ad:13:02:b1:ed:92:39:7c:6b:af:ee:9b:09:10:7a:61:0b:34:
b4:66:18:af:ed:7b:ae:fe:ce:92:fc:40:20:dd:45:b0:c1:bc:
2c:c4:38:f6:3d:59:9a:77:3d:50:99:a4:11:2b:11:29:91:4b:
d3:8c:ec:c2:91:6b:e1:fb:2a:b5:58:a1:b3:9b:5f:91:5b:4b:
f4:ff:07:92:c9:e4:8a:c7:21:2a:cf:0d:ad:1b:24:40:53:ff:
1d:af:f1:7d:33:92:bd:aa:49:4f:9c:2d:20:7a:b4:2c:47:87:
a2:d4:b8:55:7a:2c:e6:53:e3:41:4e:f1:26:fc:a7:ce:01:09:
5a:9b:b5:af:6e:e1:8f:b5:70:8c:0c:1a:93:b3:6e:51:fb:cc:
3c:e7:ab:4d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENFQUU4RUE4NkFENjM2
ODJDMzZCQURERTY1REY4ODY2NzA0RjJGQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0eJi+9l45CwdqNidD592zW8UY1rjo8T+7tTK4TiTc31LVsQZD
mq3qFY/o4OCFVSpl8mrsWAJC4F2E+rj87Keqlxd7zqcGAUiQe0aXsKwv3mUc64wU
A7SS2PQvAT/hyMQ7kKOZ8HP6h73By+qPjscMcqIIfwozZikGtdzhvu4f20GETMOO
FWBgarjxXrvPtY10B93t5UtjREgIPopX+lpJWbOxrctrlJa/mHufjWqY5RF261T6
vXYoB8pyC1a+kLIu6QQljiAEKXhTsWPTXmZyaM+MZ7in/qlXBTSassHmSHLcgWvI
2U55oWw2tGgoQMUGY/t88RDqjtWSg1Jed+MpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUzq6OqGrWNoLDa63eZd+IZnBPL70wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvenE2T3FHcldOb0xEYTYz
ZVpkLUlabkJQTDcwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRLDANBgkqhkiG9w0BAQsFAAOCAQEAPzPOCFrOmigWra0PZswlsM2hA8GV9SXa
+dbTL9YWpelSGLpLo71frxUZg11po/p8kAMMGFF5ms70C2mqoK3jawyOJp1JKlyR
A7tFrD5Qo+5zIxjqi3p5z/1qnvfIl9K4GBXevIbhBGYQzJ6hrRMCse2SOXxrr+6b
CRB6YQs0tGYYr+17rv7OkvxAIN1FsMG8LMQ49j1Zmnc9UJmkESsRKZFL04zswpFr
4fsqtVihs5tfkVtL9P8HksnkischKs8NrRskQFP/Ha/xfTOSvapJT5wtIHq0LEeH
otS4VXos5lPjQU7xJvynzgEJWpu1r27hj7VwjAwak7NuUfvMPOerTQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:01 2025 by rpki-client