Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATVISP/TVDow1sz0dC-iLmtTE5mawqTe5k.roa
File: TVDow1sz0dC-iLmtTE5mawqTe5k.roa (raw, json)
Hash identifier: hmrv5sBp1kiMcHEGrhacAZv8DMw3FyFcpo5e+tXgjwE=
Subject key identifier: 4D:50:E8:C3:5B:33:D1:D0:BE:88:B9:AD:4C:4E:66:6B:0A:93:7B:99
Certificate issuer: /CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Certificate serial: 08FB
Authority key identifier: BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/TVDow1sz0dC-iLmtTE5mawqTe5k.roa
Signing time: Wed 29 Sep 2021 02:49:32 +0000
ROA not before: Wed 29 Sep 2021 02:49:32 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 43.248.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2299 (0x8fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Validity
Not Before: Sep 29 02:49:32 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4D50E8C35B33D1D0BE88B9AD4C4E666B0A937B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:11:b4:bb:1b:bf:b9:a0:40:0a:fa:56:12:
f2:02:81:2c:b4:10:e9:35:bd:f1:27:db:3a:f6:e1:
a9:d7:7c:ee:00:10:c8:cd:c9:ee:77:6c:8d:4b:ac:
54:56:b2:a2:7e:c1:ad:e0:e5:86:72:69:e5:f9:da:
68:34:26:da:ae:f1:d6:c1:53:46:d4:dc:30:4d:22:
1f:74:cb:f1:af:cf:17:c8:77:56:1b:4f:0f:4d:71:
e3:83:e1:08:fb:d3:a5:f7:d9:99:b4:74:e4:84:bf:
a1:45:a0:f1:06:56:c6:46:d3:00:d7:55:77:91:bd:
67:fb:84:6c:94:72:96:ca:ff:70:ca:af:23:17:62:
26:55:a1:1a:c7:9d:39:a0:a7:d8:55:c9:32:39:25:
62:99:9f:c3:52:51:f5:43:15:1b:45:7f:38:f8:97:
2d:ee:d1:69:0a:34:13:2d:dd:cd:b3:36:72:04:de:
f6:70:b2:22:4b:86:85:eb:c3:0f:27:88:91:51:5c:
7a:80:6b:b0:7c:91:82:db:96:e8:ce:65:dd:d5:6e:
73:44:c4:66:cc:b5:2d:7a:97:bd:99:57:3b:29:b7:
e4:ba:bf:85:fa:10:43:f6:57:94:d1:b6:e6:9c:df:
78:ba:ab:bc:4d:39:e1:e3:2f:ac:ac:cf:8f:4d:8f:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:50:E8:C3:5B:33:D1:D0:BE:88:B9:AD:4C:4E:66:6B:0A:93:7B:99
X509v3 Authority Key Identifier:
keyid:BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/TVDow1sz0dC-iLmtTE5mawqTe5k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.16.0/22
Signature Algorithm: sha256WithRSAEncryption
05:12:ed:02:71:17:de:4d:ce:99:c7:d7:21:3d:fb:14:3a:70:
d7:34:e0:cf:8c:26:e1:25:50:ba:90:e0:2a:a8:31:8c:94:d3:
08:9d:6b:43:37:91:72:ce:f9:f5:fe:11:52:85:61:92:17:75:
7a:f3:e8:7e:4f:de:93:e2:64:98:6d:0c:19:73:43:40:30:bc:
82:9f:d0:b7:7d:d9:7b:90:cd:dc:68:b9:d8:30:2a:35:c1:3c:
14:64:a1:2e:cb:2c:52:c9:b5:33:83:f3:2c:61:42:d3:fd:fd:
c2:24:a9:55:ff:45:3a:5c:fc:8f:db:a4:2c:3a:3f:c0:28:1d:
cb:ae:f3:74:3b:c5:f8:97:1a:80:5d:aa:67:28:75:a0:eb:76:
b9:ae:5a:5a:6e:4c:05:8c:3d:73:37:62:4c:e7:13:8d:4d:4d:
06:15:22:d7:b1:e9:21:ab:76:67:02:68:05:a3:4a:ac:8c:d6:
53:a3:f7:47:d4:f5:30:3c:71:f8:f2:0e:fd:f0:e2:d5:8e:9a:
e1:2a:86:59:d9:79:3e:80:ad:38:09:e0:bb:ba:ab:6c:b5:a2:
9a:8c:9e:29:30:e0:cb:83:e9:4d:04:84:0d:65:ba:8a:25:e7:
6b:33:78:61:38:4c:cb:4f:19:8d:7b:78:52:89:22:18:7d:c3:
b0:9d:83:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org