Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCDTV/J_K9kaW-fdc_GbZv7nWl3HZ7Jbk.roa
File: J_K9kaW-fdc_GbZv7nWl3HZ7Jbk.roa (raw, json)
Hash identifier: MXdlzgGeNhVgloh/g2KFqaWewiZ03ikLRSb/FjyFlM0=
Subject key identifier: 27:F2:BD:91:A5:BE:7D:D7:3F:19:B6:6F:EE:75:A5:DC:76:7B:25:B9
Certificate issuer: /CN=4B81BB31FA5292C8025B828F802722DE0D5EADE3
Certificate serial: 0770
Authority key identifier: 4B:81:BB:31:FA:52:92:C8:02:5B:82:8F:80:27:22:DE:0D:5E:AD:E3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/S4G7MfpSksgCW4KPgCci3g1ereM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/J_K9kaW-fdc_GbZv7nWl3HZ7Jbk.roa
Signing time: Tue 29 Sep 2020 10:00:44 +0000
ROA not before: Tue 29 Sep 2020 10:00:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131597
IP address blocks: 202.123.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B81BB31FA5292C8025B828F802722DE0D5EADE3
Validity
Not Before: Sep 29 10:00:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=27F2BD91A5BE7DD73F19B66FEE75A5DC767B25B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:ae:d0:95:71:c8:f5:1d:f6:b1:b1:a1:b6:
0c:8a:27:55:f5:b7:a2:03:0f:c9:df:14:da:66:5e:
66:57:cf:a1:4e:aa:35:3a:87:c8:a2:ed:99:cc:d6:
84:5f:ed:54:f0:84:88:51:65:5e:cb:8f:1f:6f:3d:
0b:45:d6:3c:1a:1e:ec:3d:60:18:49:c0:4d:8c:72:
5e:5a:70:f6:8a:34:7b:2a:b6:65:81:35:f3:46:1a:
a2:f4:e2:e5:1d:e1:4b:0b:ef:b0:33:10:1c:df:e9:
ec:c9:f6:c9:d9:47:11:cb:30:13:6d:01:4e:67:3e:
4d:da:2b:42:2b:a2:a7:bc:02:cb:69:bc:07:d7:b4:
3d:ec:74:4e:ff:bc:11:eb:26:c6:69:77:8b:8f:b1:
b4:1e:2a:8a:b1:62:ec:a1:c9:c9:3e:34:b0:d7:d3:
db:75:f8:4b:de:ba:ff:b3:f8:a4:dd:94:9e:ed:d4:
5b:f1:f2:7d:1f:e1:ba:cb:39:83:40:a8:34:e8:dd:
77:24:65:b8:d3:fc:2b:c0:d0:9d:15:ad:26:c9:f7:
29:ee:d3:86:5d:19:5e:2b:10:a4:c5:d1:39:fe:7d:
43:94:89:c0:b3:99:ad:5b:54:c9:96:71:32:ca:3f:
91:cb:9b:42:51:eb:5e:fe:c4:95:ea:39:54:25:66:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:BD:91:A5:BE:7D:D7:3F:19:B6:6F:EE:75:A5:DC:76:7B:25:B9
X509v3 Authority Key Identifier:
keyid:4B:81:BB:31:FA:52:92:C8:02:5B:82:8F:80:27:22:DE:0D:5E:AD:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/S4G7MfpSksgCW4KPgCci3g1ereM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S4G7MfpSksgCW4KPgCci3g1ereM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/J_K9kaW-fdc_GbZv7nWl3HZ7Jbk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.123.124.0/22
Signature Algorithm: sha256WithRSAEncryption
62:14:07:06:2a:36:5d:af:15:66:c4:1c:17:a4:a4:ee:3f:c7:
21:3e:6a:c8:eb:9d:42:28:25:0c:ee:1a:64:f4:3c:5f:be:1e:
dd:89:7a:bd:7c:21:24:a1:c5:b9:d3:18:99:6c:83:1a:29:8d:
a4:73:55:15:17:3a:2a:aa:1d:5e:6b:1c:58:98:04:ba:d8:3c:
bc:f7:8d:d7:d3:9d:4f:dc:14:c0:86:ca:ae:77:30:d1:69:bb:
9e:4d:88:79:97:0e:e9:35:0b:4e:5d:9e:73:cb:95:6a:b1:a4:
b7:b7:bd:8c:7c:ac:48:ad:fe:9c:2b:15:1f:1d:a7:cb:22:dc:
f1:db:ee:cf:82:d8:10:7b:3c:f2:6f:dd:a8:2d:c7:f4:28:4e:
59:7c:f2:a1:f7:83:c2:b8:70:73:82:fb:43:c9:fe:f3:b4:9f:
80:52:17:c0:ce:9e:99:8e:ae:9d:1c:da:7d:83:21:21:05:ca:
86:86:c5:1a:d3:8c:e8:1d:04:7e:4c:22:6a:16:46:93:c6:3c:
4c:45:11:4a:1f:e1:3e:40:f2:32:28:f5:3f:10:0d:49:e7:a5:
5e:ae:75:0d:56:21:ce:16:24:b4:05:8f:52:83:6d:3b:e2:f6:
6e:19:93:5c:6d:e5:90:44:96:be:9e:a7:43:2c:72:2a:70:d9:
a9:93:92:d0
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEI4
MUJCMzFGQTUyOTJDODAyNUI4MjhGODAyNzIyREUwRDVFQURFMzAeFw0yMDA5Mjkx
MDAwNDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI3RjJCRDkxQTVCRTdE
RDczRjE5QjY2RkVFNzVBNURDNzY3QjI1QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOp67QlXHI9R32sbGhtgyKJ1X1t6IDD8nfFNpmXmZXz6FOqjU6
h8ii7ZnM1oRf7VTwhIhRZV7Ljx9vPQtF1jwaHuw9YBhJwE2Mcl5acPaKNHsqtmWB
NfNGGqL04uUd4UsL77AzEBzf6ezJ9snZRxHLMBNtAU5nPk3aK0Iroqe8AstpvAfX
tD3sdE7/vBHrJsZpd4uPsbQeKoqxYuyhyck+NLDX09t1+Eveuv+z+KTdlJ7t1Fvx
8n0f4brLOYNAqDTo3XckZbjT/CvA0J0VrSbJ9ynu04ZdGV4rEKTF0Tn+fUOUicCz
ma1bVMmWcTLKP5HLm0JR617+xJXqOVQlZk1FAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUJ/K9kaW+fdc/GbZv7nWl3HZ7JbkwHwYDVR0jBBgwFoAUS4G7MfpSksgCW4KP
gCci3g1ereMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNEVFYv
UzRHN01mcFNrc2dDVzRLUGdDY2kzZzFlcmVNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9TNEc3TWZwU2tzZ0NXNEtQZ0NjaTNnMWVyZU0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ0RUVi9KX0s5a2FXLWZkY19HYlp2N25X
bDNIWjdKYmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCynt8
MA0GCSqGSIb3DQEBCwUAA4IBAQBiFAcGKjZdrxVmxBwXpKTuP8chPmrI651CKCUM
7hpk9Dxfvh7diXq9fCEkocW50xiZbIMaKY2kc1UVFzoqqh1eaxxYmAS62Dy8943X
051P3BTAhsqudzDRabueTYh5lw7pNQtOXZ5zy5VqsaS3t72MfKxIrf6cKxUfHafL
Itzx2+7PgtgQezzyb92oLcf0KE5ZfPKh94PCuHBzgvtDyf7ztJ+AUhfAzp6Zjq6d
HNp9gyEhBcqGhsUa04zoHQR+TCJqFkaTxjxMRRFKH+E+QPIyKPU/EA1J56VernUN
ViHOFiS0BY9Sg2074vZuGZNcbeWQRJa+nqdDLHIqcNmpk5LQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org