Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCDTV/vHktc-VFGLNZKunjdqjAmYw_Itg.roa
File: vHktc-VFGLNZKunjdqjAmYw_Itg.roa (raw, json)
Hash identifier: sbAvmhuIL4K7JLVJFqCIt+ShnxaUvJLZQyXLMGUnl9E=
Subject key identifier: BC:79:2D:73:E5:45:18:B3:59:2A:E9:E3:76:A8:C0:99:8C:3F:22:D8
Certificate issuer: /CN=4B81BB31FA5292C8025B828F802722DE0D5EADE3
Certificate serial: 0A36
Authority key identifier: 4B:81:BB:31:FA:52:92:C8:02:5B:82:8F:80:27:22:DE:0D:5E:AD:E3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/S4G7MfpSksgCW4KPgCci3g1ereM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/vHktc-VFGLNZKunjdqjAmYw_Itg.roa
Signing time: Thu 15 Sep 2022 02:50:41 +0000
ROA not before: Thu 15 Sep 2022 02:50:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131597
IP address blocks: 103.196.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B81BB31FA5292C8025B828F802722DE0D5EADE3
Validity
Not Before: Sep 15 02:50:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BC792D73E54518B3592AE9E376A8C0998C3F22D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:c6:ca:cf:c7:cb:61:5f:6a:3d:35:ad:30:
3c:e1:f6:7f:75:0c:e6:e7:62:41:5a:db:bd:fa:71:
49:95:42:b5:1a:66:2b:f7:e4:dc:93:69:70:61:3e:
f1:af:0e:f2:5e:f4:cf:8b:db:17:51:08:2b:32:fe:
9e:a1:31:73:a1:af:65:08:77:38:21:a5:37:d1:67:
51:1c:72:99:94:8b:b7:1c:84:03:3d:7f:d5:ea:2a:
67:a0:f4:eb:44:92:e0:32:63:10:95:4e:a0:aa:b7:
02:e1:5d:92:77:be:37:1f:a8:e5:b8:f6:fd:7a:7f:
26:7e:72:9f:06:f4:d6:79:76:8e:89:f4:d1:c7:e5:
3d:c8:7a:59:72:a3:16:94:c7:0d:66:0b:21:6b:d1:
6f:68:f1:6c:44:83:11:10:3a:4d:31:5c:9f:17:ca:
3a:6e:aa:5d:55:56:4d:24:c8:9c:e0:25:a1:7b:80:
31:6b:0a:50:3f:e3:41:e5:df:ff:ee:d7:c4:86:ff:
9d:45:29:b1:c8:85:7b:9e:54:8c:17:bc:4f:f1:a7:
b7:1a:d7:43:7f:29:79:db:0f:41:ef:5f:e1:cf:4d:
a8:1d:3b:6f:ab:c6:c7:71:a0:e7:3b:ad:e4:d6:bb:
ec:96:47:60:65:0d:27:26:6e:3b:ac:ae:ea:11:da:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:2D:73:E5:45:18:B3:59:2A:E9:E3:76:A8:C0:99:8C:3F:22:D8
X509v3 Authority Key Identifier:
keyid:4B:81:BB:31:FA:52:92:C8:02:5B:82:8F:80:27:22:DE:0D:5E:AD:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/S4G7MfpSksgCW4KPgCci3g1ereM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S4G7MfpSksgCW4KPgCci3g1ereM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/vHktc-VFGLNZKunjdqjAmYw_Itg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.196.172.0/22
Signature Algorithm: sha256WithRSAEncryption
75:19:b3:0b:95:55:4b:2a:5b:2c:57:b5:41:8f:0d:83:2e:82:
09:53:ec:5e:3a:e9:90:6d:f6:c8:50:dd:81:9a:d9:49:d9:3b:
a8:54:ad:49:76:63:78:d8:7b:d8:22:c6:b0:f5:c3:8b:f4:f7:
80:ea:ac:30:ea:8f:f9:c0:8c:49:05:aa:82:c7:e4:36:f2:7d:
d5:5a:52:b4:5b:07:8e:4d:5d:0a:ab:83:e6:5d:4c:54:a1:4a:
4a:9e:e4:28:97:76:a6:67:a9:06:2b:10:b8:6b:dc:6b:34:c9:
1c:c9:e0:a4:7d:91:4e:e6:01:2b:34:4d:4f:6e:d0:77:a2:cc:
cd:1d:76:ce:30:c8:0e:5b:ff:61:53:20:32:3d:53:b1:5c:77:
93:d7:d0:55:ed:9d:c6:8d:21:3d:1b:1e:fe:ce:f1:23:9e:b5:
e2:bd:33:9d:1f:7e:46:55:d8:49:17:13:d3:bc:d6:11:35:62:
88:5c:fe:72:c8:09:a5:ec:7e:dc:09:fb:8f:59:14:2a:7b:05:
72:e6:a5:4b:f0:5a:93:58:23:f7:b6:36:b1:b3:c2:6b:97:d7:
92:c2:cb:0b:05:bb:bf:0e:2b:eb:8d:9d:42:20:c7:3a:11:ff:
72:c7:17:10:b1:69:42:1f:2e:5d:49:2f:7e:6f:36:91:bb:50:
de:17:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org