Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/J0NZsTX7h_YBthHS_3tBEoHCGmU.roa
File: J0NZsTX7h_YBthHS_3tBEoHCGmU.roa (raw, json)
Hash identifier: k1FFXqkx5KBGSVbiSvUCKLdl32NhgMa1/NKoJ3WetEE=
Subject key identifier: 27:43:59:B1:35:FB:87:F6:01:B6:11:D2:FF:7B:41:12:81:C2:1A:65
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5644
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/J0NZsTX7h_YBthHS_3tBEoHCGmU.roa
Signing time: Tue 09 Nov 2021 09:18:35 +0000
ROA not before: Tue 09 Nov 2021 09:18:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38851
IP address blocks: 103.46.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22084 (0x5644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Nov 9 09:18:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=274359B135FB87F601B611D2FF7B411281C21A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:33:08:90:16:a8:3a:36:6e:5b:c4:1e:25:
51:96:82:9b:d4:5e:26:87:46:68:be:70:be:19:de:
84:21:43:d6:ed:bc:d5:28:2a:4c:10:38:fb:05:d8:
c0:12:7c:1f:87:06:b7:d5:bd:c9:91:a3:04:87:77:
93:bf:b3:a0:61:7a:68:ca:25:8a:6c:34:59:4e:cb:
56:17:10:8b:23:79:74:6d:07:8c:e0:db:a3:65:1d:
2e:a2:46:92:7d:fa:91:d0:b8:3b:71:fb:08:ff:53:
28:59:9b:3e:ef:f9:64:f4:ad:37:f3:42:2f:4c:0f:
0f:b5:e9:ca:ff:bb:2c:66:86:e3:66:fa:49:4e:3c:
db:87:f2:db:ee:2f:cf:08:ca:63:11:d4:20:8b:03:
e0:9e:bc:2a:2a:2c:2a:81:df:da:44:8b:fd:ec:03:
06:08:c4:6a:41:6d:bf:26:ae:f8:51:84:2b:da:11:
92:65:db:1a:97:8f:55:09:dc:95:90:a3:d9:ee:70:
0f:ec:fd:c0:7c:8a:7c:1b:94:ae:d9:0c:de:b9:fd:
7c:69:c4:52:09:b1:ee:f3:e9:1d:93:a5:71:09:61:
f3:9f:da:d9:39:8a:aa:53:2f:79:9b:3e:3a:69:bf:
d4:0f:fb:dc:5e:e2:21:59:6c:ee:94:fe:d4:ba:2b:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:59:B1:35:FB:87:F6:01:B6:11:D2:FF:7B:41:12:81:C2:1A:65
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/J0NZsTX7h_YBthHS_3tBEoHCGmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.188.0/22
Signature Algorithm: sha256WithRSAEncryption
26:b5:87:5c:12:d4:4a:93:f5:bd:83:bb:d2:b6:09:2e:ec:77:
6c:b2:9f:66:3f:02:23:50:59:e0:e0:ae:ca:2a:4c:fd:c5:29:
4d:fe:7f:c4:32:2a:ee:8e:da:9c:9c:e9:74:a8:ae:85:42:17:
16:e4:a4:b9:41:d6:48:74:46:9a:5e:a0:f8:81:02:e9:1a:03:
34:bf:d8:64:59:43:d7:e2:a6:62:b3:c4:a0:f5:15:02:eb:76:
cc:d4:c1:c8:a4:47:a8:92:b0:5c:5c:59:28:f5:0b:0e:ae:ef:
27:9a:1b:a7:72:34:d9:49:f8:84:4d:2d:e4:9b:e1:61:59:a0:
3a:34:f0:8a:81:a1:67:58:1d:89:c1:42:94:a1:37:63:63:11:
2d:d5:0b:01:05:7b:7b:0b:9f:69:48:08:a0:f8:c5:2b:31:8a:
d9:d0:2d:94:a5:a4:ef:71:71:dc:57:4a:55:07:77:0d:f2:2e:
59:d2:75:ed:14:f8:c2:3f:e6:1b:ee:9c:cf:17:8e:d1:e6:a6:
b0:72:32:2c:c2:a1:cb:de:52:77:b3:ca:4d:37:2d:ec:00:97:
42:d2:6f:e2:12:90:45:73:a6:29:34:4f:26:e2:47:0f:92:13:
0e:9d:ba:bd:82:f4:46:d9:7d:dc:00:e8:b3:8b:2e:86:8e:d3:
5d:32:97:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org