Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/N4e38Jxa22hE1yNM9Jv6nQYewDc.roa
File: N4e38Jxa22hE1yNM9Jv6nQYewDc.roa (raw, json)
Hash identifier: PaaMQc6uCHORIPtjTBvRtB9EW+SLgzqHmvBn7hBHt/I=
Subject key identifier: 37:87:B7:F0:9C:5A:DB:68:44:D7:23:4C:F4:9B:FA:9D:06:1E:C0:37
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5589
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/N4e38Jxa22hE1yNM9Jv6nQYewDc.roa
Signing time: Sun 07 Feb 2021 13:16:00 +0000
ROA not before: Sun 07 Feb 2021 13:16:00 +0000
ROA not after: Tue 23 Nov 2021 09:15:57 +0000
asID: 38851
IP address blocks: 103.131.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21897 (0x5589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Feb 7 13:16:00 2021 GMT
Not After : Nov 23 09:15:57 2021 GMT
Subject: CN=3787B7F09C5ADB6844D7234CF49BFA9D061EC037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:66:ec:6e:de:c7:2f:41:57:e4:56:1d:b7:f1:
76:2e:13:3f:31:ab:f8:e6:2a:5b:8c:99:2c:2c:b8:
ef:78:18:a7:b5:cc:57:59:b3:c7:42:00:c4:08:26:
14:c0:f2:66:c0:9c:b7:cc:1f:ca:f1:6c:1f:3d:eb:
ee:1e:5a:c0:c4:bd:d6:0b:e6:39:8f:ca:c1:5d:af:
16:97:1c:02:40:19:d0:d9:f2:7c:fd:95:35:09:af:
64:ad:c1:0a:58:00:cf:a4:f4:48:f7:2a:e8:93:05:
a6:94:3c:e8:75:95:da:bb:3a:2a:1b:6b:25:4d:bf:
74:70:66:6d:73:74:00:9d:e2:c4:3c:f8:0a:61:9b:
b6:2e:c2:3d:56:3a:19:51:f5:ed:7a:c0:76:ea:3d:
bd:01:9f:25:3d:f2:d7:d5:21:73:32:65:23:36:e1:
01:e0:57:cc:3e:c0:9d:90:78:59:2c:7e:69:b7:3a:
c5:9d:74:9b:04:7f:c9:3d:b7:db:20:fc:99:64:8f:
bc:d7:2d:e5:b6:e6:18:94:87:81:64:c5:ee:09:73:
b8:ca:83:0d:89:34:13:9c:55:b9:39:33:fd:1c:64:
de:a8:36:49:95:a9:83:1d:3f:04:e1:69:7b:c4:36:
71:f8:47:7f:df:5f:23:7f:bc:1f:39:82:a8:84:69:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:B7:F0:9C:5A:DB:68:44:D7:23:4C:F4:9B:FA:9D:06:1E:C0:37
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/N4e38Jxa22hE1yNM9Jv6nQYewDc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:ae:fa:13:fe:be:72:5d:a3:e5:a3:5c:87:e6:14:97:7c:fc:
da:6f:da:ce:df:0a:c6:1d:ce:42:9a:36:21:da:f1:76:98:ef:
76:f1:4a:67:a4:c6:22:2f:f5:45:82:9e:78:72:d4:f7:00:c7:
43:1c:ae:ef:ce:27:28:4c:5c:fb:e1:af:d5:a9:0a:f8:eb:bc:
c4:7d:b3:35:b3:7a:b6:c8:f6:d3:25:e5:df:ea:30:bf:4f:ba:
c9:55:04:85:f9:bf:eb:81:77:72:c2:fb:88:e2:4a:18:91:d8:
12:5a:8e:68:4c:85:50:d6:fb:9f:d5:5b:c9:a1:29:f0:31:80:
b1:f6:b8:8f:3e:36:07:48:ba:c9:58:b0:0b:30:0b:ad:d5:be:
fb:3a:5a:64:9b:1e:a8:89:50:d0:b8:73:af:3f:e8:d1:2f:fd:
f2:8f:b3:bd:b4:21:34:1e:e0:fe:3b:6f:35:3f:25:91:8e:3f:
1e:9f:f3:cd:01:73:d7:8e:c7:f2:34:20:04:a7:5d:9e:c8:80:
09:2d:e9:00:ca:e1:2e:e3:87:23:b2:f7:f3:25:2a:0f:40:8f:
02:81:1f:65:10:df:65:d2:25:47:ba:49:23:55:9f:f6:18:5b:
db:b5:cc:c0:ef:8a:49:12:01:7b:e2:46:b3:7e:9e:e0:05:d3:
6c:85:db:6e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICVYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz
MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yMTAyMDcx
MzE2MDBaFw0yMTExMjMwOTE1NTdaMDMxMTAvBgNVBAMTKDM3ODdCN0YwOUM1QURC
Njg0NEQ3MjM0Q0Y0OUJGQTlEMDYxRUMwMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD9Zuxu3scvQVfkVh238XYuEz8xq/jmKluMmSwsuO94GKe1zFdZ
s8dCAMQIJhTA8mbAnLfMH8rxbB896+4eWsDEvdYL5jmPysFdrxaXHAJAGdDZ8nz9
lTUJr2StwQpYAM+k9Ej3KuiTBaaUPOh1ldq7OiobayVNv3RwZm1zdACd4sQ8+Aph
m7Yuwj1WOhlR9e16wHbqPb0BnyU98tfVIXMyZSM24QHgV8w+wJ2QeFksfmm3OsWd
dJsEf8k9t9sg/Jlkj7zXLeW25hiUh4Fkxe4Jc7jKgw2JNBOcVbk5M/0cZN6oNkmV
qYMdPwThaXvENnH4R3/fXyN/vB85gqiEafc7AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUN4e38Jxa22hE1yNM9Jv6nQYewDcwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv
eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU
Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvTjRlMzhKeGEyMmhFMXlO
TTlKdjZuUVlld0RjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AmeDrDANBgkqhkiG9w0BAQsFAAOCAQEAmq76E/6+cl2j5aNch+YUl3z82m/azt8K
xh3OQpo2IdrxdpjvdvFKZ6TGIi/1RYKeeHLU9wDHQxyu784nKExc++Gv1akK+Ou8
xH2zNbN6tsj20yXl3+owv0+6yVUEhfm/64F3csL7iOJKGJHYElqOaEyFUNb7n9Vb
yaEp8DGAsfa4jz42B0i6yViwCzALrdW++zpaZJseqIlQ0Lhzrz/o0S/98o+zvbQh
NB7g/jtvNT8lkY4/Hp/zzQFz147H8jQgBKddnsiACS3pAMrhLuOHI7L38yUqD0CP
AoEfZRDfZdIlR7pJI1Wf9hhb27XMwO+KSRIBe+JGs36e4AXTbIXbbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:16 2024 by rpki-client on console-ams.rpki-client.org