Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/SITZGxvogo2andVgyzDxcZ5Nykg.roa
File: SITZGxvogo2andVgyzDxcZ5Nykg.roa (raw, json)
Hash identifier: nOVGt4gVpHCdstoNJqwSOs85LV2yQrMs8FncEZ6oagA=
Subject key identifier: 48:84:D9:1B:1B:E8:82:8D:9A:9D:D5:60:CB:30:F1:71:9E:4D:CA:48
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5714
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/SITZGxvogo2andVgyzDxcZ5Nykg.roa
Signing time: Thu 15 Sep 2022 02:47:42 +0000
ROA not before: Thu 15 Sep 2022 02:47:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 103.131.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22292 (0x5714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Sep 15 02:47:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4884D91B1BE8828D9A9DD560CB30F1719E4DCA48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:0c:fb:16:f6:f7:f1:de:90:8f:e7:84:ee:
6d:78:32:5e:6d:74:c0:92:09:fa:01:e4:a6:b3:78:
7b:83:fb:2b:c8:d6:1b:68:e9:23:8d:6a:b4:01:7e:
6c:07:15:fc:5f:b8:db:0a:f3:21:b2:af:df:22:87:
cd:ce:19:46:c2:bc:43:ce:be:4a:e7:4f:12:04:80:
a6:e2:29:5c:97:60:ce:35:ec:1c:b1:d9:34:e9:4c:
fc:9d:63:30:95:61:48:0d:df:42:3a:ec:2e:5d:19:
a1:fc:28:42:9e:27:d5:4e:6f:2d:06:7e:c0:47:9e:
62:3c:6d:9c:d2:e8:90:c9:26:d2:a5:23:fd:50:b9:
64:82:5a:ed:50:d5:d9:75:cb:7c:d2:95:23:14:0e:
77:cc:b6:8f:65:e4:cd:29:77:a6:da:31:a0:35:4a:
4e:d9:68:fd:00:6e:8b:41:41:5c:84:26:6b:01:c7:
ec:6e:9b:53:c4:ca:2c:a7:45:65:66:c1:e5:cb:a6:
27:96:37:33:5e:51:1b:46:09:bd:6e:a7:7c:df:ac:
62:7d:eb:85:c0:5b:39:63:29:03:d7:bb:3a:d1:07:
eb:e1:a7:67:e5:7e:9a:4a:ab:b3:ec:0f:67:c1:6b:
33:68:ec:3c:47:c3:f9:1d:fd:2d:a0:8a:2a:46:1d:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:D9:1B:1B:E8:82:8D:9A:9D:D5:60:CB:30:F1:71:9E:4D:CA:48
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/SITZGxvogo2andVgyzDxcZ5Nykg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.172.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:e6:0f:d4:df:be:e4:9c:c7:f9:f3:d7:f9:b0:7b:e0:06:f0:
ab:bd:6e:65:4c:5f:f6:8f:c8:04:a8:20:53:40:72:39:5d:77:
e4:23:08:fa:1e:ff:55:d5:5b:6c:d9:99:58:fe:d3:34:5a:0f:
2b:33:2b:be:6a:32:b9:59:15:5c:69:aa:c1:e5:4f:75:58:72:
88:9c:44:e6:3c:15:e4:09:8e:8e:c7:80:ed:fc:fd:2f:cc:94:
61:8f:6c:bb:9d:cb:0c:42:e1:12:67:15:eb:73:f0:27:7c:cc:
3e:df:40:16:2b:e0:4f:c0:30:e1:14:d7:db:5b:74:5c:9a:27:
62:d6:2b:2b:5b:e9:fe:39:e6:2d:10:b9:ac:16:c6:bf:ab:98:
75:df:6a:fb:06:f5:4b:81:91:b6:15:e9:50:30:d5:cb:c2:a8:
10:80:02:ed:61:27:66:29:d6:e4:9d:ad:6c:82:f4:04:b7:55:
be:66:64:30:1e:df:7b:d5:81:4d:ab:83:77:b4:47:be:ef:e8:
27:9d:35:d7:6e:fb:1b:52:e6:99:3c:c5:34:9b:d0:3b:01:07:
08:af:e6:b6:c6:3d:c9:e9:d6:db:75:a6:3b:c4:c0:00:76:79:
2c:a7:76:77:23:23:28:58:8d:a4:34:3e:a2:09:6c:da:95:1b:
b1:84:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org