Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Sz9pAlAy5zaGYbrnqcdGA5-kjXM.roa
File: Sz9pAlAy5zaGYbrnqcdGA5-kjXM.roa (raw, json)
Hash identifier: Vhko7wdB6ByLvZKF+ocjrbosJZsD0M3UHtyL18uovwM=
Subject key identifier: 4B:3F:69:02:50:32:E7:36:86:61:BA:E7:A9:C7:46:03:9F:A4:8D:73
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5644
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Sz9pAlAy5zaGYbrnqcdGA5-kjXM.roa
Signing time: Tue 09 Nov 2021 09:18:34 +0000
ROA not before: Tue 09 Nov 2021 09:18:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38851
IP address blocks: 103.46.188.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22084 (0x5644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Nov 9 09:18:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4B3F69025032E7368661BAE7A9C746039FA48D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:af:0f:5b:72:b6:6c:e4:dc:73:25:53:eb:
52:10:41:6e:9e:ef:78:90:ea:77:d5:cf:60:9a:01:
27:73:98:90:f2:fa:a4:ca:8b:bb:f0:4d:74:71:4e:
f8:e4:6c:62:32:d2:eb:7a:86:2e:06:71:de:30:3e:
6c:9c:12:c5:e0:9a:1b:56:c0:79:2e:db:bc:13:c6:
ec:ee:da:d2:85:fa:33:d4:f9:8b:12:4d:6a:88:1c:
33:3f:16:c9:2b:53:23:a6:de:9a:ea:23:a0:ea:41:
ce:b7:43:35:b9:95:d4:43:39:37:fc:c6:ab:2d:e9:
1c:69:fa:ab:80:84:38:93:f1:71:f2:a6:30:63:5b:
56:e3:34:07:4a:bb:c9:57:83:81:55:d6:08:b3:5d:
ad:a7:8b:a9:b8:45:1a:88:31:7b:ee:b3:3f:70:7f:
0f:f6:01:45:ca:96:6f:2c:c6:a2:46:25:3d:7b:f7:
f4:26:82:38:aa:7e:46:15:bc:0a:b8:e7:79:c5:8b:
07:97:66:97:db:f1:46:aa:29:5c:18:10:ee:e4:52:
62:b8:80:e2:f2:ff:37:a3:52:35:a3:35:21:2d:c0:
24:a1:4c:43:64:74:82:01:16:ce:19:d8:2b:b9:52:
b5:30:bf:65:dc:38:14:11:9e:4d:b8:a6:f8:86:09:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:69:02:50:32:E7:36:86:61:BA:E7:A9:C7:46:03:9F:A4:8D:73
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Sz9pAlAy5zaGYbrnqcdGA5-kjXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.188.0/23
Signature Algorithm: sha256WithRSAEncryption
31:4c:30:c8:d3:d1:46:cf:8e:08:b3:94:e0:58:d5:8f:29:80:
92:01:d3:05:b9:75:f3:53:9f:f1:2e:10:87:d3:f4:63:3d:42:
3f:8f:e2:08:84:dd:9a:1a:d4:7c:03:64:b2:d4:c9:f6:ee:c9:
f6:6a:2c:65:e7:ea:2b:c6:8c:a8:62:74:21:1a:e4:f6:5c:ea:
e7:73:23:59:22:ef:99:14:f1:70:fb:19:10:b2:58:c5:cb:7b:
7b:5e:37:a0:b1:93:55:bf:71:02:7a:bd:fd:82:e0:43:d5:cf:
dd:32:7b:3f:a1:de:2f:07:ce:08:d9:ef:a0:bd:6b:8f:2b:f5:
04:63:34:b9:51:ba:77:58:f0:9f:32:bd:94:92:51:bd:df:b7:
ae:b7:39:e5:ca:31:97:8d:53:4a:47:9c:0d:0f:51:22:65:25:
2b:46:39:1d:43:42:80:f8:51:51:dd:4d:6f:96:c8:d3:f6:f1:
06:35:f6:e8:9b:f0:fb:72:ef:41:62:e9:ee:50:48:b3:51:43:
3d:ba:be:07:b6:9f:6f:48:cd:fb:26:14:4e:2c:7f:f8:04:de:
98:7e:30:4c:20:cf:9b:58:e8:91:2d:67:f8:e7:52:5a:05:79:
33:03:43:17:eb:bb:9e:df:9b:17:82:4e:bf:03:85:92:01:c2:
61:c7:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org