Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/YS5skKvL03RQD7LexmUB0os1R2g.roa
File: YS5skKvL03RQD7LexmUB0os1R2g.roa (raw, json)
Hash identifier: gfznmrpDLAQMkfH8Q1JstnEIbRrFPZZCTgW0qCNiVak=
Subject key identifier: 61:2E:6C:90:AB:CB:D3:74:50:0F:B2:DE:C6:65:01:D2:8B:35:47:68
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5644
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/YS5skKvL03RQD7LexmUB0os1R2g.roa
Signing time: Tue 09 Nov 2021 09:18:33 +0000
ROA not before: Tue 09 Nov 2021 09:18:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38851
IP address blocks: 103.46.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22084 (0x5644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Nov 9 09:18:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=612E6C90ABCBD374500FB2DEC66501D28B354768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:31:23:97:d1:16:b2:b5:26:b1:0a:9a:a4:
91:e1:3a:f4:6d:83:7c:5e:83:72:33:8e:d6:3f:4a:
ba:e6:f8:28:62:36:5c:f4:ad:fb:e7:03:03:02:55:
61:45:0b:17:27:4c:a3:2e:02:10:18:62:f1:29:a6:
9f:28:6b:d6:78:23:8b:4d:45:88:e1:fd:29:59:b7:
ed:f3:e2:07:93:a7:b4:52:5e:a0:d2:60:bc:ea:5f:
69:7a:19:74:29:ea:23:dc:16:9d:0d:c7:d4:47:cf:
96:22:02:66:00:0a:7a:e5:ce:c9:a1:f5:61:91:79:
ef:41:e8:87:02:ce:a5:fd:5d:80:5a:a6:05:6d:23:
19:2f:e3:23:39:d9:af:92:e3:88:ce:77:f3:a4:bd:
11:43:0c:eb:ba:83:ec:f4:1c:eb:dc:91:d1:1c:68:
b0:1a:7b:91:ac:9d:6a:b3:0d:1c:08:09:e6:25:11:
a4:3d:90:3f:84:2b:49:93:5c:3f:8a:ca:11:69:d2:
a4:58:3c:21:b6:75:f1:bd:c7:50:6b:b2:26:e2:80:
ad:2e:ee:c2:d2:46:9d:26:c7:c5:d4:f0:66:46:14:
ed:95:41:c3:04:22:40:00:17:33:ba:f2:22:ef:a4:
6c:84:9f:b8:23:57:8f:f9:dd:62:3a:db:5e:3d:ea:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:6C:90:AB:CB:D3:74:50:0F:B2:DE:C6:65:01:D2:8B:35:47:68
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/YS5skKvL03RQD7LexmUB0os1R2g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.190.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:9a:86:83:6b:ea:ff:d0:c8:7c:f4:be:7e:83:21:9b:94:42:
47:38:c1:66:c1:53:e3:91:ee:5f:5c:52:2b:6f:e4:4a:13:13:
c4:79:91:21:8f:b3:7e:d5:56:5a:e8:4a:05:fe:69:10:54:9e:
a7:58:26:4a:f7:d9:0c:75:a9:7c:98:5d:a8:7b:37:01:42:27:
ee:77:02:59:a5:dc:f4:c6:3b:51:ec:1d:84:a0:52:5c:fa:70:
fe:07:50:1d:b1:27:78:c4:d5:1b:76:45:3b:bc:85:20:48:91:
f3:1d:c3:54:b9:1d:80:c8:50:75:9b:1c:ac:49:08:64:ce:ab:
f2:c7:8c:50:e4:69:3d:89:13:2e:ad:ca:01:92:39:66:14:87:
55:3a:86:23:df:73:aa:30:3a:35:7b:df:47:b7:3a:2e:ef:fd:
40:2c:4b:70:e4:0f:31:36:d5:43:2c:e9:0c:4b:dc:67:d2:1a:
d3:5b:58:b4:21:92:0d:90:4b:2a:47:d3:1d:31:01:60:0f:3d:
eb:25:98:c1:20:dc:4f:f0:84:4e:7c:10:bf:d9:eb:d6:a1:13:
e5:9c:8e:02:83:dd:d9:87:49:7b:e4:43:23:1e:26:34:4d:17:
97:df:fa:c4:2f:f0:1e:5e:df:63:a9:f4:b7:01:0d:d2:22:a3:
9f:a7:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org