Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/cmKRa1u9H_agTDlG1sApydS7s-w.roa
File: cmKRa1u9H_agTDlG1sApydS7s-w.roa (raw, json)
Hash identifier: 2PN6oow+p+dxHRzurzhxxjjICG0At0qODN8LoqQlTKI=
Subject key identifier: 72:62:91:6B:5B:BD:1F:F6:A0:4C:39:46:D6:C0:29:C9:D4:BB:B3:EC
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 558B
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/cmKRa1u9H_agTDlG1sApydS7s-w.roa
Signing time: Sun 07 Feb 2021 13:16:02 +0000
ROA not before: Sun 07 Feb 2021 13:16:02 +0000
ROA not after: Tue 23 Nov 2021 09:15:57 +0000
asID: 38851
IP address blocks: 103.131.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21899 (0x558b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Feb 7 13:16:02 2021 GMT
Not After : Nov 23 09:15:57 2021 GMT
Subject: CN=7262916B5BBD1FF6A04C3946D6C029C9D4BBB3EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:db:63:fc:56:54:a5:93:87:61:98:2a:fd:
d4:4a:ea:3f:28:c5:bf:fe:c4:d7:20:bb:05:8e:22:
5b:68:b3:c2:95:04:bc:be:4b:90:8f:d4:8d:35:69:
f7:56:1f:18:22:55:e6:9d:41:ff:dd:f0:03:5e:b7:
22:20:df:03:4d:2a:b5:d3:eb:54:cb:b6:a0:84:cf:
97:0c:0f:0f:86:0b:ae:1d:64:33:dd:30:42:25:52:
56:fe:34:6c:c5:a1:ce:c3:9a:e9:61:77:25:50:9e:
1c:af:cf:b8:04:5d:5c:71:30:0a:df:0b:2d:a0:43:
67:cb:f1:a3:c3:c4:0e:27:ad:07:1e:1b:b6:32:0d:
4b:d4:18:7f:7e:e0:5d:2d:15:47:66:78:12:4a:f6:
f7:3a:43:59:e0:d2:27:0c:03:9c:6a:c4:5d:22:8c:
d8:dc:bf:2c:2d:fa:d5:f1:22:e0:7f:1e:46:c8:b7:
54:7c:05:e6:a8:af:9c:d4:08:59:14:75:1e:4a:b5:
e4:9a:23:aa:46:cf:fd:49:b8:3f:6b:fc:9d:c1:05:
82:23:ae:50:c7:89:60:bd:58:95:9b:ea:89:f0:15:
2f:61:82:c3:fe:aa:45:b2:d4:82:f8:b7:53:70:8b:
f1:04:ed:0f:7f:78:40:8c:d8:cd:69:ef:3e:67:91:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:62:91:6B:5B:BD:1F:F6:A0:4C:39:46:D6:C0:29:C9:D4:BB:B3:EC
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/cmKRa1u9H_agTDlG1sApydS7s-w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:61:26:a1:ff:2a:94:9e:29:9a:3f:e8:0e:6c:52:3b:39:63:
04:15:af:04:57:8a:f0:a6:a9:2b:6f:2e:52:cc:52:b3:a6:3e:
84:20:83:04:7b:3b:09:62:48:5f:10:f8:0b:11:4c:5f:45:d8:
64:e1:a4:0a:80:25:02:e4:c5:93:7d:61:b8:bb:05:d4:58:03:
6c:49:4f:7b:d3:52:16:ae:72:bf:8e:4e:c0:50:b3:a1:8b:b4:
b6:b8:8c:c9:7c:33:87:08:f8:d7:04:17:83:45:29:23:ad:c5:
7c:16:b2:af:7a:c3:7d:19:d6:bd:4d:ab:99:7f:93:9a:5d:d8:
3f:51:6c:28:3a:52:6d:73:ec:5c:e8:bb:9e:e4:de:fb:dd:9b:
c1:a5:4e:a0:18:c7:e7:fa:56:79:f5:2d:c6:a6:17:fe:96:ed:
73:5d:68:44:eb:04:01:e8:0f:1c:b2:bb:8b:47:1f:ed:5d:30:
e3:76:4e:5b:bf:1b:1b:a6:a4:46:ad:cc:90:5c:14:ef:f5:92:
18:6c:43:03:96:a9:56:c9:b9:23:04:e6:61:d3:59:b0:13:30:
3c:c5:71:c4:20:3d:8e:c8:3a:e6:bb:fd:f1:16:16:72:41:bc:
5b:21:05:46:26:ca:99:ed:0c:70:d2:66:2d:0b:9b:32:ec:14:
5b:de:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org