Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/Xw8Kw728vmiHQdRJuqrlWIi5kFw.roa
File: Xw8Kw728vmiHQdRJuqrlWIi5kFw.roa (raw, json)
Hash identifier: loPSdgZEWmCHAD2D1WyecJlSWh2kbdwLJ6FPvKRokSg=
Subject key identifier: 5F:0F:0A:C3:BD:BC:BE:68:87:41:D4:49:BA:AA:E5:58:88:B9:90:5C
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 054F
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/Xw8Kw728vmiHQdRJuqrlWIi5kFw.roa
Signing time: Mon 26 Aug 2024 05:09:28 +0000
ROA not before: Mon 26 Aug 2024 05:09:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 141173
IP address blocks: 103.156.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 13 Sep 2024 09:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Aug 26 05:09:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5F0F0AC3BDBCBE688741D449BAAAE55888B9905C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:07:4b:ed:1e:06:d9:28:f5:42:f3:69:4f:
32:1a:37:55:2d:76:97:60:3c:1a:fc:af:aa:73:66:
1f:28:c1:98:b5:f6:b1:7c:05:49:1e:91:0b:36:19:
66:3f:c3:37:b3:3f:fe:fd:3a:9e:70:23:af:a9:fb:
bc:b8:58:c8:42:6f:03:0a:8a:0a:21:77:cc:3a:61:
8b:38:23:bc:55:86:f8:16:24:3c:46:92:51:0b:4a:
5c:89:8c:9d:5d:6d:bc:43:38:94:07:cf:a6:72:00:
cf:50:05:05:50:1a:d8:eb:d0:10:8c:dd:07:cf:47:
fb:7d:8b:a6:80:44:71:27:65:e6:dd:59:bc:03:e7:
6d:b5:4d:35:8b:83:53:a5:7a:2e:b2:8b:ea:39:75:
f2:19:bd:ff:ea:7d:6c:94:fa:3a:25:e3:26:8c:4e:
ea:84:58:f5:2c:07:5c:19:48:7b:cc:22:d3:1f:4f:
ff:fe:4e:1b:77:d5:de:0f:74:96:8b:c9:de:96:f1:
7f:0a:f9:54:e7:fb:ae:e8:7f:1d:4a:c1:13:34:b6:
5b:bc:e9:97:98:39:2d:64:31:2e:25:c8:c7:a2:2d:
b2:2e:43:22:21:29:0c:b1:74:76:b0:e8:3c:0a:9c:
20:dc:47:94:e1:24:fe:0b:e2:4c:c0:bc:6d:a0:b5:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:0A:C3:BD:BC:BE:68:87:41:D4:49:BA:AA:E5:58:88:B9:90:5C
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/Xw8Kw728vmiHQdRJuqrlWIi5kFw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:ae:64:76:ab:5b:82:ea:02:57:f3:da:f0:6f:af:ce:b3:5e:
a5:d6:6c:74:fa:28:41:ff:1a:2d:3a:c2:7a:6d:45:69:ac:59:
3c:b2:76:17:b9:e9:cb:db:95:6c:cf:39:32:80:cf:7d:59:97:
3e:bf:58:f7:4b:de:6c:1b:48:12:99:61:d1:c0:b9:29:1c:3b:
2d:87:90:54:b5:cc:c4:f5:51:b9:59:e7:6e:47:02:70:97:92:
92:d3:f1:e8:1f:60:bd:64:9e:ed:4e:be:6b:69:22:9b:ea:39:
3c:65:33:89:09:8b:ad:d3:d7:af:de:ba:bf:51:32:23:ef:45:
32:2b:ce:f6:aa:43:81:53:53:5e:a7:55:fa:44:18:a3:d5:cd:
fb:31:6f:86:3b:36:34:5a:9c:3b:ed:42:6e:44:f4:76:72:46:
bd:56:10:05:38:a6:c0:5f:94:2c:1c:2b:b9:c5:d6:44:a0:0b:
28:1c:af:cd:fa:73:d6:9d:b8:87:f6:43:48:7a:29:7c:7c:33:
b1:08:b1:89:e7:fb:7d:de:2a:4c:8e:6b:b1:76:00:3e:16:19:
55:bb:07:db:33:ff:e3:84:63:76:6d:79:0f:d1:1a:06:89:17:
03:7e:9f:c8:47:5b:26:08:2b:81:42:0d:12:de:ee:c7:36:eb:
11:21:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 10:35:15 2024 by rpki-client on console-fra.rpki-client.org