Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/a6TNZQQD98_Q6kGZifD8X8tDwVo.roa
File: a6TNZQQD98_Q6kGZifD8X8tDwVo.roa (raw, json)
Hash identifier: w2y/quvp5JPK1gwRMHei9lraHtGabqjZ3UxqHpNfF3s=
Subject key identifier: 6B:A4:CD:65:04:03:F7:CF:D0:EA:41:99:89:F0:FC:5F:CB:43:C1:5A
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0554
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/a6TNZQQD98_Q6kGZifD8X8tDwVo.roa
Signing time: Mon 26 Aug 2024 05:09:29 +0000
ROA not before: Mon 26 Aug 2024 05:09:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 215310
IP address blocks: 103.156.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 09:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Aug 26 05:09:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6BA4CD650403F7CFD0EA419989F0FC5FCB43C15A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:bc:35:d5:8b:9b:06:2e:28:75:44:ea:15:
c2:a9:31:80:4a:25:c2:df:d8:d7:63:42:b2:75:b8:
ec:52:1a:eb:c0:9b:9a:c4:89:5c:5f:1a:fd:54:96:
6b:3f:07:a4:49:1c:61:70:8b:50:a5:eb:1e:b1:0e:
77:c9:a8:b0:46:38:4f:86:9c:f7:c7:fa:d0:5e:b9:
24:7d:f8:07:a4:e0:b8:64:a2:59:a8:4c:bf:92:99:
53:32:2c:55:ac:1b:a1:cf:ff:36:cf:c4:19:3e:17:
e4:cf:4a:8e:a4:0d:b1:77:ba:56:21:60:e9:f5:67:
9e:26:10:d0:07:49:17:82:fe:5c:66:4b:79:a6:eb:
70:d7:88:6e:7e:6d:66:7b:d4:47:48:cf:e7:5e:a6:
a2:4c:ed:e3:6e:45:63:33:7c:c1:9e:ba:42:ff:58:
de:83:d8:7e:94:58:db:eb:d4:a2:86:e6:83:73:9f:
bd:38:31:46:36:f1:36:2a:77:d4:bc:6b:8c:89:fc:
fd:f6:b1:ed:0f:51:af:a0:c6:9a:11:6d:a0:c3:71:
58:2a:52:c4:7c:44:b8:11:5b:6f:91:0e:f8:76:10:
e5:31:2d:b7:d4:22:d5:87:58:3b:b5:a8:0d:cf:97:
42:a3:ba:19:c1:13:5b:86:f8:6a:0d:bb:48:fa:20:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A4:CD:65:04:03:F7:CF:D0:EA:41:99:89:F0:FC:5F:CB:43:C1:5A
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/a6TNZQQD98_Q6kGZifD8X8tDwVo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1b:92:db:9b:9c:b2:e8:17:b0:a3:2a:8d:e3:7d:9b:62:24:
3a:96:bd:f2:df:74:43:aa:04:4a:40:ce:6f:bd:4c:1b:6c:c7:
c0:8a:14:88:16:f2:82:93:90:79:14:04:68:c7:a5:ae:26:98:
df:8d:8e:ef:f0:fa:a5:6e:61:c4:b9:92:34:83:75:3b:6d:8f:
19:76:6b:ea:2f:80:7a:33:c9:24:f8:87:ae:12:7d:43:ca:6d:
3f:02:71:7b:fc:57:f4:80:29:2d:95:51:cd:d4:01:46:19:9b:
21:44:16:9c:a1:15:ec:ea:4a:66:55:b0:30:17:17:c0:6c:ff:
46:25:51:15:88:0a:ca:d8:c0:9f:0c:9a:69:9d:95:f8:05:d4:
29:10:a2:1d:e9:88:09:02:bf:37:2a:8d:c5:7b:de:09:c4:eb:
a4:7f:2b:fb:26:ac:14:7c:43:71:33:df:3e:a6:6f:e1:11:8d:
49:71:26:7a:eb:49:2f:be:0e:63:8a:9e:f8:21:33:98:a0:d7:
4a:88:35:ff:f0:b2:cc:02:35:1e:80:18:5c:a6:4a:6f:ed:0f:
87:d5:46:8b:3d:58:2a:7d:a5:91:62:9a:7a:bc:49:df:5f:27:
f2:66:7d:9a:cd:4b:ad:3a:e4:cf:1f:21:d8:ff:9f:9b:75:06:
8e:5f:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 12:22:10 2024 by rpki-client on console-ams.rpki-client.org