Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/2tkPXxEFxs1GDhPo-RpxfphDil4.roa
File: 2tkPXxEFxs1GDhPo-RpxfphDil4.roa (raw, json)
Hash identifier: uPiAs1ocOr/i5/hlDOqlGLJ+kmKTeEG2RZDL/vG3IcI=
Subject key identifier: DA:D9:0F:5F:11:05:C6:CD:46:0E:13:E8:F9:1A:71:7E:98:43:8A:5E
Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial: 0C07
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/2tkPXxEFxs1GDhPo-RpxfphDil4.roa
Signing time: Mon 01 Jul 2024 00:02:24 +0000
ROA not before: Mon 01 Jul 2024 00:02:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24167
IP address blocks: 2400:4500:0:1::/64 maxlen: 64
Validation: Failed, certificate revoked on Fri 26 Jul 2024 07:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Validity
Not Before: Jul 1 00:02:24 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DAD90F5F1105C6CD460E13E8F91A717E98438A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:cb:bb:b9:f2:cf:f0:51:5f:3a:d9:4e:b2:
b9:0a:7d:1b:58:8d:08:a9:e5:42:27:cb:87:de:3c:
00:d5:d0:1b:9d:72:bf:ef:61:30:38:a1:66:c7:c5:
81:ce:b7:76:04:43:ae:cf:18:97:26:40:1a:7e:85:
bb:8c:a2:38:b2:24:b2:63:63:d1:0d:e6:06:2b:f9:
d8:50:28:c0:b8:2a:df:48:ac:5d:cb:5a:5e:8f:df:
6b:63:65:a6:a9:92:64:22:28:b1:d5:95:b9:60:df:
ae:4f:30:0f:96:be:d6:72:c9:d2:2a:4f:89:2f:00:
2a:04:5b:29:83:8a:f5:f7:23:88:2b:fe:7b:e0:f1:
f9:4c:55:92:bf:cc:3e:a9:4f:7f:ec:5f:f6:46:d3:
9d:1b:56:cf:1c:89:4d:92:00:92:15:d6:5a:f2:a6:
41:7b:e9:73:f1:54:99:5f:70:4b:28:97:68:26:37:
f6:48:ad:86:d1:92:eb:89:35:cc:34:90:17:f5:b1:
7a:f6:bd:70:7b:aa:4a:56:7f:4f:5c:54:e0:b9:e3:
64:8e:be:99:40:a4:df:85:6e:12:f5:fa:99:6c:29:
fa:61:89:76:1f:c1:a0:92:78:f2:32:28:bb:b8:95:
46:37:43:67:7e:be:eb:df:02:a7:a4:60:de:cc:4b:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D9:0F:5F:11:05:C6:CD:46:0E:13:E8:F9:1A:71:7E:98:43:8A:5E
X509v3 Authority Key Identifier:
keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/2tkPXxEFxs1GDhPo-RpxfphDil4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4500:0:1::/64
Signature Algorithm: sha256WithRSAEncryption
b5:2a:b8:32:a6:92:78:ae:1a:4c:a1:2e:52:8a:f6:32:7a:31:
6f:80:e7:e4:fd:0e:bd:11:90:7b:a0:cf:dd:b7:31:98:80:af:
fc:a8:c1:79:ea:30:13:2d:77:3b:3c:9c:e5:9e:9a:51:ee:c2:
73:3b:8e:f8:96:7f:61:2b:b2:14:cb:80:ce:80:e6:c1:ca:54:
2f:e1:82:4a:6e:2a:a0:da:b6:b6:41:7f:73:e5:17:dc:09:12:
02:d7:73:e7:ab:dd:6e:33:5a:8d:8f:1e:d4:cb:ae:10:8f:b3:
9b:cc:8a:f2:da:1a:4c:36:a2:9b:60:1d:1a:17:cd:fe:c4:fd:
c8:8a:fd:36:00:9d:68:ad:ec:54:d1:f6:17:87:a2:35:95:ae:
0a:c9:df:f5:f4:27:c1:94:50:2c:78:c6:26:09:8f:07:02:44:
61:f4:96:5a:17:ed:44:e7:5f:94:7e:b1:14:72:21:b2:a3:46:
13:01:d0:11:25:5f:00:56:fe:6d:36:b8:9f:1f:ce:13:81:19:
bf:cc:2c:17:c5:c8:57:95:2c:94:4a:99:23:f5:03:1d:50:2d:
cb:4c:59:cb:f9:e1:b3:9d:2c:56:f8:cd:39:dd:29:8b:66:50:
a8:9f:53:42:9a:bb:35:e1:1b:05:a3:e9:db:62:88:44:60:0c:
7f:81:69:a7
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5
ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNDA3MDEw
MDAyMjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERBRDkwRjVGMTEwNUM2
Q0Q0NjBFMTNFOEY5MUE3MTdFOTg0MzhBNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC95Mu7ufLP8FFfOtlOsrkKfRtYjQip5UIny4fePADV0Budcr/v
YTA4oWbHxYHOt3YEQ67PGJcmQBp+hbuMojiyJLJjY9EN5gYr+dhQKMC4Kt9IrF3L
Wl6P32tjZaapkmQiKLHVlblg365PMA+WvtZyydIqT4kvACoEWymDivX3I4gr/nvg
8flMVZK/zD6pT3/sX/ZG050bVs8ciU2SAJIV1lrypkF76XPxVJlfcEsol2gmN/ZI
rYbRkuuJNcw0kBf1sXr2vXB7qkpWf09cVOC542SOvplApN+FbhL1+plsKfphiXYf
waCSePIyKLu4lUY3Q2d+vuvfAqekYN7MS0VLAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU2tkPXxEFxs1GDhPo+RpxfphDil4wHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj
U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv
Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC8ydGtQWHhFRnhzMUdEaFBvLVJw
eGZwaERpbDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJABF
AAAAAAEwDQYJKoZIhvcNAQELBQADggEBALUquDKmkniuGkyhLlKK9jJ6MW+A5+T9
Dr0RkHugz923MZiAr/yowXnqMBMtdzs8nOWemlHuwnM7jviWf2ErshTLgM6A5sHK
VC/hgkpuKqDatrZBf3PlF9wJEgLXc+er3W4zWo2PHtTLrhCPs5vMivLaGkw2optg
HRoXzf7E/ciK/TYAnWit7FTR9heHojWVrgrJ3/X0J8GUUCx4xiYJjwcCRGH0lloX
7UTnX5R+sRRyIbKjRhMB0BElXwBW/m02uJ8fzhOBGb/MLBfFyFeVLJRKmSP1Ax1Q
LctMWcv54bOdLFb4zTndKYtmUKifU0KauzXhGwWj6dtiiERgDH+Baac=
-----END CERTIFICATE-----
Generated at Fri Jul 26 10:04:39 2024 by rpki-client on console-ams.rpki-client.org