Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/Q-jxCcJ5mRs6K_V04vlz5DpB1KU.roa
File: Q-jxCcJ5mRs6K_V04vlz5DpB1KU.roa (raw, json)
Hash identifier: FD0MLfUPOv/nYZ6vBF/HyTdWwF5Tx2p1+TbHyecj25c=
Subject key identifier: 43:E8:F1:09:C2:79:99:1B:3A:2B:F5:74:E2:F9:73:E4:3A:41:D4:A5
Certificate issuer: /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial: 0C12
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/Q-jxCcJ5mRs6K_V04vlz5DpB1KU.roa
Signing time: Mon 23 Sep 2024 07:52:26 +0000
ROA not before: Mon 23 Sep 2024 07:52:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 150685
IP address blocks: 2403:8ec0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Oct 2024 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Validity
Not Before: Sep 23 07:52:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=43E8F109C279991B3A2BF574E2F973E43A41D4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:49:21:7d:c9:37:29:81:9f:1b:28:3a:26:3c:
81:43:2a:48:22:80:82:79:08:04:84:e2:2c:1c:e1:
a1:c9:1b:9c:86:1b:fb:f8:c2:18:49:55:29:2f:22:
ec:4d:76:0d:35:ae:91:02:a7:9f:73:d3:ec:44:aa:
28:84:08:a8:ac:44:ca:f6:24:4b:28:11:3f:a3:87:
18:d0:32:a8:81:e2:07:1a:21:2e:6b:a5:ec:d1:71:
50:82:72:50:de:00:9d:3d:af:aa:22:8a:ea:ab:9f:
71:f6:0b:05:40:1c:d4:46:d6:4d:d6:b5:2c:0b:96:
64:ea:c3:72:b1:4e:c4:e9:12:65:27:19:c3:87:65:
de:60:76:23:4e:41:9a:d2:22:cb:cd:f1:05:4c:5d:
bd:3d:52:43:05:32:e8:c4:3b:34:de:6c:5e:3c:56:
b1:1c:62:24:8e:11:90:26:bf:e9:1d:0a:0d:37:45:
09:b7:63:1c:b1:8b:33:44:88:ce:d4:91:6c:e3:79:
c6:e0:45:bc:4f:c0:fe:9f:a4:c0:1e:3a:5a:a6:87:
f3:45:ad:c4:6d:1c:b0:06:63:53:ed:a6:d7:a3:a9:
96:c0:39:36:f4:23:6b:cc:04:3e:d4:b0:eb:41:84:
c7:f2:a0:ad:ce:0b:10:c5:bf:d2:1e:7d:b9:a8:a3:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E8:F1:09:C2:79:99:1B:3A:2B:F5:74:E2:F9:73:E4:3A:41:D4:A5
X509v3 Authority Key Identifier:
keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/Q-jxCcJ5mRs6K_V04vlz5DpB1KU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:8ec0::/48
Signature Algorithm: sha256WithRSAEncryption
9b:4d:cf:bd:dc:a3:8c:a3:97:70:7a:4a:08:eb:48:be:71:c0:
a0:5f:e2:12:9f:6e:ea:91:2a:ae:aa:eb:66:f7:c8:41:92:42:
47:22:61:3a:c7:85:e1:2c:06:17:59:35:6e:35:1b:00:ed:88:
15:8a:53:27:87:ac:b1:5f:03:72:f0:0e:27:b6:d6:9d:1f:41:
de:c8:b6:93:96:1d:7d:e3:bf:11:fe:fe:79:d7:35:ec:47:4c:
d3:97:80:f3:2f:8b:ca:f8:6f:77:c7:87:03:39:5e:1c:e6:70:
7f:71:10:c8:6d:f8:82:e4:1f:4f:0f:42:43:4c:3f:32:6f:f2:
1a:8d:03:f1:c3:d6:90:e1:33:e9:55:19:4e:80:d0:c4:c3:df:
46:bc:1c:51:3e:5b:1e:ef:9a:21:38:61:d9:c1:57:ad:ec:fb:
be:f7:2b:2b:b5:9b:46:5b:8c:1f:e2:79:08:4c:26:88:c9:7d:
85:fb:ab:01:aa:fa:2f:b5:23:f4:a8:5b:39:cf:ec:4f:ab:3f:
e1:7c:83:07:b2:6b:e4:dc:01:52:6d:81:3f:b8:17:fd:9c:e5:
09:ac:52:8a:57:af:d9:61:5b:ee:1f:24:c8:10:45:bc:5c:b3:
f6:79:97:c3:b0:cf:05:a3:c6:8c:32:3b:aa:2b:22:70:ca:88:
e3:72:2a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 04:48:03 2024 by rpki-client on console-fra.rpki-client.org