Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/tfsyWSrzYK_qUQL_PXHaP8LIkww.roa
File: tfsyWSrzYK_qUQL_PXHaP8LIkww.roa (raw, json)
Hash identifier: YjPotdR1N2fCc3asqpCWYW/gf7kSZwsJ0NruUsjS4g4=
Subject key identifier: B5:FB:32:59:2A:F3:60:AF:EA:51:02:FF:3D:71:DA:3F:C2:C8:93:0C
Certificate issuer: /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial: 0C0D
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/tfsyWSrzYK_qUQL_PXHaP8LIkww.roa
Signing time: Mon 23 Sep 2024 07:51:35 +0000
ROA not before: Mon 23 Sep 2024 07:51:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 150685
IP address blocks: 103.122.116.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Validity
Not Before: Sep 23 07:51:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B5FB32592AF360AFEA5102FF3D71DA3FC2C8930C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:67:d3:71:7a:32:76:62:85:39:7c:93:ec:
fd:82:93:d3:19:ba:17:23:05:de:f0:4f:c4:17:49:
ed:85:8e:50:66:12:f4:48:81:3e:1f:6d:a7:3a:9a:
7c:71:77:8e:39:36:52:61:83:c4:96:00:fb:01:ca:
97:9c:25:36:d8:22:74:6d:b0:58:dc:3b:99:be:ed:
7b:40:9b:59:d6:7a:b4:c4:fd:52:23:10:54:59:7f:
41:c1:f6:ef:28:86:2e:c2:1f:c0:53:02:98:d5:48:
85:0e:75:a0:01:8c:51:3f:2c:be:1b:5f:2b:ef:7a:
90:f3:24:39:95:56:82:44:50:71:a7:b5:df:46:b3:
bf:3c:42:c8:c2:ba:30:a2:e5:0c:aa:48:96:a2:eb:
96:bb:e4:dd:ce:5f:be:cf:fc:5e:5d:ea:51:c0:ea:
a2:04:d3:85:0b:a0:8f:b5:7e:31:46:52:3c:14:73:
df:67:8a:d9:22:bf:7b:b3:cb:47:1d:7b:ee:71:7b:
ce:44:b9:18:ad:77:75:d6:77:3a:e4:1d:83:e5:e5:
c1:6b:c5:7c:a1:0b:32:61:17:ea:1f:9b:d6:16:b1:
55:8b:76:9c:44:f8:52:a4:fd:4d:a1:73:85:d2:a2:
4f:91:b4:7d:28:c0:d3:73:d1:49:3e:05:54:9d:58:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:32:59:2A:F3:60:AF:EA:51:02:FF:3D:71:DA:3F:C2:C8:93:0C
X509v3 Authority Key Identifier:
keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/tfsyWSrzYK_qUQL_PXHaP8LIkww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.116.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:cc:b5:bc:79:54:6e:e1:15:21:ac:0d:55:c4:ad:cb:47:2a:
0b:28:c8:3f:cd:66:87:54:cb:17:db:b9:28:09:42:3f:c6:cc:
60:85:1c:e8:83:c3:44:2d:3f:eb:a6:78:de:db:e1:32:11:54:
ce:19:28:0f:de:27:fb:34:e5:17:32:0b:d2:60:66:27:40:a1:
47:e4:3c:3e:c7:64:c6:e4:63:fb:38:06:a3:b2:7c:06:b4:9d:
49:4c:5e:64:55:e8:5f:fc:15:7d:f4:72:ae:5d:e7:13:ae:48:
b7:9f:1e:79:11:a1:5e:12:f2:99:99:6e:bd:32:c2:54:dd:6b:
2e:c9:80:47:a7:63:1c:41:25:ee:3d:7b:b9:2a:75:3a:e1:23:
fc:d4:80:d2:fb:8a:77:b6:e1:ae:5c:f8:8b:a1:3c:31:12:a1:
09:b5:7b:f7:92:72:60:78:47:5b:00:fd:9b:aa:e4:38:52:04:
68:68:ec:a2:a2:4f:7e:c0:a0:a9:c8:25:9e:8a:92:d7:09:3d:
87:4d:90:c7:7b:de:67:cf:fb:c3:fe:f7:9b:48:25:1c:58:a9:
9c:27:73:90:54:78:75:2c:44:b6:f1:fc:92:50:95:25:71:e3:
0a:dc:38:90:5f:c3:5a:7f:bb:a4:f3:ae:66:b0:9d:0f:36:d6:
56:00:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 06:22:37 2024 by rpki-client on console-ams.rpki-client.org