Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/IphRJcn3FLMazP1SzoF9YseUj7U.roa
File: IphRJcn3FLMazP1SzoF9YseUj7U.roa (raw, json)
Hash identifier: QyPsBXb3KhJtdYG1sykKYy5x+KHk3rbKZF9NWw1NsiA=
Subject key identifier: 22:98:51:25:C9:F7:14:B3:1A:CC:FD:52:CE:81:7D:62:C7:94:8F:B5
Certificate issuer: /CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Certificate serial: 03
Authority key identifier: D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/IphRJcn3FLMazP1SzoF9YseUj7U.roa
Signing time: Thu 24 Aug 2023 01:03:35 +0000
ROA not before: Thu 24 Aug 2023 01:03:35 +0000
ROA not after: Thu 22 Aug 2024 08:50:57 +0000
asID: 131149
IP address blocks: 103.6.126.0/23 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Aug 2024 09:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Validity
Not Before: Aug 24 01:03:35 2023 GMT
Not After : Aug 22 08:50:57 2024 GMT
Subject: CN=22985125C9F714B31ACCFD52CE817D62C7948FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:97:a7:7c:be:35:f5:eb:6d:b0:3a:d7:15:c7:
c9:d5:77:08:de:87:aa:b6:dd:25:71:b2:21:cc:44:
86:63:1b:6f:f5:bd:5a:59:0f:43:41:13:81:54:56:
a2:c3:53:0f:b2:e0:9e:16:0e:78:a9:1c:30:a9:ce:
80:a9:ef:ab:69:37:61:12:69:4b:87:87:7f:41:ca:
a2:1e:c5:08:22:db:df:0c:f0:27:02:35:eb:8d:05:
95:27:62:17:e7:9a:74:57:3e:8b:82:6e:85:6c:be:
8b:c7:c8:04:43:eb:fb:8d:48:0a:db:3c:f3:d6:21:
29:71:72:15:b9:3b:f5:68:b4:e9:98:fd:6e:30:ad:
19:73:cf:ca:ea:9e:68:2f:f7:51:0a:8e:89:f9:58:
79:90:cf:12:f3:0a:77:4d:f6:46:b4:d7:92:7f:fc:
1e:c6:d0:63:1c:9e:3f:27:6a:ae:cd:05:28:24:49:
38:95:c1:62:d0:0f:ed:49:87:4d:1e:4e:bf:94:ec:
8c:65:32:57:a4:08:b0:20:0a:47:19:27:79:fe:63:
e0:fc:be:b1:c5:d8:35:86:10:49:ee:74:ab:6f:3f:
88:16:11:6e:7c:d3:81:ac:63:07:52:ee:39:b4:fc:
4a:5c:2c:4c:bf:ed:6c:5e:7f:6b:c2:82:c3:58:5a:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:51:25:C9:F7:14:B3:1A:CC:FD:52:CE:81:7D:62:C7:94:8F:B5
X509v3 Authority Key Identifier:
keyid:D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/IphRJcn3FLMazP1SzoF9YseUj7U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.126.0/23
Signature Algorithm: sha256WithRSAEncryption
72:7b:81:05:9c:51:3a:3b:40:97:04:92:82:fe:8a:4c:e1:03:
16:65:50:4e:5e:cc:8d:e5:3d:ea:4e:61:60:aa:6f:13:0b:dd:
c3:04:26:9a:a1:65:c3:7b:72:67:b9:22:a3:43:b7:39:e7:0f:
3e:03:dd:6e:29:a3:38:df:b0:7c:3a:93:d7:7c:3d:e3:1e:c0:
80:78:08:b7:67:a5:33:68:e3:c0:6d:80:04:0a:d6:e6:0e:87:
d0:1e:7d:1f:39:cb:43:85:30:10:ce:33:c0:bc:eb:10:64:eb:
5a:d9:2e:5d:9e:79:bb:39:95:7f:f0:10:09:f2:fc:0d:e1:21:
cf:02:6b:83:b1:2e:b5:ee:d5:a4:14:e4:92:83:42:14:80:39:
68:6f:28:a1:f2:65:80:7a:dd:e1:64:97:b2:c7:44:38:7d:2d:
14:f1:ca:9e:03:7f:7f:9c:62:a9:9d:82:7d:e8:68:28:52:39:
10:8b:f3:95:4e:47:0c:39:a5:48:95:f0:af:9a:0b:c7:da:2b:
83:5b:53:ad:6d:55:bd:f1:ec:1f:1f:95:ff:e1:84:21:a3:b7:
cc:a0:a5:a1:e5:0f:64:07:4d:ed:fb:97:1d:fa:1b:4e:1d:12:
00:a9:21:75:3f:6e:5c:c1:26:d3:32:97:2e:36:55:32:96:19:
26:78:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 10:58:18 2024 by rpki-client on console-fra.rpki-client.org