Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TKw8Sc9WR32xfB_m3BFQdWd_uuQ.roa
File: TKw8Sc9WR32xfB_m3BFQdWd_uuQ.roa (raw, json)
Hash identifier: fltbZAhTYf9Xqgj9P6hH2DyKTPH2NDeLAN2Lvn+uehs=
Subject key identifier: 4C:AC:3C:49:CF:56:47:7D:B1:7C:1F:E6:DC:11:50:75:67:7F:BA:E4
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 11B5
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TKw8Sc9WR32xfB_m3BFQdWd_uuQ.roa
Signing time: Mon 26 Aug 2024 05:11:03 +0000
ROA not before: Mon 26 Aug 2024 05:11:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 43.240.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 06:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4533 (0x11b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:11:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4CAC3C49CF56477DB17C1FE6DC115075677FBAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:7f:19:09:e4:88:25:f6:b1:93:5e:97:f0:
75:55:88:88:92:8d:4d:87:48:75:16:05:ac:a3:0d:
16:a8:cf:94:3a:ce:a4:18:22:77:c3:8e:0c:c6:b0:
4c:70:4e:15:f3:e3:f3:2f:3b:cf:3d:5b:5f:cd:8b:
46:37:76:b3:ff:c5:4f:a3:36:72:22:53:6e:30:9f:
45:94:7b:48:a2:e0:ba:6f:9c:42:42:39:54:80:69:
13:bd:ee:44:0b:c7:00:27:a8:3f:2f:17:ac:eb:4e:
10:6c:49:7b:07:48:b6:b2:9f:1a:29:e1:2a:c9:84:
c7:26:79:90:04:a3:65:6d:7a:be:f0:60:53:39:c5:
27:22:7f:9a:36:da:4b:13:32:bc:5b:d1:b6:74:12:
d0:91:76:89:e5:52:b3:82:98:65:71:ce:12:b4:f8:
33:09:90:63:00:b2:d3:c1:65:70:25:5e:87:b6:c5:
e7:f2:58:de:f6:1d:32:c3:37:ea:46:f4:3b:a5:a7:
61:90:51:92:58:bc:d9:39:5e:e7:9c:20:de:26:47:
81:ae:fd:b7:11:7c:27:75:31:69:eb:3d:f4:0c:0a:
3a:65:3f:a8:78:50:66:c2:44:9f:bc:34:90:6e:12:
13:97:98:a2:f8:a8:c2:c2:2a:d4:d9:35:1b:fe:05:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AC:3C:49:CF:56:47:7D:B1:7C:1F:E6:DC:11:50:75:67:7F:BA:E4
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TKw8Sc9WR32xfB_m3BFQdWd_uuQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:39:16:41:84:00:d4:b2:b9:44:a6:dd:10:9c:fd:9c:b7:fd:
d1:ce:3a:15:f2:6c:91:4b:e5:e4:69:7d:ff:cd:bd:b7:51:40:
a9:5e:ad:e3:16:67:d2:0a:8c:5e:94:15:fe:2d:dc:86:12:8c:
4e:28:54:02:89:4e:f6:9e:f9:c7:3d:fb:e6:24:38:28:b4:6f:
7b:42:c3:9e:a5:7c:4a:cf:25:70:a4:e4:db:b1:e2:7c:2b:c1:
53:04:f5:96:7a:ae:c0:f3:07:b6:b2:de:5a:3d:a9:71:b1:c3:
b3:cd:9c:49:a6:ce:0c:78:29:4c:b7:62:05:50:82:a1:93:9e:
38:1e:46:9e:46:f5:fc:c5:69:8a:8e:43:ad:12:9a:90:59:c6:
37:06:75:9d:3b:f4:d6:4c:6a:6b:86:ba:92:bf:74:88:8a:3a:
5d:de:18:0d:f6:dc:5b:66:43:5f:54:15:de:a2:a2:68:ff:b2:
6c:f8:aa:b3:aa:a6:89:56:74:bd:32:34:c3:5b:76:1c:c7:b1:
5a:84:e4:39:ce:46:ef:42:0e:54:dc:dc:b6:1a:72:12:72:f1:
5a:91:f0:90:09:9d:19:2c:c5:1b:22:80:51:6c:27:50:71:c5:
40:7e:6a:16:2e:49:31:89:8c:4d:1b:db:93:dc:f2:5a:8f:00:
b5:c6:46:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 08:26:38 2024 by rpki-client on console-fra.rpki-client.org