Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/Es8hMs10qQXSmDmXCDkXkePwpvE.roa
File: Es8hMs10qQXSmDmXCDkXkePwpvE.roa (raw, json)
Hash identifier: mL8V8+KlOXjl8bHA0fE69ROid5JysVegrjB7D0WLKfQ=
Subject key identifier: 12:CF:21:32:CD:74:A9:05:D2:98:39:97:08:39:17:91:E3:F0:A6:F1
Certificate issuer: /CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2
Certificate serial: 05
Authority key identifier: A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/Es8hMs10qQXSmDmXCDkXkePwpvE.roa
Signing time: Wed 20 Sep 2023 18:54:30 +0000
ROA not before: Wed 20 Sep 2023 18:54:30 +0000
ROA not after: Wed 18 Sep 2024 09:08:03 +0000
asID: 131642
IP address blocks: 2401:3a20::/32 maxlen: 64
Validation: Failed, certificate revoked on Wed 04 Sep 2024 09:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2
Validity
Not Before: Sep 20 18:54:30 2023 GMT
Not After : Sep 18 09:08:03 2024 GMT
Subject: CN=12CF2132CD74A905D298399708391791E3F0A6F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:10:ff:7a:10:ec:85:f2:bc:e1:c6:9c:e4:
1e:4f:68:69:a2:23:73:1a:57:7d:69:9d:49:dd:74:
9b:64:d8:45:55:fa:26:8a:96:c0:70:20:1f:4b:b6:
a9:49:41:87:61:a7:90:04:5b:b8:11:8f:f4:71:55:
a4:c0:7d:ba:54:50:de:cd:13:04:29:d2:f5:e7:f3:
c7:9c:88:dc:17:35:45:bc:57:54:ec:01:39:11:63:
03:8f:f5:cb:db:86:37:06:25:8e:15:6a:f2:1a:4e:
9f:a4:b0:5f:e5:ea:ee:ce:2c:82:8e:c4:18:18:20:
62:cb:85:22:68:c7:fc:3c:5b:25:18:38:3a:c8:85:
cd:d3:92:a2:62:83:94:6e:73:51:c1:1d:d7:28:11:
ec:e5:6a:3c:0b:57:36:68:18:0b:32:93:57:c3:2e:
6b:d1:e1:85:eb:cd:fd:56:c0:5c:c3:01:e8:f5:26:
aa:23:34:b7:4e:2c:42:11:b7:20:e8:f7:d2:85:71:
b2:4a:71:bb:6c:62:52:18:40:74:1e:0b:34:a2:72:
74:a8:c8:e3:08:f9:84:de:2e:3f:64:42:bb:6a:ec:
0c:15:8b:6b:8e:47:cb:31:22:70:a3:d0:03:69:cd:
c8:be:98:de:31:48:2a:2f:0b:f6:cc:e7:fa:ed:c9:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CF:21:32:CD:74:A9:05:D2:98:39:97:08:39:17:91:E3:F0:A6:F1
X509v3 Authority Key Identifier:
keyid:A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/Es8hMs10qQXSmDmXCDkXkePwpvE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3a20::/32
Signature Algorithm: sha256WithRSAEncryption
93:26:a3:ec:61:1a:9d:b9:60:61:2d:7f:a8:cd:35:aa:e7:4d:
12:3c:69:53:8c:d8:b4:e3:3a:9d:46:28:ce:94:2e:24:d0:59:
e1:3d:bb:08:93:ee:64:20:5d:c3:69:8a:16:1d:8c:0f:fa:85:
8f:ec:97:16:cd:b1:f8:c3:5f:bf:4a:24:9d:3d:b7:9a:84:50:
9a:48:11:2b:b9:a3:00:8f:05:56:eb:be:23:1e:ee:1a:38:82:
c3:6a:83:ce:b0:23:a8:d5:6a:19:48:c3:76:b7:01:f5:23:e3:
87:22:76:fa:10:ee:ae:0e:5d:7b:50:45:af:65:8a:a4:7f:76:
6b:db:22:91:fc:15:c3:93:d9:d9:05:b8:c3:d8:ef:cb:4c:58:
f8:7d:86:4e:89:46:d2:c4:26:f0:b8:01:12:bb:52:32:47:ff:
cd:92:ba:7d:1b:0c:52:76:ec:4c:0a:8f:84:c3:03:a5:59:d5:
68:79:5c:cc:83:6b:a6:31:58:7d:4e:eb:3d:9a:2c:4c:2c:5d:
9b:43:27:17:a0:89:45:aa:32:31:07:e4:5c:df:0b:c1:e6:e2:
c8:34:9b:3c:07:ea:c6:1f:ea:31:91:00:b5:ee:3b:6f:ea:0f:
d3:8c:76:ae:3d:85:9f:e7:8a:2c:7e:c1:3e:aa:00:ec:4a:3b:
d3:9f:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 10:11:23 2024 by rpki-client on console-fra.rpki-client.org