Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CTII/6XnWam9ZmC7b4AtKqonXPNw9bdQ.roa
File: 6XnWam9ZmC7b4AtKqonXPNw9bdQ.roa (raw, json)
Hash identifier: NvWv/3EK0Rm9TlISF5sX4UdoObu9zdd78XOnnyHD4XI=
Subject key identifier: E9:79:D6:6A:6F:59:98:2E:DB:E0:0B:4A:AA:89:D7:3C:DC:3D:6D:D4
Certificate issuer: /CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
Certificate serial: 1157
Authority key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/6XnWam9ZmC7b4AtKqonXPNw9bdQ.roa
Signing time: Wed 20 Sep 2023 14:37:38 +0000
ROA not before: Wed 20 Sep 2023 14:37:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 103.130.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 02:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4439 (0x1157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
Validity
Not Before: Sep 20 14:37:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E979D66A6F59982EDBE00B4AAA89D73CDC3D6DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:76:cb:49:8e:e1:2f:64:03:c4:1a:1f:b7:
72:45:bc:79:a3:8b:02:12:80:f2:eb:70:36:63:ef:
c4:da:87:7d:ba:85:93:a4:f6:da:86:0a:89:04:27:
b3:6a:4e:56:c9:08:7a:e7:82:69:d3:3e:38:e3:1b:
d6:08:76:dd:20:dc:a0:97:c1:7c:20:3a:80:71:1f:
61:a9:d5:a4:05:d3:f3:bc:dc:d7:8e:44:df:d2:5f:
9d:0b:4e:37:da:3d:4c:5e:a2:38:58:23:43:03:ae:
4c:86:ac:de:3e:00:fa:ea:11:06:0e:4b:ee:64:75:
3d:76:ff:d1:0a:c6:e4:74:7b:3d:70:4e:c1:4c:7c:
6f:d1:4d:5d:ae:cd:c6:73:31:37:65:93:83:70:e3:
05:6b:f7:83:f9:27:83:38:07:f6:d2:cc:1e:15:e9:
5e:81:91:6a:b7:c2:17:6d:be:40:92:6e:bf:82:32:
24:09:df:e3:20:6c:6c:19:67:47:3a:29:56:7f:54:
07:c7:27:a0:79:aa:21:ca:f7:63:0c:bf:f1:d4:a6:
9c:e2:65:45:e7:87:74:17:09:6e:b2:16:37:f3:f6:
a8:55:b3:57:69:d2:12:84:a2:c5:36:19:6f:bd:8b:
19:ad:9a:27:1a:f0:83:01:0c:32:98:28:9a:27:da:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:79:D6:6A:6F:59:98:2E:DB:E0:0B:4A:AA:89:D7:3C:DC:3D:6D:D4
X509v3 Authority Key Identifier:
keyid:FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/6XnWam9ZmC7b4AtKqonXPNw9bdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.248.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8d:eb:60:62:29:de:83:0a:fd:d1:32:c0:66:8e:7e:e4:41:
04:3b:2a:c4:83:87:11:d2:fb:cd:17:47:08:e1:af:08:e7:5b:
6c:bc:ff:22:8f:85:15:2f:c6:b0:81:6f:ed:6a:0a:ef:ad:2a:
38:9a:9a:84:49:57:11:62:8f:23:08:89:b9:32:e7:96:00:7b:
12:7d:c9:63:a0:48:83:ab:df:5c:d1:9c:61:bc:22:76:5e:8f:
17:1a:ca:9f:c4:58:2e:ff:40:09:ff:8e:c8:a2:14:04:9a:06:
e5:c8:ff:c6:01:88:31:c5:f3:c6:d6:e3:e0:81:82:f2:87:bc:
ec:2c:cc:16:7b:e2:53:b6:3e:a6:20:ac:2c:c9:62:aa:79:3b:
bf:1e:19:c5:b1:59:c4:c3:41:c1:03:83:c0:52:2c:c7:e2:ed:
84:06:db:b7:11:c1:35:4f:2b:d1:c3:6d:e1:d4:bc:6c:bb:01:
3b:6f:55:16:fc:5f:4a:c9:67:c2:e6:39:2e:21:ab:1c:c3:5d:
14:84:21:f8:85:86:4f:13:92:96:a9:8b:7a:1f:c5:d1:23:8c:
23:c6:ed:8b:2f:4e:f2:bc:ca:71:f1:d1:c6:83:8f:13:b8:05:
2d:0d:32:5a:8a:ed:9b:ef:0a:74:cf:f8:3d:d0:92:df:f4:bd:
f4:9c:a4:91
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJE
M0FDOUZDNDRDM0REMkFCN0I1RDIwQkMxNThDODJEODNEMjYwQTAeFw0yMzA5MjAx
NDM3MzhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU5NzlENjZBNkY1OTk4
MkVEQkUwMEI0QUFBODlENzNDREMzRDZERDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCncXbLSY7hL2QDxBoft3JFvHmjiwISgPLrcDZj78Tah326hZOk
9tqGCokEJ7NqTlbJCHrngmnTPjjjG9YIdt0g3KCXwXwgOoBxH2Gp1aQF0/O83NeO
RN/SX50LTjfaPUxeojhYI0MDrkyGrN4+APrqEQYOS+5kdT12/9EKxuR0ez1wTsFM
fG/RTV2uzcZzMTdlk4Nw4wVr94P5J4M4B/bSzB4V6V6BkWq3whdtvkCSbr+CMiQJ
3+MgbGwZZ0c6KVZ/VAfHJ6B5qiHK92MMv/HUppziZUXnh3QXCW6yFjfz9qhVs1dp
0hKEosU2GW+9ixmtmica8IMBDDKYKJon2uu5AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU6XnWam9ZmC7b4AtKqonXPNw9bdQwHwYDVR0jBBgwFoAU+9Osn8RMPdKre10g
vBWMgtg9JgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1RJSS8t
OU9zbjhSTVBkS3JlMTBndkJXTWd0ZzlKZ28uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly05T3NuOFJNUGRLcmUxMGd2QldNZ3RnOUpnby5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0NUSUkvNlhuV2FtOVptQzdiNEF0S3FvblhQ
Tnc5YmRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeC+DAN
BgkqhkiG9w0BAQsFAAOCAQEAUI3rYGIp3oMK/dEywGaOfuRBBDsqxIOHEdL7zRdH
COGvCOdbbLz/Io+FFS/GsIFv7WoK760qOJqahElXEWKPIwiJuTLnlgB7En3JY6BI
g6vfXNGcYbwidl6PFxrKn8RYLv9ACf+OyKIUBJoG5cj/xgGIMcXzxtbj4IGC8oe8
7CzMFnviU7Y+piCsLMliqnk7vx4ZxbFZxMNBwQODwFIsx+LthAbbtxHBNU8r0cNt
4dS8bLsBO29VFvxfSslnwuY5LiGrHMNdFIQh+IWGTxOSlqmLeh/F0SOMI8btiy9O
8rzKcfHRxoOPE7gFLQ0yWortm+8KdM/4PdCS3/S99JykkQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org