Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/hH8G9i-CJ8KosVt80LVDKboIPic.roa
File: hH8G9i-CJ8KosVt80LVDKboIPic.roa (raw, json)
Hash identifier: g/1rOh9xQgIraTeLl5xF6jYImqjvae5J74JCSI4nCo8=
Subject key identifier: 84:7F:06:F6:2F:82:27:C2:A8:B1:5B:7C:D0:B5:43:29:BA:08:3E:27
Certificate issuer: /CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5
Certificate serial: 05
Authority key identifier: 5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/hH8G9i-CJ8KosVt80LVDKboIPic.roa
Signing time: Mon 21 Aug 2023 05:13:42 +0000
ROA not before: Mon 21 Aug 2023 05:13:42 +0000
ROA not after: Tue 20 Aug 2024 03:15:58 +0000
asID: 131642
IP address blocks: 2401:28e0::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 06 Aug 2024 03:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5
Validity
Not Before: Aug 21 05:13:42 2023 GMT
Not After : Aug 20 03:15:58 2024 GMT
Subject: CN=847F06F62F8227C2A8B15B7CD0B54329BA083E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:8e:0f:ff:6b:08:cb:27:33:97:16:d7:ff:
38:5f:72:9c:3c:96:f5:a0:56:79:52:73:a6:7c:16:
24:43:b4:6e:1d:78:e0:25:47:8b:38:d3:ab:68:c6:
3f:82:09:8b:a3:bc:30:81:67:a0:79:f2:89:50:c1:
fe:45:33:e4:71:ed:70:6a:11:f3:59:ee:18:b8:16:
82:22:73:01:df:58:3c:6a:04:88:73:6d:10:01:c1:
57:7b:da:cc:2f:9f:b0:f1:6b:4d:b5:b5:02:71:f4:
08:a1:d2:d4:21:de:16:18:99:8c:a5:08:e3:d0:56:
29:33:a6:dc:e2:cb:36:eb:5d:cc:93:1f:be:8f:fb:
41:da:42:45:7b:b7:fe:c7:1d:ad:02:4e:13:65:07:
c8:22:00:98:30:c8:d6:25:56:0b:3d:77:cb:cf:b9:
c2:2d:2d:48:24:72:8d:70:b5:33:4e:ea:8a:1c:46:
72:04:eb:3e:b3:5e:05:92:7c:a7:2c:ef:02:16:c6:
38:0b:3b:86:91:7b:47:15:e8:ba:e2:04:f9:89:96:
b3:79:2f:36:2d:18:36:77:c7:f0:88:85:06:c9:98:
ce:cf:35:d4:85:02:3c:35:6b:b6:1b:5b:d1:42:7e:
32:96:03:65:7f:69:d4:e6:46:e7:22:c8:d0:8c:a6:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:06:F6:2F:82:27:C2:A8:B1:5B:7C:D0:B5:43:29:BA:08:3E:27
X509v3 Authority Key Identifier:
keyid:5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/hH8G9i-CJ8KosVt80LVDKboIPic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:28e0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:d9:a0:01:54:75:8d:c2:ef:76:a1:74:fe:68:05:e7:b8:9d:
da:d7:68:96:92:01:53:af:d3:a0:b9:6e:d4:c9:e7:ae:b6:c7:
a4:00:d2:c6:dc:a6:95:7a:33:eb:a5:3d:17:21:91:b3:67:69:
d3:ad:3d:8c:59:da:ce:2c:10:05:f6:43:c7:27:37:b5:6e:bc:
b4:bf:1c:d4:87:34:15:b0:18:c0:b5:62:30:13:47:c3:9a:c0:
e4:f8:c8:4d:45:4f:25:97:59:af:da:72:c1:32:2d:4a:c0:21:
f4:cc:46:e3:89:9c:04:42:17:8f:85:13:ac:0b:c5:d6:ae:ff:
30:83:46:b4:b1:e5:cb:53:87:8e:25:75:86:45:83:5b:11:71:
eb:ee:ce:7e:b2:03:45:27:30:7a:6a:ad:dd:03:b9:02:a8:4f:
89:24:53:63:0d:f6:c2:da:20:66:46:18:ef:eb:2d:a7:29:20:
1e:46:be:b7:cc:c1:b7:d3:88:26:76:77:6a:6b:6e:bc:66:08:
25:31:90:3c:bf:37:61:23:2e:44:f6:88:17:bc:01:b3:5a:e9:
00:ea:2e:fe:86:ec:b8:6e:60:61:be:15:f0:a5:55:7f:de:df:
e5:f5:48:45:80:87:ca:41:d6:3a:2b:23:36:45:1d:32:60:55:
b4:5e:ed:9a
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 6 05:26:03 2024 by rpki-client on console-ams.rpki-client.org