Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/RnYfM0b_R9OgcYbb2eav-G32KH4.roa
File: RnYfM0b_R9OgcYbb2eav-G32KH4.roa (raw, json)
Hash identifier: rxxzq6q/UH6Vec2JTTQjindVqSA+fRvY1mASH1A8Rv0=
Subject key identifier: 46:76:1F:33:46:FF:47:D3:A0:71:86:DB:D9:E6:AF:F8:6D:F6:28:7E
Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial: 0E62
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/RnYfM0b_R9OgcYbb2eav-G32KH4.roa
Signing time: Mon 26 Aug 2024 05:16:59 +0000
ROA not before: Mon 26 Aug 2024 05:16:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38042
IP address blocks: 103.137.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 06:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3682 (0xe62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Validity
Not Before: Aug 26 05:16:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=46761F3346FF47D3A07186DBD9E6AFF86DF6287E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:9c:25:9c:d2:d7:61:9e:1a:a6:88:a5:8d:
64:bc:8b:32:e6:2c:0d:ed:aa:fd:b7:11:6c:ff:28:
da:1b:4b:a1:ff:30:b5:39:87:2f:b3:9a:fc:f4:26:
be:93:96:46:73:43:8f:b4:22:6c:1d:2a:92:dc:0a:
03:a8:03:f2:b3:b3:3c:70:75:22:00:b8:4d:47:93:
bb:74:06:2b:52:e2:2a:18:a2:fd:4b:eb:7c:1a:5c:
0d:e3:05:51:df:e3:49:e1:3e:cc:df:ff:7f:66:77:
1b:f2:c8:33:9d:bc:b8:7f:f5:ef:92:37:0b:68:26:
d2:eb:9e:d1:4e:5e:17:b8:47:5c:f3:7c:98:9b:cf:
66:16:00:b2:93:3c:21:22:07:1c:a0:d4:ca:ce:4a:
50:64:59:9f:17:17:1b:64:96:64:f7:8c:9f:fc:47:
31:70:0d:a3:46:5f:e3:81:b0:fa:b1:6d:52:b7:8c:
ca:be:b9:59:40:9d:f6:ae:b1:7e:be:28:3a:90:c7:
cd:68:4a:5d:42:ae:a8:9e:7a:0d:48:cd:a0:70:9a:
90:88:09:69:da:8f:91:3b:47:d4:dd:93:be:49:19:
40:e2:07:1b:18:d3:34:6a:2f:97:09:d3:44:72:b8:
bb:07:ce:b7:5e:aa:4d:63:63:89:63:68:af:f4:50:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:76:1F:33:46:FF:47:D3:A0:71:86:DB:D9:E6:AF:F8:6D:F6:28:7E
X509v3 Authority Key Identifier:
keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/RnYfM0b_R9OgcYbb2eav-G32KH4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.246.0/23
Signature Algorithm: sha256WithRSAEncryption
81:83:28:0c:ab:08:64:1c:22:ac:3c:0c:04:48:0d:79:c5:75:
71:7f:b4:05:32:35:28:25:85:6d:a8:b7:1c:d4:6b:7c:e5:93:
d6:3d:55:62:be:c9:d2:d3:55:2d:5b:96:08:7b:2f:af:a7:cb:
0b:5a:53:e7:09:53:af:26:d2:b4:03:5c:92:4d:34:7f:89:9b:
55:c4:5a:ea:cc:4c:ec:66:6d:94:36:6d:56:d5:df:0c:4a:2f:
2c:03:c4:db:76:bc:55:68:69:95:0f:e4:16:68:95:b3:0d:cd:
81:7c:0a:58:2e:f7:b7:8e:8a:b8:8a:5e:a7:b8:5f:0d:32:11:
fc:5c:94:dd:40:11:1a:c9:5d:e9:f6:d8:a4:bd:3b:89:58:f1:
a3:7d:e3:45:1b:74:f6:2a:43:44:f7:d5:61:b8:21:66:f5:c8:
db:32:f4:10:18:03:18:1a:c2:28:8b:a3:48:e3:92:3a:74:1d:
ac:e8:d7:13:4d:92:65:46:23:07:56:a9:88:5c:8f:22:7d:94:
2e:ed:e3:e1:4e:85:38:d6:41:00:ef:60:d3:86:4d:83:ee:57:
c9:4c:eb:e4:71:a3:9f:90:dc:da:74:6b:ff:eb:15:c0:64:5b:
fd:0c:f9:d7:1a:6f:48:a6:74:6a:54:a4:87:2f:85:fb:4e:c9:
bb:ae:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:27 2024 by rpki-client on console-fra.rpki-client.org