Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/Z-mQnEVc0Ngpmu0XJJ_ioK6A9p8.roa
File: Z-mQnEVc0Ngpmu0XJJ_ioK6A9p8.roa (raw, json)
Hash identifier: 2Nd08RLW9Grikw16VmmEAPSIzIJvWVoKGCpUezRlXaM=
Subject key identifier: 67:E9:90:9C:45:5C:D0:D8:29:9A:ED:17:24:9F:E2:A0:AE:80:F6:9F
Certificate issuer: /CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
Certificate serial: 03
Authority key identifier: CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/Z-mQnEVc0Ngpmu0XJJ_ioK6A9p8.roa
Signing time: Wed 20 Sep 2023 18:51:38 +0000
ROA not before: Wed 20 Sep 2023 18:51:38 +0000
ROA not after: Wed 18 Sep 2024 09:08:14 +0000
asID: 131642
IP address blocks: 103.99.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 09:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
Validity
Not Before: Sep 20 18:51:38 2023 GMT
Not After : Sep 18 09:08:14 2024 GMT
Subject: CN=67E9909C455CD0D8299AED17249FE2A0AE80F69F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:48:49:33:49:80:a3:02:1c:89:de:ff:ce:99:
fe:15:1b:04:0c:f1:02:ac:b8:cd:f1:0e:bc:1a:9a:
4d:13:96:08:cb:bc:3b:33:5a:ae:f4:e8:b8:75:81:
34:16:11:71:10:c3:ec:23:7f:70:1d:5a:a9:66:7a:
70:b1:49:d4:f7:a9:64:ac:a7:89:8f:54:ef:ea:ce:
4f:0d:33:de:46:18:5a:0d:59:0a:06:97:f0:ec:51:
df:8f:c8:12:75:8f:19:9c:e0:75:32:1e:45:0d:46:
3a:02:d2:b0:0f:c7:89:87:1b:ef:ed:60:9c:1a:3e:
36:1b:1f:fb:be:1c:f1:ac:74:0f:bf:54:c7:c2:4c:
c4:65:c0:21:67:8a:93:5e:a3:ec:ca:16:34:9c:67:
ff:f8:28:02:2a:bd:51:8b:4c:a8:ea:ff:09:c3:e7:
02:c2:f2:21:d2:e1:ed:d2:2d:7d:d1:1a:0d:88:3d:
1d:c7:10:35:ad:36:49:b6:d5:7a:d4:21:8b:8f:53:
91:8c:03:db:ac:08:fc:a1:a0:b3:f3:4f:09:96:38:
d3:ca:f6:a3:7d:90:e0:3c:c2:48:9e:97:5f:d5:ce:
95:9b:1e:be:8d:27:62:e6:eb:60:36:5b:63:a1:82:
94:31:32:50:ac:43:28:76:4d:26:9e:74:31:0c:b0:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:90:9C:45:5C:D0:D8:29:9A:ED:17:24:9F:E2:A0:AE:80:F6:9F
X509v3 Authority Key Identifier:
keyid:CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/Z-mQnEVc0Ngpmu0XJJ_ioK6A9p8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.142.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:4c:17:f7:d7:cd:0b:d8:01:0d:0e:b4:ce:50:c1:ce:a9:9d:
62:e4:23:bb:c0:f3:e8:6d:4a:c2:04:2f:cb:34:5a:5c:f4:c1:
58:06:4d:4d:cc:29:ba:cf:e9:b1:88:82:5c:c2:a2:e8:13:ff:
f3:be:85:99:f1:0f:e5:56:c1:fb:fe:ac:ed:af:b8:29:56:13:
f7:c4:18:e2:c4:3e:9d:2e:02:19:23:ff:6a:77:c0:a5:13:cc:
20:df:10:2e:5a:c1:72:5d:d3:38:77:aa:e9:be:27:86:30:9b:
a3:aa:e9:86:20:5d:10:2b:f2:2c:d2:bb:25:84:a1:f7:0d:c6:
81:07:91:08:2d:8c:4c:f2:70:77:8d:05:fa:f6:0a:25:43:fc:
e5:9c:3d:18:51:ff:98:d0:6f:b7:fb:06:b7:c4:4f:0d:c9:20:
41:6c:9a:82:0b:79:a8:ff:a6:82:36:50:aa:0f:1a:d0:ce:9a:
93:d4:d9:ac:73:84:03:fb:1a:70:79:78:a4:a4:f5:fd:ed:fd:
66:db:1d:1c:e7:ce:f8:de:42:d1:08:21:e8:a7:d8:3e:0f:1f:
7b:c3:c7:9a:0a:90:09:2a:f7:96:54:9b:c6:02:06:ac:2c:db:
b8:67:25:43:e2:d7:dc:2c:87:ef:2f:3f:e2:d8:ef:3b:69:23:
ec:7e:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 10:53:20 2024 by rpki-client on console-ams.rpki-client.org