Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/_xwKeM2uZAQCOwYh0zptXvRGs0Y.roa
File: _xwKeM2uZAQCOwYh0zptXvRGs0Y.roa (raw, json)
Hash identifier: UU16cOUR1H2v4jqyhjHG8og2Nauu0qKUfyxaUOTNFX0=
Subject key identifier: FF:1C:0A:78:CD:AE:64:04:02:3B:06:21:D3:3A:6D:5E:F4:46:B3:46
Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803
Certificate serial: 07
Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/_xwKeM2uZAQCOwYh0zptXvRGs0Y.roa
Signing time: Mon 25 Mar 2024 14:43:48 +0000
ROA not before: Mon 25 Mar 2024 14:43:48 +0000
ROA not after: Fri 21 Mar 2025 15:30:27 +0000
asID: 20473
IP address blocks: 157.20.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 15:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803
Validity
Not Before: Mar 25 14:43:48 2024 GMT
Not After : Mar 21 15:30:27 2025 GMT
Subject: CN=FF1C0A78CDAE6404023B0621D33A6D5EF446B346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:e4:49:d3:d5:6e:ce:79:ad:9f:54:b9:fa:
be:cf:10:c6:13:32:b2:2c:8e:b7:a9:cf:cc:2a:15:
41:00:e3:0e:25:4d:49:dd:d9:79:11:a7:79:42:9b:
d1:08:29:50:75:f6:5d:61:1f:7b:c4:06:2c:bb:b8:
3b:54:ed:58:8f:03:84:29:f0:18:15:8d:9f:5d:9b:
17:67:4a:28:e7:d9:c9:8a:7b:86:fa:01:4f:c3:4c:
37:f8:eb:65:4f:98:19:e2:a6:87:cd:6c:c5:1f:03:
2c:c8:39:d7:13:95:b7:29:14:33:1c:f6:8f:e2:78:
4a:bd:8f:7a:2f:0a:d4:42:c7:e1:2f:30:72:c2:a0:
07:91:07:e5:66:95:8e:82:a2:f5:3c:af:97:56:65:
db:a4:fb:73:78:c6:26:cb:5f:ea:79:d1:6e:0b:27:
7c:57:44:db:0d:62:70:9f:58:ed:f5:34:44:00:4f:
2f:c4:ff:61:59:43:e4:4d:17:54:71:bc:d9:de:ac:
cd:10:56:b1:b8:c6:e6:4c:88:de:40:c8:ce:2b:b8:
3e:9c:0a:ce:a3:5a:52:4d:61:ea:b9:ac:bf:29:da:
d9:ec:1a:a7:1e:39:0b:2a:9d:51:1e:e7:59:88:4b:
78:87:a9:b6:c7:f1:da:7c:9d:89:b5:db:dc:85:09:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:0A:78:CD:AE:64:04:02:3B:06:21:D3:3A:6D:5E:F4:46:B3:46
X509v3 Authority Key Identifier:
keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/_xwKeM2uZAQCOwYh0zptXvRGs0Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.248.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:3a:82:82:0d:cc:ae:b5:8b:87:be:c1:2a:79:7e:4e:94:f4:
65:08:cf:97:bb:ca:5b:4e:99:b8:b9:87:95:73:3c:be:17:1b:
e3:c7:11:3a:6e:b1:75:cb:6b:97:72:a7:c5:64:07:e3:30:61:
80:2d:e2:cc:ad:1b:d3:09:7e:5f:ac:54:07:42:d6:51:ce:00:
34:fd:cf:50:bf:69:df:86:c6:f1:d5:90:bb:87:2e:44:54:30:
c5:90:6e:ba:6f:14:5f:60:ee:58:2e:69:11:2c:d9:a8:00:68:
c5:8c:bf:ca:22:46:6f:2f:8d:c3:a3:8a:96:a3:2e:96:bb:1e:
69:ac:09:a0:35:eb:cc:0b:e9:42:a5:bf:c3:5d:4e:2f:fc:06:
64:45:a7:f9:5d:e5:11:b6:3a:93:0d:bf:ef:12:c7:d1:6d:24:
82:54:e0:8c:be:d2:5c:cc:92:e2:b7:52:c0:f3:5e:df:7c:54:
64:e9:a6:d8:35:9d:bb:91:50:20:c7:7f:ca:ce:e2:ed:94:d3:
d7:47:c0:4d:8c:ee:6d:16:d5:39:61:9d:44:71:a7:a6:d3:25:
5b:d2:a4:a9:e4:73:27:04:d4:62:88:ea:3f:cc:a0:41:83:e2:
da:36:49:79:14:54:83:f4:78:07:23:4e:3b:e2:48:db:5a:ab:
b1:3f:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org