Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JDA/8lkmVnq7sw-2TSUWtI5OJz9YW5g.roa
File: 8lkmVnq7sw-2TSUWtI5OJz9YW5g.roa (raw, json)
Hash identifier: EE2Sw+kJtLfgBFkwShzbAPpa8tb1O2+TexqakqdoE2s=
Subject key identifier: F2:59:26:56:7A:BB:B3:0F:B6:4D:25:16:B4:8E:4E:27:3F:58:5B:98
Certificate issuer: /CN=86F6D06B4049386A106E5ED22656A93D9F355274
Certificate serial: 07
Authority key identifier: 86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/8lkmVnq7sw-2TSUWtI5OJz9YW5g.roa
Signing time: Wed 06 Dec 2023 07:14:00 +0000
ROA not before: Wed 06 Dec 2023 07:14:00 +0000
ROA not after: Thu 28 Nov 2024 15:30:20 +0000
asID: 18041
IP address blocks: 2401:55e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Nov 2024 15:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86F6D06B4049386A106E5ED22656A93D9F355274
Validity
Not Before: Dec 6 07:14:00 2023 GMT
Not After : Nov 28 15:30:20 2024 GMT
Subject: CN=F25926567ABBB30FB64D2516B48E4E273F585B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:c9:19:08:99:27:44:cf:43:44:78:40:1b:
6d:99:81:ea:9d:31:39:85:c3:04:36:fe:38:63:1c:
df:08:b8:97:b4:0a:26:c8:39:7d:71:3c:0b:8b:e9:
fb:5a:0a:27:41:30:4d:d3:d0:29:dd:f4:95:dc:91:
d2:b1:fb:fc:e2:43:87:39:64:48:0a:81:75:b5:f6:
26:2e:18:d4:8f:7f:3e:6e:f1:92:e8:3f:c9:c1:86:
13:78:9c:18:45:8c:58:b2:23:fc:3f:d8:b1:60:79:
18:da:23:5b:aa:78:a2:f9:67:b3:89:66:73:90:b3:
2d:3d:1c:45:33:e3:02:5e:e3:23:e0:b8:e0:14:ff:
5c:98:5d:59:eb:e4:e1:94:f1:82:f1:94:9f:81:2d:
00:86:35:1a:2f:25:89:c3:69:6a:40:49:df:d8:cb:
16:01:04:a0:07:69:44:73:81:d0:d5:91:ca:bc:d8:
aa:7a:1c:15:26:0a:ff:ac:dc:51:f2:c6:28:2b:7d:
e2:ee:02:01:78:5f:45:45:6a:26:10:26:1b:e0:c6:
c9:7f:5e:8d:26:98:61:75:7d:06:fe:80:87:30:8a:
6e:8f:13:40:97:b3:98:04:f5:e5:17:f8:4b:a3:c8:
86:b0:9f:62:1f:9b:55:55:61:10:dd:59:62:5d:ca:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:26:56:7A:BB:B3:0F:B6:4D:25:16:B4:8E:4E:27:3F:58:5B:98
X509v3 Authority Key Identifier:
keyid:86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/8lkmVnq7sw-2TSUWtI5OJz9YW5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:55e0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:9d:91:87:4c:4c:a6:86:c3:ee:33:f2:5a:86:66:e6:ee:76:
a7:6e:5e:14:f1:8b:55:55:a5:6d:0b:74:69:10:f9:03:7d:d1:
f2:89:03:5b:5a:94:e3:a3:91:49:64:a1:ac:58:fd:df:c0:4c:
39:91:26:31:e3:df:5d:8b:e9:d7:23:a4:de:c8:6f:70:e4:91:
34:a0:31:d7:ed:ac:d2:0d:01:ef:bf:10:b5:d8:1c:f8:d5:69:
6b:fa:bb:ac:d0:f1:99:f6:9b:a2:3a:a9:eb:83:1e:58:15:56:
7a:4a:32:b6:01:70:17:9c:b6:50:c0:74:ee:40:42:fb:b2:ab:
29:0a:28:03:58:94:69:1e:6b:2d:67:42:d7:2c:25:cd:c4:03:
a6:48:e9:e4:2d:7c:1d:e6:5b:a8:57:b4:07:1c:2b:d1:b1:b1:
0e:c1:34:e0:7b:c9:b4:56:90:6b:40:71:a6:de:eb:b9:f9:d2:
6d:da:ea:5a:88:c2:33:80:8d:f9:1e:56:73:31:19:db:c1:76:
ae:90:40:26:aa:4a:9b:bf:1b:69:a7:f9:ee:08:d0:96:a8:fa:
a4:c5:4f:8c:7d:3e:f6:99:cc:08:2a:cc:b9:8b:95:9e:50:fb:
b0:45:7a:21:2f:b5:99:6b:b7:3b:2f:d8:65:ea:01:30:01:88:
2c:c3:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 18:30:09 2024 by rpki-client on console-fra.rpki-client.org