Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JDA/ig2ovI9HAWFiX-LCA3miDNZLLfg.roa
File: ig2ovI9HAWFiX-LCA3miDNZLLfg.roa (raw, json)
Hash identifier: lt9M33qeKqzotlJ8BOATADerwZ4aCmJwytbdWYhA138=
Subject key identifier: 8A:0D:A8:BC:8F:47:01:61:62:5F:E2:C2:03:79:A2:0C:D6:4B:2D:F8
Certificate issuer: /CN=86F6D06B4049386A106E5ED22656A93D9F355274
Certificate serial: 03
Authority key identifier: 86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/ig2ovI9HAWFiX-LCA3miDNZLLfg.roa
Signing time: Wed 06 Dec 2023 07:13:35 +0000
ROA not before: Wed 06 Dec 2023 07:13:35 +0000
ROA not after: Thu 28 Nov 2024 15:30:20 +0000
asID: 38136
IP address blocks: 210.79.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 15:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86F6D06B4049386A106E5ED22656A93D9F355274
Validity
Not Before: Dec 6 07:13:35 2023 GMT
Not After : Nov 28 15:30:20 2024 GMT
Subject: CN=8A0DA8BC8F470161625FE2C20379A20CD64B2DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:a3:7e:2d:c9:e4:12:e2:2b:fb:b5:dd:00:
ab:49:ac:9e:73:d1:38:23:fe:ad:4b:7d:90:b1:a0:
fc:0a:49:a2:b6:7a:5b:2e:44:f9:ab:38:a1:a8:8a:
e0:5b:3b:3c:e4:64:fb:fc:1a:cb:f4:13:6e:3c:ec:
cc:8d:a9:0b:fb:db:2e:f6:78:cf:a1:ac:ba:cf:b3:
95:41:b0:5c:e1:3a:64:14:55:29:a5:44:ec:28:f6:
6c:6c:41:0a:f3:4f:b4:cb:e8:61:17:e4:bd:ca:ed:
56:b5:a3:53:1a:35:6d:a3:b2:81:84:fe:9c:e0:3e:
61:96:ff:1f:69:8c:28:5d:2a:f1:01:37:bd:45:49:
4c:f0:bb:e9:45:de:73:33:d5:56:13:dc:1f:99:96:
69:82:1d:23:64:69:df:fa:c2:57:76:08:51:45:b3:
9c:86:7c:80:80:d8:57:ad:7c:75:7c:05:4f:45:a4:
75:45:d1:9d:36:b2:66:60:5b:80:75:88:42:a1:6d:
f5:46:1b:db:b5:ab:25:e0:e3:3e:d1:10:c1:35:58:
9d:1a:e1:9c:42:e3:55:b4:22:5a:6e:02:d2:2c:be:
81:07:e2:e0:b7:94:6a:9c:75:68:e9:50:5c:42:a1:
13:d5:8d:77:b6:25:87:4a:9e:33:f0:a2:7c:41:38:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:A8:BC:8F:47:01:61:62:5F:E2:C2:03:79:A2:0C:D6:4B:2D:F8
X509v3 Authority Key Identifier:
keyid:86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/ig2ovI9HAWFiX-LCA3miDNZLLfg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.154.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:c6:e7:d2:c0:18:f8:f4:5a:8f:69:b4:7f:b4:d1:d9:57:51:
b0:7a:fb:5b:af:26:a1:fb:b0:7d:a6:90:cc:fc:6d:8a:9a:db:
8c:81:6b:a5:2b:22:6f:7f:86:92:c0:05:da:bf:3a:20:49:95:
00:62:0a:5a:b4:26:90:ab:28:2e:65:69:14:29:2c:db:a9:f5:
a5:fd:1f:25:e5:fb:1b:1f:65:5a:49:46:d2:86:33:ae:23:41:
bb:60:a9:1c:8a:5d:2c:3a:69:8c:7f:b4:5e:29:9f:1d:cd:77:
8b:02:4f:39:b6:8c:7a:a5:75:37:4b:3c:81:2a:22:21:e2:8d:
f9:e9:6c:a2:cc:d6:85:f1:c7:54:68:57:af:ed:4f:71:4d:30:
99:e2:89:1e:14:d5:39:09:7c:8f:13:17:a6:74:14:2d:87:a3:
5d:18:b6:bd:41:58:32:a2:2a:db:3f:18:66:c1:a1:49:31:dc:
b5:07:a8:6b:a7:d2:21:e4:20:cd:ab:05:86:eb:00:fd:9c:b3:
cb:a4:14:64:6c:71:0b:0b:7e:6c:68:9a:c1:c5:cb:35:b9:21:
8a:ad:ae:c3:b6:7f:35:c3:36:c7:50:4c:3b:8b:21:36:e4:78:
3a:3d:26:11:dd:0a:af:c5:ff:1c:15:c4:06:22:f0:e4:54:ba:
99:97:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 18:30:09 2024 by rpki-client on console-fra.rpki-client.org