Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIBO/LeHGWtoQX9LnkOXOgT-Jp-llg8A.roa
File: LeHGWtoQX9LnkOXOgT-Jp-llg8A.roa (raw, json)
Hash identifier: J9t7Dvfl7WDVP1j+RwP9LGHufJhiCD/ksEDAGW4bQwk=
Subject key identifier: 2D:E1:C6:5A:DA:10:5F:D2:E7:90:E5:CE:81:3F:89:A7:E9:65:83:C0
Certificate issuer: /CN=6D0EDF410C499A7FC419BB4BB09219673E74614B
Certificate serial: 03
Authority key identifier: 6D:0E:DF:41:0C:49:9A:7F:C4:19:BB:4B:B0:92:19:67:3E:74:61:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bQ7fQQxJmn_EGbtLsJIZZz50YUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIBO/LeHGWtoQX9LnkOXOgT-Jp-llg8A.roa
Signing time: Wed 12 Jul 2023 02:11:56 +0000
ROA not before: Wed 12 Jul 2023 02:11:56 +0000
ROA not after: Thu 11 Jul 2024 02:02:31 +0000
asID: 131149
IP address blocks: 103.237.48.0/23 maxlen: 32
Validation: Failed, certificate revoked on Thu 27 Jun 2024 02:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D0EDF410C499A7FC419BB4BB09219673E74614B
Validity
Not Before: Jul 12 02:11:56 2023 GMT
Not After : Jul 11 02:02:31 2024 GMT
Subject: CN=2DE1C65ADA105FD2E790E5CE813F89A7E96583C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:52:0c:1c:8a:42:f1:1b:bd:00:7e:68:9b:
8f:00:a8:dc:5f:e8:0b:19:3a:c6:76:6e:c3:3f:e7:
ef:b4:b8:e1:d1:44:31:f1:b1:eb:07:70:a7:da:07:
d1:eb:cd:d0:88:98:7e:e7:d2:63:a0:66:aa:4f:c0:
29:27:24:3c:80:77:84:69:1a:f9:3f:79:f1:5f:65:
80:71:17:19:1e:bf:5c:73:98:7d:31:49:0b:86:56:
c6:b1:7c:53:db:b6:51:32:88:42:1a:05:97:03:8f:
e9:b4:12:99:09:39:fb:26:92:9a:59:c7:1d:4d:d6:
71:44:c3:9c:52:47:b9:78:59:d0:ef:e7:5c:04:fe:
99:61:de:f2:e7:59:a0:f3:cf:1d:07:7d:c9:bd:b2:
4b:12:04:19:1f:ca:c6:bb:65:65:5c:46:17:d7:ed:
35:81:40:32:67:c3:29:e7:d2:4a:df:dd:af:99:99:
c1:24:ba:9d:f0:dd:48:0c:b9:6e:32:10:9e:a6:71:
62:94:28:07:8d:7e:64:df:29:e0:8b:26:8b:33:c9:
93:dc:92:24:8f:fd:d5:a4:98:a0:e7:9b:00:22:12:
0c:df:90:af:a9:ad:ad:1b:0c:21:c5:05:a6:7a:5f:
ca:f3:f8:5f:a5:b9:3a:49:9e:9e:91:4d:21:1a:7a:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:C6:5A:DA:10:5F:D2:E7:90:E5:CE:81:3F:89:A7:E9:65:83:C0
X509v3 Authority Key Identifier:
keyid:6D:0E:DF:41:0C:49:9A:7F:C4:19:BB:4B:B0:92:19:67:3E:74:61:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIBO/bQ7fQQxJmn_EGbtLsJIZZz50YUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bQ7fQQxJmn_EGbtLsJIZZz50YUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIBO/LeHGWtoQX9LnkOXOgT-Jp-llg8A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.48.0/23
Signature Algorithm: sha256WithRSAEncryption
51:d5:63:b9:74:75:80:0a:d2:df:66:43:df:49:1b:62:6d:7a:
72:f3:49:db:db:8b:32:42:13:8a:2c:9c:aa:b7:5b:23:10:7a:
11:04:25:eb:fa:f3:61:01:ef:38:89:c9:5e:53:5d:14:a5:42:
4e:08:af:cc:21:a7:66:86:11:77:c8:89:8b:0b:80:4c:ee:33:
37:7f:da:0b:34:b9:27:55:a6:8f:95:39:87:29:32:e2:a4:4c:
f2:93:60:be:92:c5:5a:e1:de:82:15:23:58:a8:d8:41:0b:2d:
5e:94:91:8e:65:c8:b3:72:00:1a:e3:b0:cf:c7:82:c0:8a:88:
a8:ad:f6:d0:26:26:eb:0e:eb:7d:13:b0:91:f9:0e:73:c1:49:
fc:ff:8d:0d:05:7b:e7:c3:77:08:ec:25:5a:15:94:74:5d:20:
c4:20:c7:40:4d:15:84:06:b0:63:d0:e3:f2:10:5b:72:71:30:
2a:05:16:d8:95:48:2b:3f:bb:7e:df:82:64:31:57:8c:0f:fe:
20:29:e1:24:df:4e:33:79:3b:74:52:ae:da:3d:f1:7a:47:7e:
df:78:6a:76:62:88:c3:7f:48:9a:da:37:2d:f6:ff:a9:31:af:
68:31:5f:7d:4c:a5:be:3e:d3:ab:bd:5e:67:2c:7b:65:fd:e5:
f0:ec:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 05:39:35 2024 by rpki-client on console-ams.rpki-client.org