Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/VZEPzyPfxFS2gg9zsQTKXM_TAtw.roa
File: VZEPzyPfxFS2gg9zsQTKXM_TAtw.roa (raw, json)
Hash identifier: pkT/mYT6PGcjpQgBacMGB8hJ9p30+cxhHLdyEEFxZnk=
Subject key identifier: 55:91:0F:CF:23:DF:C4:54:B6:82:0F:73:B1:04:CA:5C:CF:D3:02:DC
Certificate issuer: /CN=1C7073A6066C765842FDF07169E43518A0BB0235
Certificate serial: 3C
Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/VZEPzyPfxFS2gg9zsQTKXM_TAtw.roa
Signing time: Wed 31 Jan 2024 06:30:05 +0000
ROA not before: Wed 31 Jan 2024 06:30:05 +0000
ROA not after: Sat 09 Nov 2024 15:30:21 +0000
asID: 150755
IP address blocks: 2401:4e60::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 26 Oct 2024 15:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235
Validity
Not Before: Jan 31 06:30:05 2024 GMT
Not After : Nov 9 15:30:21 2024 GMT
Subject: CN=55910FCF23DFC454B6820F73B104CA5CCFD302DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:86:5a:d4:5e:b5:69:5c:9c:14:4b:14:e5:
9f:5c:2e:c1:71:b8:b2:ee:22:86:ce:5e:76:02:20:
1d:bb:e9:91:6b:67:15:9e:fa:0a:c4:d0:cc:ce:1d:
d0:1f:57:71:52:32:42:76:a2:91:09:e5:fa:d9:1c:
4e:0a:47:ee:33:cd:02:97:7d:fe:65:39:c6:9e:cf:
6f:60:26:40:39:0a:15:97:08:29:30:b9:68:52:5d:
6f:bf:05:40:85:58:0d:b4:16:71:90:31:75:b6:d3:
7a:ed:42:69:15:d5:54:04:f9:22:d4:b0:00:bf:02:
85:96:36:87:53:92:12:9a:7a:4e:b2:28:42:7c:88:
a9:5d:b8:39:ef:e2:78:0a:2b:00:59:5d:6f:c7:15:
8e:21:9a:66:1a:4c:b2:3f:f8:10:33:7f:87:ec:30:
ae:ae:cc:bd:99:83:3a:4c:72:e1:fd:29:4e:aa:c7:
e9:a8:e2:a0:44:f7:47:92:70:58:e6:70:23:20:37:
36:6e:7f:ec:dc:59:e6:0a:a1:e3:2d:49:22:a1:18:
9e:04:e7:ce:d6:7b:4c:33:51:52:24:c7:f7:a8:5f:
d4:2d:61:15:6f:80:eb:b5:e7:21:2f:26:7e:45:a1:
69:87:f6:5d:7b:0a:5e:30:9c:40:1e:17:d7:9a:a4:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:91:0F:CF:23:DF:C4:54:B6:82:0F:73:B1:04:CA:5C:CF:D3:02:DC
X509v3 Authority Key Identifier:
keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/VZEPzyPfxFS2gg9zsQTKXM_TAtw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:4e60::/32
Signature Algorithm: sha256WithRSAEncryption
8a:6d:2b:d6:03:74:2d:75:5f:6c:3d:31:aa:b0:b6:53:6a:82:
2c:49:8d:87:58:ac:66:71:87:67:63:25:84:88:be:0f:a5:80:
10:f8:d8:bd:73:44:7d:c2:bc:29:ed:c3:94:cf:bf:20:d2:f0:
aa:6e:48:b1:29:d1:14:98:c2:66:4a:77:ba:9f:fb:f2:58:2e:
12:78:7a:73:06:08:de:1d:d0:e4:0e:f8:c9:4b:cc:a5:11:c6:
fd:ec:a3:90:c0:09:35:95:4a:ba:20:21:1c:8c:74:ff:e9:39:
c7:ef:db:83:52:91:6f:21:59:0b:6c:02:9c:e5:f0:45:9c:06:
9c:c4:74:39:d4:76:3f:c1:21:29:82:5b:6d:8c:85:74:cf:c7:
43:d9:c6:44:ae:c3:83:11:b3:2d:86:ba:fa:47:b6:e6:1a:26:
02:05:e7:cd:6a:9c:4c:58:5c:16:59:7c:3b:bf:98:22:d9:fc:
9b:68:d9:5a:e5:5b:f9:c3:b1:0b:4e:85:ed:72:dc:32:9d:03:
58:a6:ca:86:e8:f5:bb:57:5d:d5:9e:a9:08:1c:f8:24:28:a2:
e8:cc:d2:6b:0e:ce:84:84:71:01:4b:76:d5:5e:60:9e:3a:dc:
c1:e4:f2:d0:37:6d:ea:84:7a:3f:85:9a:31:ec:26:69:17:f8:
38:6f:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 19:05:43 2024 by rpki-client on console-ams.rpki-client.org