Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/SfA2jR5MKMVYiBT_LePvSbMWKfY.roa
File: SfA2jR5MKMVYiBT_LePvSbMWKfY.roa (raw, json)
Hash identifier: tMQg/zFJWIBjE5Rq867fJyC48hZXQiIdZ9ZlYHQtnvk=
Subject key identifier: 49:F0:36:8D:1E:4C:28:C5:58:88:14:FF:2D:E3:EF:49:B3:16:29:F6
Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
Certificate serial: 0860
Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/SfA2jR5MKMVYiBT_LePvSbMWKfY.roa
Signing time: Mon 26 Aug 2024 05:24:10 +0000
ROA not before: Mon 26 Aug 2024 05:24:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38042
IP address blocks: 103.148.72.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 19:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
Validity
Not Before: Aug 26 05:24:10 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=49F0368D1E4C28C5588814FF2DE3EF49B31629F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:04:4e:1d:32:7c:96:0a:59:18:5a:5a:83:
2f:f5:de:d8:62:cf:14:e8:0c:ef:31:0f:2d:03:f5:
87:c8:f8:df:47:18:6e:47:a0:58:71:61:76:66:c9:
56:50:8d:7a:ec:f4:29:68:91:cb:71:90:ac:2f:43:
d4:57:53:10:81:e1:87:20:0c:14:36:43:5a:91:bb:
51:36:bb:07:2d:45:61:fb:f7:cb:99:b0:53:e8:7c:
99:b7:14:41:2a:99:87:b8:62:21:e0:a4:99:fa:80:
8b:7f:89:73:6c:b9:08:27:02:ad:ff:26:ce:71:b7:
2a:04:2d:9d:fc:02:b6:97:fb:ec:77:5d:92:53:80:
bc:2d:31:c9:44:48:b8:8c:b0:9f:c3:d0:22:1c:d4:
ae:04:e9:fb:7b:f4:0c:83:b9:33:1b:6a:ac:bf:38:
b7:c7:05:17:00:2f:82:b1:1a:8f:ba:94:4c:4b:b0:
d3:57:58:8d:55:14:ef:08:70:68:fb:66:cd:f7:40:
64:0f:7b:e0:73:80:ba:05:b9:0f:59:b7:93:c8:25:
4b:d8:97:57:e4:4e:86:8a:00:35:20:aa:cf:cc:f5:
2e:39:49:24:36:72:e8:ee:c0:13:25:bc:96:fa:53:
64:4e:82:a4:2d:7b:c9:3d:95:b5:f2:00:d4:d8:73:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F0:36:8D:1E:4C:28:C5:58:88:14:FF:2D:E3:EF:49:B3:16:29:F6
X509v3 Authority Key Identifier:
keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/SfA2jR5MKMVYiBT_LePvSbMWKfY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.72.0/23
Signature Algorithm: sha256WithRSAEncryption
37:86:ce:c1:06:95:6a:fd:4a:9c:f4:2d:a6:33:69:77:a9:72:
30:04:94:11:09:cc:4a:c0:bd:c2:0e:9e:cd:9b:3d:1b:4d:65:
6b:ea:8b:77:61:08:d2:fd:b4:ec:2d:00:43:45:e3:2c:4f:a5:
9f:91:74:db:a8:c4:4a:ce:83:8c:1f:34:d3:16:9c:d4:f0:46:
81:84:06:a6:7a:7a:0d:25:1d:77:d0:f0:2d:80:60:46:fb:2a:
43:a0:15:35:83:98:fa:40:94:9a:13:ca:f9:cb:c1:15:cf:c8:
36:fa:2e:32:c9:20:85:c0:29:f2:bf:4b:a8:2a:c8:f2:38:b8:
a8:09:ab:a0:7b:f2:a3:e1:cf:34:61:9e:e7:ea:8d:e3:88:a6:
d2:81:67:b9:d2:0a:ba:9d:15:38:20:fc:9f:ca:a2:e7:68:8d:
5b:f9:b4:c7:ff:a4:3c:f7:d9:a7:33:22:34:15:23:df:d6:7c:
44:3d:37:4e:5a:f1:42:9b:f4:53:28:0b:de:ae:fb:54:8d:58:
2f:b5:27:89:44:6d:c6:99:1a:43:68:30:9f:0d:de:95:37:d0:
bc:60:23:5b:29:6f:f5:7f:e8:ca:fd:fa:3e:d4:5f:42:d5:48:
11:7a:b3:d7:59:0f:90:e5:31:e3:9b:13:71:33:65:51:24:ec:
49:c4:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 20:33:41 2024 by rpki-client on console-fra.rpki-client.org