Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RENREN/2VlP-NfohdYu2M_95fI96CTFuYA.roa
File: 2VlP-NfohdYu2M_95fI96CTFuYA.roa (raw, json)
Hash identifier: tyB2opPB/LnRZwLjJEfynCfd7KxDzJ0rEKDZ4Xc5oGM=
Subject key identifier: D9:59:4F:F8:D7:E8:85:D6:2E:D8:CF:FD:E5:F2:3D:E8:24:C5:B9:80
Certificate issuer: /CN=DB27F7B21D588E1F393973F41C56CA41F8099334
Certificate serial: F8
Authority key identifier: DB:27:F7:B2:1D:58:8E:1F:39:39:73:F4:1C:56:CA:41:F8:09:93:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2VlP-NfohdYu2M_95fI96CTFuYA.roa
Signing time: Mon 26 Aug 2024 05:25:13 +0000
ROA not before: Mon 26 Aug 2024 05:25:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 103.69.48.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 18:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB27F7B21D588E1F393973F41C56CA41F8099334
Validity
Not Before: Aug 26 05:25:13 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D9594FF8D7E885D62ED8CFFDE5F23DE824C5B980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:a8:d3:71:b6:45:d3:73:b0:77:ca:e5:be:
94:ad:d3:13:b7:58:88:c3:d0:28:09:72:38:21:ae:
58:33:3f:39:f7:a4:c0:a3:d0:b0:df:98:17:2b:7f:
85:a5:74:21:f5:55:64:e7:d2:bd:dc:52:70:1d:0b:
e2:01:4d:42:a8:46:fd:be:c0:70:df:2f:c0:1f:5c:
fd:5e:ec:3f:72:3c:74:8b:ec:24:b7:80:aa:2d:47:
7b:84:29:4e:e1:36:41:d7:10:b4:7a:b5:78:a5:cf:
78:ab:0d:34:e5:9a:ca:e2:76:7c:09:f1:8b:76:6b:
3c:3f:8d:e1:a6:38:7a:87:c4:7a:dd:74:f3:19:c9:
bb:f7:5f:be:56:1c:df:71:49:1d:c1:3f:e5:6a:1d:
d0:a7:e3:f3:a2:c8:db:3b:90:bb:d3:17:e3:92:21:
38:56:72:bc:64:81:85:b8:b0:7f:7d:85:d0:a4:49:
38:60:2b:de:88:19:ea:99:e6:3a:6b:f1:f1:94:b7:
1c:3f:8a:d0:47:48:7f:83:9f:0a:65:fb:21:e2:9b:
2c:42:70:95:4d:fd:5d:10:bb:32:d6:84:b9:e8:54:
02:77:b3:1b:75:c4:d0:a4:74:74:dd:4c:1f:78:e0:
db:61:e1:bb:f4:a8:1e:6d:bb:49:08:21:67:90:63:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:59:4F:F8:D7:E8:85:D6:2E:D8:CF:FD:E5:F2:3D:E8:24:C5:B9:80
X509v3 Authority Key Identifier:
keyid:DB:27:F7:B2:1D:58:8E:1F:39:39:73:F4:1C:56:CA:41:F8:09:93:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2VlP-NfohdYu2M_95fI96CTFuYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.48.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:56:4f:23:a0:4c:a5:4c:8b:8b:d7:01:c0:bd:c8:c1:c7:4c:
60:87:b5:ff:61:72:17:ae:ad:0c:21:bb:3f:b9:46:bc:e1:a8:
63:39:98:d9:74:7f:a3:ed:49:5f:bc:50:07:ce:2a:36:ae:bc:
bf:f0:55:4c:f5:08:e7:18:04:09:f0:63:15:96:07:d4:48:f3:
e0:1c:95:b6:de:d5:a7:fe:91:34:47:80:62:48:5c:97:18:0e:
00:e2:12:13:28:ca:c0:d1:fc:be:ae:9a:56:fb:a1:25:fe:35:
9c:91:5a:c3:28:5b:cd:09:1d:71:3e:5b:c9:b0:15:0a:f5:03:
d5:a5:5b:92:86:6f:a5:c1:19:61:d3:9f:65:7d:2f:8b:66:cb:
9f:49:cd:71:b3:3d:45:3a:d8:61:10:bc:57:5e:f4:5a:a1:44:
50:c4:24:97:b9:d5:41:93:38:c7:3d:a1:2c:9b:37:7c:70:0a:
f5:fa:3d:fd:95:ea:fa:fa:9b:39:c4:0b:14:62:71:72:ba:ed:
5e:f9:18:86:95:9d:c0:ab:2b:02:ec:e6:e0:e1:b7:30:69:b2:
d1:b7:25:58:0e:2d:e1:8c:25:10:b0:e6:56:23:e4:64:c1:4a:
c2:3b:71:0a:a6:ec:10:e6:f4:0c:8a:57:b1:82:54:74:45:20:
07:d1:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:35 2024 by rpki-client on console-ams.rpki-client.org