Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/euALOZPOPP-SI-Xn0LpQjQUOYBo.roa
File: euALOZPOPP-SI-Xn0LpQjQUOYBo.roa (raw, json)
Hash identifier: r1Pu3Sb+TpEjz8hEPrbOkD79NCqN0IYAyRTJg60D1rc=
Subject key identifier: 7A:E0:0B:39:93:CE:3C:FF:92:23:E5:E7:D0:BA:50:8D:05:0E:60:1A
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 121D
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/euALOZPOPP-SI-Xn0LpQjQUOYBo.roa
Signing time: Fri 01 Sep 2023 09:41:07 +0000
ROA not before: Fri 01 Sep 2023 09:41:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131631
IP address blocks: 103.123.216.0/24 maxlen: 25
Validation: Failed, certificate revoked on Mon 12 Feb 2024 16:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4637 (0x121d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Sep 1 09:41:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7AE00B3993CE3CFF9223E5E7D0BA508D050E601A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8d:56:bd:b2:97:e1:73:95:74:46:73:50:97:
33:d1:cf:4f:bd:13:36:ff:04:3b:e0:b6:9c:7b:8a:
a7:71:21:34:3b:96:48:32:34:7a:a4:30:26:cc:57:
02:05:ce:de:e1:93:b0:63:3a:b4:ab:ad:15:80:25:
26:90:5e:ed:ea:ec:05:b4:08:1e:30:15:ba:c5:45:
49:6a:c1:58:36:16:56:5d:09:3e:3c:7b:e2:96:f7:
65:39:73:8e:a9:3a:df:41:dd:cf:e1:ae:91:e0:23:
93:34:e9:78:59:6b:79:9b:a6:88:a0:95:39:c9:c3:
2b:a4:8b:f4:1e:fc:e8:90:3e:2c:5b:d0:d2:4a:42:
d5:ae:7e:f2:11:fa:65:28:b7:95:81:f8:a8:26:18:
a6:d5:c9:de:cb:03:70:91:ec:ec:13:83:f7:e1:95:
55:22:91:f0:17:66:73:91:c5:67:58:87:f0:84:46:
21:2e:b1:b2:5f:87:e9:7b:53:64:52:6b:c4:a4:a4:
59:c8:f2:08:55:e5:2f:3c:d6:b6:69:69:77:57:5e:
a5:77:f4:21:55:1a:fc:f8:c6:0b:46:f7:12:81:e4:
c6:1e:a3:54:02:1d:d8:40:29:a8:85:34:e6:27:e9:
ea:64:5d:de:26:b0:74:76:ac:36:a5:47:f9:4c:e7:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:0B:39:93:CE:3C:FF:92:23:E5:E7:D0:BA:50:8D:05:0E:60:1A
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/euALOZPOPP-SI-Xn0LpQjQUOYBo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.216.0/24
Signature Algorithm: sha256WithRSAEncryption
be:11:9d:c9:f9:d2:cc:68:24:64:57:aa:e5:7d:9e:ae:9c:69:
44:5e:35:9f:d5:95:ec:82:64:86:a8:2c:31:be:33:37:4a:39:
a5:a8:59:74:3a:2e:15:3d:a1:7a:21:ef:9f:b9:5d:82:d8:01:
2a:89:ea:2f:54:b6:12:2a:ef:22:38:cb:7c:f8:8e:7d:1e:dd:
bd:a8:89:75:ca:64:cc:eb:4b:29:37:d3:fd:a5:e3:a0:a2:02:
62:98:9b:bb:83:46:9f:91:19:31:1f:9a:d3:e8:31:80:4c:ae:
d4:0b:8a:6b:12:eb:36:00:93:3d:b2:46:fb:38:36:3d:4e:81:
6f:f2:d7:5a:d2:cc:d1:39:e2:f9:6b:44:02:ae:01:37:d5:fd:
27:02:82:4e:41:27:e8:46:8f:b5:ee:20:1f:a2:50:a2:3c:7b:
5a:12:0b:a4:33:08:62:e6:9a:20:91:78:c1:1f:cd:a8:23:74:
88:0c:97:ef:c4:69:32:10:c6:22:1c:bd:d8:b1:30:d1:ab:ab:
09:33:48:4b:e1:d6:ad:20:e4:2a:b6:e8:3f:e2:6e:52:a9:5f:
21:48:20:ad:16:2b:17:ec:28:1b:ba:60:a2:f4:94:70:90:25:
7a:c3:e2:61:88:81:b6:86:91:d4:88:fe:d7:e7:71:21:4e:64:
3b:29:c1:86
-----BEGIN CERTIFICATE-----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Generated at Mon Feb 12 21:09:44 2024 by rpki-client on console-ams.rpki-client.org