Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/Prl8QvLbXKnAuw7ChpxBxpkX6g4.roa
File: Prl8QvLbXKnAuw7ChpxBxpkX6g4.roa (raw, json)
Hash identifier: r7fQG+DHkfBLCy+7dj+2uY5NSy1mLsPF7q/W5aQgSM4=
Subject key identifier: 3E:B9:7C:42:F2:DB:5C:A9:C0:BB:0E:C2:86:9C:41:C6:99:17:EA:0E
Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Certificate serial: 0291
Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/Prl8QvLbXKnAuw7ChpxBxpkX6g4.roa
Signing time: Mon 26 Aug 2024 05:27:50 +0000
ROA not before: Mon 26 Aug 2024 05:27:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 103.180.20.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 17:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Validity
Not Before: Aug 26 05:27:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3EB97C42F2DB5CA9C0BB0EC2869C41C69917EA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:a6:d7:4d:2c:20:2e:d1:c9:02:bc:26:9c:
51:72:ab:65:c0:6e:fa:2f:f0:50:91:5f:47:8f:99:
0d:df:c3:2f:fe:2b:69:ab:8b:28:15:75:b7:b4:4e:
a4:f0:28:29:81:5f:f6:d0:18:48:d0:ae:ca:36:b3:
e8:d0:76:a1:aa:42:d1:fd:ad:07:38:f6:18:c4:bc:
42:99:0b:12:5e:b1:2f:ae:6c:8b:4f:9c:22:a7:49:
c4:f4:89:70:e8:50:0f:7f:0c:b8:c9:c6:d1:f4:5b:
51:be:27:4d:52:90:83:b9:38:e9:79:5f:c1:65:4b:
11:91:59:1a:41:17:f3:23:6b:5a:d3:dc:fc:4b:c8:
50:fc:a4:73:d3:3c:3d:ef:df:e3:6a:4a:45:01:ea:
8d:a1:72:6c:5b:e5:e4:e2:ef:a3:b8:c5:35:c2:af:
09:6a:33:84:3a:26:f6:1b:6a:13:98:fe:19:eb:ae:
b5:f7:2d:63:9d:14:cc:a4:75:c7:9b:5b:4c:e0:3a:
fc:37:60:f9:dc:b7:d1:fc:fd:10:cd:7e:ce:2a:60:
0a:a7:50:ca:e9:e1:ea:bc:37:ee:9c:71:fd:ab:43:
4d:fe:47:43:4b:8f:81:4b:1b:9c:8c:be:e8:a7:bd:
14:9c:04:53:eb:c9:0b:25:15:6f:33:85:3d:37:42:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B9:7C:42:F2:DB:5C:A9:C0:BB:0E:C2:86:9C:41:C6:99:17:EA:0E
X509v3 Authority Key Identifier:
keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/Prl8QvLbXKnAuw7ChpxBxpkX6g4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.20.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:c5:dd:52:4c:5e:20:ab:d4:f4:ac:3d:1d:58:04:2e:e9:25:
de:54:5d:1f:49:e2:85:73:33:9d:df:43:16:a2:76:2c:3f:b4:
2d:9d:b2:54:4b:7b:85:f4:39:0c:8f:7a:0b:68:9e:0c:bf:25:
61:74:76:6a:8f:d4:81:03:07:77:e9:59:33:2d:53:0d:a2:65:
73:c9:4e:d7:55:88:8e:36:82:b1:8d:a2:ca:24:ca:1d:cb:91:
cc:d0:4f:db:f1:7a:b3:cc:42:7f:c6:91:61:7d:89:63:c8:c7:
63:01:89:3b:02:a7:07:2a:14:03:d9:be:3b:b4:4f:48:00:eb:
a5:70:9d:14:57:f6:fc:29:9c:3b:c1:f2:1f:71:99:7e:57:2f:
f6:64:61:97:fd:97:a4:d9:e3:1d:bc:b8:00:37:f1:ee:39:ba:
d0:03:d4:59:de:37:60:53:1e:8a:2e:b6:c6:26:6d:d4:f8:30:
65:26:75:ed:30:5b:c8:6a:67:54:44:06:2a:be:77:aa:a2:f3:
44:c1:32:86:ca:f9:d7:b1:62:81:2b:05:d7:ef:4c:5e:a7:cb:
ab:4c:6a:b2:aa:15:23:e7:36:3f:65:ea:40:8e:da:f3:9d:dc:
0b:56:48:aa:31:6d:b1:49:46:60:1b:14:f0:e3:81:ae:b3:a3:
e1:88:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:35 2024 by rpki-client on console-ams.rpki-client.org