Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/VU4EddcXcK0NTvgC-0qlNLB_BPs.roa
File: VU4EddcXcK0NTvgC-0qlNLB_BPs.roa (raw, json)
Hash identifier: /Qhq+lKhyqHXSqcx3N4452psactXD7wfqeIPhuPVVEs=
Subject key identifier: 55:4E:04:75:D7:17:70:AD:0D:4E:F8:02:FB:4A:A5:34:B0:7F:04:FB
Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Certificate serial: 0290
Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/VU4EddcXcK0NTvgC-0qlNLB_BPs.roa
Signing time: Mon 26 Aug 2024 05:27:50 +0000
ROA not before: Mon 26 Aug 2024 05:27:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18178
IP address blocks: 2400:5120::/32 maxlen: 64
Validation: Failed, certificate revoked on Sun 22 Sep 2024 17:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Validity
Not Before: Aug 26 05:27:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=554E0475D71770AD0D4EF802FB4AA534B07F04FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:b7:fe:66:c6:b7:20:bf:83:d2:4b:c9:da:
b6:41:4a:ef:af:c2:a7:a5:86:72:b5:b6:b6:82:1f:
b1:df:e4:53:08:8b:67:0b:35:2f:c9:b8:e5:f7:23:
d4:36:ad:fa:b6:98:24:cb:96:b5:3b:f9:22:32:1e:
ef:32:1b:b7:97:50:40:1d:9e:2d:70:4f:90:79:1c:
f7:d2:e6:3f:50:72:55:27:25:cc:14:39:55:98:ae:
41:63:00:ec:92:b9:ae:ab:44:87:c5:56:b7:57:1f:
b2:ca:20:dc:ea:f0:cf:de:c6:ce:07:93:23:81:63:
3e:b3:ef:d9:9a:5e:ef:3a:f7:d4:18:f2:a9:1f:1d:
b9:f4:17:a6:03:ba:c1:4c:52:fe:7f:61:47:91:ce:
34:f2:1f:3f:02:a2:2e:08:98:eb:d9:21:66:41:fb:
8f:4c:e0:fe:8d:26:fe:7a:e7:72:ea:ec:42:ee:5b:
b4:b9:5d:47:7e:db:40:f4:48:dc:77:15:57:a1:95:
40:b6:1a:0f:b7:f5:d6:6c:92:a2:ce:af:87:23:0f:
7d:ac:0d:4b:d0:a0:c0:f7:69:70:fa:b6:1c:88:e6:
89:e4:a1:e8:da:3b:51:12:f6:a8:62:4e:2e:70:b7:
b2:87:9c:87:fa:10:03:24:f8:0f:bf:47:7d:c4:49:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:04:75:D7:17:70:AD:0D:4E:F8:02:FB:4A:A5:34:B0:7F:04:FB
X509v3 Authority Key Identifier:
keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/VU4EddcXcK0NTvgC-0qlNLB_BPs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5120::/32
Signature Algorithm: sha256WithRSAEncryption
82:80:79:8d:41:bb:27:b6:5b:bd:ba:56:85:11:0f:fc:66:9e:
03:03:14:9c:3f:45:a2:03:01:1e:cf:27:54:1d:ef:c0:f5:8a:
0c:1f:8c:9e:cb:fe:f7:dd:6e:79:8e:70:05:3d:30:c1:eb:5b:
0f:e4:0e:0e:91:70:48:25:00:d1:75:e8:77:f4:0c:70:4b:0d:
38:7f:30:9c:bc:b7:8c:03:e4:7b:af:6c:b1:00:fc:30:d2:03:
4a:09:77:73:c8:c5:31:d0:7b:c0:82:ae:3a:25:86:a5:fc:af:
10:bd:02:19:13:d4:f7:5a:d1:7e:b4:89:a9:67:29:f0:64:38:
08:fa:f7:a4:ee:6c:0a:0a:ae:ab:c5:93:db:4d:cb:7b:f7:0b:
0b:15:36:4d:64:3e:3f:37:48:64:7e:9e:51:77:81:d6:f1:d0:
08:a6:46:fd:16:4c:6c:3f:e8:da:c2:41:62:68:ad:9b:5a:e6:
1c:b0:5f:ae:6d:8d:d7:0c:db:1b:10:b6:82:f3:8e:85:04:1e:
a8:81:31:49:67:c9:4b:3e:61:ef:1e:76:3c:32:c4:2a:77:cc:
60:dc:a2:e5:1a:d1:c1:75:b6:fc:dc:48:8c:e2:6c:95:e7:0a:
dc:53:5e:f9:ff:ba:a1:bb:9d:38:9a:dd:e6:74:b8:4d:a0:4b:
ad:f0:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:35 2024 by rpki-client on console-ams.rpki-client.org