Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/AFu7Vkk0Eq1WN6U2CukKS3KkmQU.roa
File: AFu7Vkk0Eq1WN6U2CukKS3KkmQU.roa (raw, json)
Hash identifier: T2uL6prVj/pUWYI3MNSiG7FZmrwo8GCKdLknmVM7Nf8=
Subject key identifier: 00:5B:BB:56:49:34:12:AD:56:37:A5:36:0A:E9:0A:4B:72:A4:99:05
Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E
Certificate serial: 0B4A
Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/AFu7Vkk0Eq1WN6U2CukKS3KkmQU.roa
Signing time: Fri 01 Sep 2023 10:00:51 +0000
ROA not before: Fri 01 Sep 2023 10:00:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 57401
IP address blocks: 103.129.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 16:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2890 (0xb4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E
Validity
Not Before: Sep 1 10:00:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=005BBB56493412AD5637A5360AE90A4B72A49905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:f8:61:f4:48:78:16:95:7c:15:4b:cd:05:
b9:50:7b:e1:58:8e:8f:78:5d:73:9a:f2:a0:c0:15:
c9:0f:9e:52:ee:4c:80:37:60:d4:44:e6:82:e3:89:
56:46:5c:b1:ba:c5:af:5f:17:81:89:25:c3:31:51:
11:16:52:d8:e7:0f:04:3f:14:c6:88:61:6e:8b:59:
ec:0b:0d:12:09:b5:9f:a4:01:31:c5:a3:12:9f:ff:
91:c8:b0:99:1f:64:d3:1d:39:08:78:a5:8c:62:c2:
f7:6d:52:c7:3d:d9:50:f1:8d:13:f7:37:78:ad:0e:
c1:c9:9d:98:63:6e:7f:5c:06:a0:8f:15:76:2f:9b:
ed:51:80:fa:89:72:94:25:76:a5:9b:80:c1:43:57:
13:e2:55:bc:65:a6:78:5a:e9:db:14:e1:43:e5:bc:
fb:99:7e:28:c9:65:d4:1d:0a:7d:95:3f:1a:ed:e8:
73:3e:d3:d1:3f:b3:a9:6e:e6:08:c4:a5:b9:dd:06:
86:14:c0:51:91:46:a8:a4:04:fa:37:dc:b8:ef:69:
39:21:3f:c8:a4:e6:75:5c:bf:c4:6e:6d:13:cd:04:
e2:35:91:29:ab:8d:d9:54:0e:5a:f9:4a:61:ad:06:
28:65:58:cc:68:76:df:79:65:24:2d:32:02:37:24:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:BB:56:49:34:12:AD:56:37:A5:36:0A:E9:0A:4B:72:A4:99:05
X509v3 Authority Key Identifier:
keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/AFu7Vkk0Eq1WN6U2CukKS3KkmQU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.145.0/24
Signature Algorithm: sha256WithRSAEncryption
50:61:24:34:ec:66:30:52:ac:52:38:f2:0b:cf:81:3f:0a:15:
02:dc:8e:5b:07:86:b8:7d:2b:d6:04:fa:4d:4a:6b:27:9b:f2:
c6:25:41:0c:d5:7b:10:fa:05:e7:76:fe:70:df:34:17:5c:09:
b9:73:c9:5c:a7:bd:5a:ed:d1:50:c1:d7:27:3f:60:4b:48:9d:
59:6d:45:ba:df:fa:77:4e:42:e2:63:3a:b3:f3:a8:7b:4f:02:
1a:02:56:b7:f4:38:b0:33:a0:37:54:9f:54:27:61:1e:20:06:
ed:1a:74:60:86:49:a6:a9:16:13:09:53:a0:6f:6e:f1:9e:1c:
74:34:ea:e7:47:62:54:87:42:0b:3b:ae:ec:42:d6:43:99:d1:
69:17:3c:36:13:8d:32:dc:1c:4d:3e:e1:64:b4:ef:64:c0:84:
f4:7a:17:c5:ee:9b:1f:17:79:91:63:1f:f5:2a:e0:fc:fd:19:
ca:96:0d:43:5c:4f:45:d7:cc:3b:9f:ec:e5:72:0f:9b:a0:0f:
c3:97:ef:8e:fc:ae:1d:7c:92:e1:5e:56:7f:85:50:9a:1e:ac:
7b:bc:cc:36:3d:fe:0e:fd:7f:40:36:8d:3c:bf:f2:a8:12:28:
2a:38:2d:fc:04:df:d4:92:66:48:50:cf:7d:b9:09:32:84:a7:
64:02:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:59:47 2024 by rpki-client on console-fra.rpki-client.org