Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/LI7bcfTDbYcs10A9q7EKfZXK5-E.roa
File: LI7bcfTDbYcs10A9q7EKfZXK5-E.roa (raw, json)
Hash identifier: BrY1SW7TM/qy2HD7oRe81lyayZYv/KtgYcm+DJsMUR4=
Subject key identifier: 2C:8E:DB:71:F4:C3:6D:87:2C:D7:40:3D:AB:B1:0A:7D:95:CA:E7:E1
Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E
Certificate serial: 0B49
Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LI7bcfTDbYcs10A9q7EKfZXK5-E.roa
Signing time: Fri 01 Sep 2023 10:00:50 +0000
ROA not before: Fri 01 Sep 2023 10:00:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 57401
IP address blocks: 2403:7f40:e001::/48 maxlen: 64
Validation: Failed, certificate revoked on Thu 15 Aug 2024 16:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2889 (0xb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E
Validity
Not Before: Sep 1 10:00:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2C8EDB71F4C36D872CD7403DABB10A7D95CAE7E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:b4:5c:0f:0f:3f:57:a6:65:91:62:9f:68:
32:90:db:37:6c:a1:7e:94:80:a3:56:63:d5:cf:6d:
24:e5:cb:ef:2e:67:8f:8e:16:ad:f3:ef:e9:bb:6f:
57:ec:9a:00:bf:76:2b:3b:d2:e7:55:00:31:30:90:
1a:03:0b:7e:c4:13:ce:99:9b:76:1e:e6:0c:5e:53:
b4:6e:92:90:53:11:62:fe:d4:cb:fd:12:98:02:8e:
57:70:32:11:34:4a:04:ba:6f:51:1b:d9:d5:26:c9:
d4:d8:49:4e:41:9b:96:6d:de:f6:79:da:ee:d3:cf:
b5:df:1c:6c:6b:ae:6f:19:2b:d3:8c:3d:31:36:97:
dc:ff:17:24:99:32:b5:81:3a:d9:77:07:6d:1f:c5:
cf:f2:18:93:fc:06:2c:cf:af:9d:34:5f:e1:47:ea:
14:62:39:80:34:93:2b:b4:5c:ae:72:9c:e5:dd:b1:
1c:63:dd:00:b2:f7:b9:d1:1f:aa:ab:b5:f9:6d:0a:
3c:b3:e7:eb:ef:5f:38:8b:d2:c2:7f:d3:92:69:b0:
93:f5:a4:f8:3a:59:b5:4d:c9:72:37:d6:08:9a:91:
6f:13:e6:66:7c:f1:e0:2d:51:a6:a2:97:64:3d:e5:
df:90:a9:6c:7e:89:60:c3:b7:7f:28:41:b3:0e:ac:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8E:DB:71:F4:C3:6D:87:2C:D7:40:3D:AB:B1:0A:7D:95:CA:E7:E1
X509v3 Authority Key Identifier:
keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LI7bcfTDbYcs10A9q7EKfZXK5-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:7f40:e001::/48
Signature Algorithm: sha256WithRSAEncryption
65:12:63:59:2a:2d:40:f5:43:4d:4e:cd:5c:5a:18:ae:50:78:
18:81:76:07:c3:23:ba:3e:2c:97:43:7c:b3:88:b3:72:6a:c6:
9a:c5:bc:98:71:a4:8b:f4:32:d0:db:35:3d:e8:cf:c1:fa:2d:
cd:46:b9:94:13:7f:b6:7d:4b:f2:a1:d1:8f:ed:56:54:ce:cf:
0e:e9:8a:bf:49:25:02:ed:85:f0:f9:bb:9f:ca:91:04:cb:51:
7c:b8:e0:94:1a:5a:e6:b0:b9:26:12:03:66:d0:8c:ef:89:87:
f5:3c:32:0c:09:53:e1:e9:e3:60:42:c7:13:53:05:d8:2b:53:
3c:98:56:97:bb:98:cf:d7:0e:08:8b:76:42:46:a6:38:b3:ee:
87:47:6c:01:0e:92:ea:b4:da:d2:c1:96:ce:65:96:94:02:b5:
fa:5d:9c:ab:d8:20:7e:0d:47:63:1c:61:65:11:a0:b8:6e:d0:
40:c6:ed:6a:72:55:1f:3e:e9:cf:4b:fd:53:3a:83:9c:6d:0c:
d1:20:61:ea:37:e4:a9:76:0b:94:ce:bf:b4:87:21:ac:16:5a:
1a:1d:58:ec:78:5f:75:14:11:54:21:c4:3f:31:e4:6b:ec:e1:
43:71:9a:44:21:21:af:5b:fb:46:e0:44:25:c4:96:2a:5a:f5:
c9:de:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:59:47 2024 by rpki-client on console-fra.rpki-client.org