Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WDKING/2z6scs14EK_Wp39QG8YdQdb5zds.roa
File: 2z6scs14EK_Wp39QG8YdQdb5zds.roa (raw, json)
Hash identifier: Y5LrRnWvsSXahK69VZ/RxJV7XegU35nTy7qP52hU8rA=
Subject key identifier: DB:3E:AC:72:CD:78:10:AF:D6:A7:7F:50:1B:C6:1D:41:D6:F9:CD:DB
Certificate issuer: /CN=5CED7FEDF0EC0C7545594CF6E15D9BDEE79651B9
Certificate serial: 03
Authority key identifier: 5C:ED:7F:ED:F0:EC:0C:75:45:59:4C:F6:E1:5D:9B:DE:E7:96:51:B9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XO1_7fDsDHVFWUz24V2b3ueWUbk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WDKING/2z6scs14EK_Wp39QG8YdQdb5zds.roa
Signing time: Fri 10 Nov 2023 06:40:02 +0000
ROA not before: Fri 10 Nov 2023 06:40:02 +0000
ROA not after: Sat 19 Oct 2024 15:30:16 +0000
asID: 150754
IP address blocks: 103.67.72.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 05 Oct 2024 15:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CED7FEDF0EC0C7545594CF6E15D9BDEE79651B9
Validity
Not Before: Nov 10 06:40:02 2023 GMT
Not After : Oct 19 15:30:16 2024 GMT
Subject: CN=DB3EAC72CD7810AFD6A77F501BC61D41D6F9CDDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:e3:a5:c1:cf:36:40:f8:b6:c1:2e:bb:b7:
f6:b8:a5:72:64:5a:a4:78:03:d6:df:cd:b0:37:b7:
de:27:c1:19:2b:d1:f4:72:7d:ca:ec:8a:4c:48:66:
10:97:1e:c4:45:77:eb:e8:c1:ab:d8:00:6f:fd:5e:
28:04:32:3a:fb:64:13:96:3e:7c:2f:9e:b0:83:fc:
6a:cf:f5:ef:1e:26:43:65:a1:10:d0:1b:42:fd:4e:
a1:92:72:09:27:ca:c3:df:64:ce:72:c3:72:b7:1d:
ee:31:6b:33:bb:09:c1:9c:f1:de:3c:13:e7:02:cb:
e2:41:2e:dd:a8:22:78:18:39:81:f4:a0:60:e7:28:
99:0e:e6:e5:5f:90:cc:64:47:f2:94:4b:eb:53:91:
01:8f:5e:4c:a6:8b:64:63:c9:40:26:ee:53:d4:84:
88:bd:67:86:53:91:49:23:3d:1e:d3:20:33:59:86:
e8:f9:0b:f4:d6:69:40:89:89:ea:4c:14:2f:e4:a4:
26:8f:80:6f:27:c7:bb:ae:f5:71:27:11:1c:a5:91:
6b:40:2c:77:5d:f5:1c:51:22:b6:08:fb:83:77:b1:
f4:f7:cd:06:a8:30:c3:bf:27:6f:28:2d:c0:27:43:
88:7d:df:3e:31:dd:fa:c3:31:4c:55:ef:a0:b1:db:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:AC:72:CD:78:10:AF:D6:A7:7F:50:1B:C6:1D:41:D6:F9:CD:DB
X509v3 Authority Key Identifier:
keyid:5C:ED:7F:ED:F0:EC:0C:75:45:59:4C:F6:E1:5D:9B:DE:E7:96:51:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WDKING/XO1_7fDsDHVFWUz24V2b3ueWUbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XO1_7fDsDHVFWUz24V2b3ueWUbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WDKING/2z6scs14EK_Wp39QG8YdQdb5zds.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.72.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:10:72:11:35:8f:b4:e3:75:f6:72:f5:3e:90:5e:65:5a:00:
ba:e4:fa:58:90:ca:5a:e3:a5:a3:d7:65:69:a9:cd:cc:a3:c5:
f7:be:fa:10:5c:34:a9:25:55:d6:e3:28:20:5b:69:97:26:a4:
9d:e6:1c:80:6e:50:af:33:fb:8e:0f:ab:82:06:2d:7f:d9:0d:
d5:e2:a5:c1:f9:7d:e4:30:bd:a1:59:97:a8:c2:9b:2d:64:1d:
92:04:2b:60:6e:14:8f:1f:f6:b0:c3:40:b1:4d:d8:60:e9:5e:
6c:bf:41:fe:8b:92:e3:a2:c1:0a:95:a9:80:b4:80:ae:39:55:
1b:ba:9f:89:e3:83:0a:e0:67:59:b7:55:74:9c:31:06:39:d4:
88:6b:a7:99:d6:fc:79:5e:c0:8c:48:ef:e7:ba:60:79:01:7d:
25:b1:51:27:39:e2:90:6f:4d:2a:dc:03:5e:db:c4:7b:0a:d3:
f7:59:49:26:1b:c3:a9:3b:8a:5e:f9:5b:ab:22:c7:2e:94:96:
af:d0:46:b3:a6:80:7f:9b:fd:d1:bc:35:d2:b9:c6:1a:7e:54:
38:d5:24:52:80:b8:6b:6a:cb:d9:95:1a:0a:34:0e:97:15:3a:
84:fc:e7:7c:49:5d:4b:59:0d:d3:8d:cf:06:39:8f:b7:63:e5:
bf:f1:53:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 20:04:04 2024 by rpki-client on console-ams.rpki-client.org