Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/6kf5CDBWYq7K_y63KQs6Fqc6_o0.roa
File: 6kf5CDBWYq7K_y63KQs6Fqc6_o0.roa (raw, json)
Hash identifier: HuJs1xA5Z3rZyIWc8eNq3zRfeZPUI0BtbRGkFUPJw+0=
Subject key identifier: EA:47:F9:08:30:56:62:AE:CA:FF:2E:B7:29:0B:3A:16:A7:3A:FE:8D
Certificate issuer: /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial: 0143
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/6kf5CDBWYq7K_y63KQs6Fqc6_o0.roa
Signing time: Mon 26 Sep 2022 01:48:18 +0000
ROA not before: Mon 26 Sep 2022 01:48:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18041
IP address blocks: 103.169.126.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Validity
Not Before: Sep 26 01:48:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EA47F908305662AECAFF2EB7290B3A16A73AFE8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:cb:f5:fd:00:0d:19:6c:db:55:51:6c:cb:
d0:b7:90:6e:bf:eb:71:46:04:0d:e4:52:46:f7:8f:
ef:3d:fa:97:ac:82:8c:98:c0:35:e7:7f:d4:3b:54:
e5:8a:6b:92:50:fa:21:06:1e:a9:9a:b4:38:95:30:
47:9c:6b:4e:ea:ca:6d:bc:d9:4e:9a:28:41:e6:c0:
12:7c:e5:d5:e2:24:f3:b8:2c:d9:55:f3:28:83:02:
b6:6f:10:59:09:90:90:75:d3:0a:37:05:a8:78:47:
87:f7:68:46:13:23:59:dc:c1:b4:85:14:9d:87:89:
53:16:ae:27:63:e3:66:4a:52:04:94:f8:eb:5e:54:
6c:fa:e1:89:e8:ff:1c:9a:41:be:85:1e:41:57:ef:
e6:a5:75:be:29:8a:3e:15:74:7e:d5:a1:c2:68:e1:
8e:95:4e:a0:1d:06:84:61:90:71:1f:fb:ac:1f:36:
11:74:e2:6d:a7:7c:bc:5e:1c:38:0a:7e:90:88:21:
b6:7f:e1:b8:ea:b4:1f:7e:f2:d9:96:db:cb:45:9d:
30:92:be:19:e9:d7:82:11:f0:02:cf:da:d0:f7:42:
3f:45:3a:41:41:d2:f3:2d:6b:9b:af:5d:70:03:3f:
0d:1f:ac:ba:83:04:aa:0d:8e:1e:cb:be:4c:56:0f:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:F9:08:30:56:62:AE:CA:FF:2E:B7:29:0B:3A:16:A7:3A:FE:8D
X509v3 Authority Key Identifier:
keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/6kf5CDBWYq7K_y63KQs6Fqc6_o0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:49:16:df:89:f0:6a:ac:43:4a:48:8a:80:f1:7a:fa:e9:9c:
02:e2:96:a5:2a:f7:db:d2:0d:7d:84:fe:59:00:a4:39:63:1e:
bf:2d:4f:12:f2:77:3b:d2:fa:4b:d8:7f:6d:4b:b5:84:b9:48:
6f:d7:c8:d2:60:c8:7d:39:57:83:5b:bf:5b:d7:62:50:9d:c1:
a6:25:c2:ca:b4:0a:95:ad:2f:c7:69:f4:3b:4a:33:0e:63:1a:
05:f7:37:13:5e:2a:ef:04:1c:81:21:43:71:1a:91:a8:fc:1f:
d0:5c:fb:f5:c1:20:20:35:4b:9a:67:ce:f4:c9:80:ba:8a:d1:
3d:14:93:83:f0:6e:ef:d0:e2:48:8f:e4:16:1a:03:42:c0:fc:
db:af:f1:17:a2:67:4e:9b:19:63:11:73:a0:a4:27:16:f5:17:
ec:fc:7f:0b:3a:ba:d8:83:c2:6c:3b:81:69:3c:6f:a3:4e:3a:
90:34:df:43:c3:69:23:f4:77:f5:ab:eb:be:55:e3:6c:7e:26:
5a:6f:be:72:7b:9e:d0:5b:d8:8c:11:4e:8e:d3:d7:09:19:2f:
9e:c7:92:96:58:ce:a2:8c:13:b8:c4:29:7f:77:ff:1c:b6:82:
6b:9d:ac:ac:5d:41:e6:06:45:1e:06:93:63:e1:a5:0d:46:08:
e8:a0:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org