Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/8QK44g2eAfwsvBEjjuavP2g6M4k.roa
File: 8QK44g2eAfwsvBEjjuavP2g6M4k.roa (raw, json)
Hash identifier: 1vdNRft0jVsFWhIe8hshS5SCaZeEYIs3+rEqWp9Bnw4=
Subject key identifier: F1:02:B8:E2:0D:9E:01:FC:2C:BC:11:23:8E:E6:AF:3F:68:3A:33:89
Certificate issuer: /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial: 013F
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/8QK44g2eAfwsvBEjjuavP2g6M4k.roa
Signing time: Sat 24 Sep 2022 17:28:02 +0000
ROA not before: Sat 24 Sep 2022 17:28:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 208148
IP address blocks: 103.169.126.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Validity
Not Before: Sep 24 17:28:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F102B8E20D9E01FC2CBC11238EE6AF3F683A3389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:df:4f:9e:64:a2:11:03:55:19:7b:d4:f5:
0b:bc:9a:0f:b2:ca:fb:45:7e:6d:19:ff:1d:74:5f:
49:c7:f9:d4:ed:61:fa:e1:d9:6f:13:ac:d4:7e:79:
b5:d4:25:5c:c4:79:81:cd:53:c8:f6:25:92:7f:cd:
43:6a:b9:e8:b0:6c:24:88:67:75:b9:75:a0:05:cc:
d9:78:28:d3:22:ea:47:d3:cf:fa:ba:66:1d:93:de:
2e:b2:18:44:49:25:ab:85:09:2e:15:4c:2f:16:52:
ab:0f:b5:46:de:88:70:f7:98:50:b1:37:66:07:02:
bd:6a:07:9e:e2:04:f4:ea:4b:c7:96:ad:18:ea:b3:
34:3b:98:ff:b4:85:04:38:db:ee:fb:fe:94:5b:e4:
99:17:38:44:1d:38:ba:44:71:eb:26:23:67:9f:67:
ad:da:46:fe:0e:0b:4e:3b:f8:cb:39:bf:20:a6:a5:
99:5b:1c:38:22:35:83:bb:31:13:c3:7d:13:1b:65:
37:cb:f5:dd:cb:04:77:ff:94:fb:8d:8f:fe:b3:e9:
24:36:52:50:a7:58:15:34:d7:70:ce:46:ad:00:68:
e6:3d:5c:09:37:52:99:b4:06:de:27:14:e2:53:90:
02:fc:ca:3f:7d:9c:16:55:5f:ab:39:00:c4:34:03:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:B8:E2:0D:9E:01:FC:2C:BC:11:23:8E:E6:AF:3F:68:3A:33:89
X509v3 Authority Key Identifier:
keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/8QK44g2eAfwsvBEjjuavP2g6M4k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:c6:18:7d:23:6c:ef:56:ec:a1:28:0d:99:af:dc:3e:b1:f1:
fd:89:1a:75:82:86:e9:e0:9b:46:23:f0:c5:cb:f7:ad:0d:87:
fa:a1:53:9e:14:e0:09:85:e0:9e:6c:64:95:fc:6b:a0:cd:0b:
ef:b6:10:54:48:2a:f7:6f:92:ec:45:7b:68:d5:9a:2c:2e:2b:
ef:be:5e:85:c5:f1:2e:05:84:6c:09:54:3c:dd:09:b5:37:44:
b0:28:0d:3f:94:85:53:3e:c5:3f:6f:c4:b3:46:ef:78:9a:53:
ac:96:04:e2:58:ec:0d:ee:84:da:c3:4c:b2:a8:b9:a8:c6:44:
d4:23:0c:61:57:ad:79:66:a9:a6:fa:89:4d:bf:44:6b:3e:33:
d1:e2:ac:ae:0f:e0:e4:df:d2:b7:98:36:31:9b:eb:0a:3e:97:
b1:7a:4f:85:ce:ef:90:5a:07:a0:e0:fa:49:b8:13:78:f0:9c:
78:9d:06:1d:71:db:8b:04:1e:e3:be:d1:48:ec:2a:7f:7d:0a:
fe:b0:f6:50:3c:be:2e:85:f0:e5:96:74:68:4c:da:e4:2d:84:
70:56:fc:f4:fc:df:12:39:db:8e:82:f5:c9:f4:e4:1b:3a:b1:
40:8f:1a:f4:6b:cf:a1:53:f3:9e:7b:47:7f:b6:11:7d:29:65:
9e:14:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org