Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Ti1V1qlhoUO7RsfOomwgPQoUA_M.roa
File: Ti1V1qlhoUO7RsfOomwgPQoUA_M.roa (raw, json)
Hash identifier: IAadnA8BDnpFaXOyvEHFOpPrINIfWgjQ0vOVazTZX44=
Subject key identifier: 4E:2D:55:D6:A9:61:A1:43:BB:46:C7:CE:A2:6C:20:3D:0A:14:03:F3
Certificate issuer: /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial: 0B39
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Ti1V1qlhoUO7RsfOomwgPQoUA_M.roa
Signing time: Fri 01 Sep 2023 10:21:20 +0000
ROA not before: Fri 01 Sep 2023 10:21:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131603
IP address blocks: 103.229.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 01:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873 (0xb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Validity
Not Before: Sep 1 10:21:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4E2D55D6A961A143BB46C7CEA26C203D0A1403F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:37:2d:08:64:8c:14:c8:95:f9:8e:8b:dc:
94:ff:8a:08:1f:07:a8:53:5b:6e:f9:5c:59:7f:5d:
7b:fb:15:7f:86:c5:10:74:98:2c:8a:ac:75:ef:6c:
bd:ad:21:50:71:b6:07:c8:8c:46:0d:9b:cb:8a:63:
82:0c:01:7f:5d:c0:f6:e9:18:bd:fc:b4:1e:cd:5e:
7c:12:17:38:aa:b1:68:11:b6:2c:e6:9d:88:76:ef:
26:54:87:40:16:7d:50:e8:44:dc:e9:79:81:2c:62:
e4:58:52:da:29:e3:19:3e:d3:9e:9c:86:cd:62:85:
1b:fd:50:c8:c4:37:80:00:19:49:a3:4b:eb:58:74:
12:fa:cf:e1:39:43:f8:b4:30:16:2b:35:08:e3:1f:
19:be:c3:9d:ab:32:9b:31:96:85:3d:1a:a5:e5:ef:
29:a2:c1:f3:8a:ec:44:d6:3e:00:d5:38:7a:e0:2b:
bd:5c:88:56:8e:3e:90:ee:69:87:2a:0c:1a:cf:c7:
04:39:72:5e:1a:39:41:18:ae:59:95:6c:7a:86:8c:
6e:63:ed:b6:fd:f8:1b:06:0e:fa:10:01:ca:16:2b:
40:33:60:66:42:29:96:72:40:21:5e:31:bd:b8:d8:
82:df:56:d5:4f:74:4f:3c:d8:a5:60:55:db:d3:d2:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:55:D6:A9:61:A1:43:BB:46:C7:CE:A2:6C:20:3D:0A:14:03:F3
X509v3 Authority Key Identifier:
keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Ti1V1qlhoUO7RsfOomwgPQoUA_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:32:7a:ea:b7:17:86:e8:07:72:f0:95:54:7e:6e:12:83:14:
72:4c:8e:7d:49:3c:98:3e:19:02:6d:18:7e:27:6b:00:80:1e:
73:36:f0:d8:35:18:9b:78:69:72:37:5e:f5:a7:e2:da:08:08:
08:fc:82:d5:80:3d:6a:e7:56:38:cf:4e:1f:a2:16:52:53:d9:
c8:df:e2:cd:c8:fe:66:b0:8a:96:c5:88:e5:de:1e:0f:05:ea:
58:5f:60:41:58:5e:58:86:42:8a:7e:65:a9:ea:fc:ed:d5:e6:
b2:c1:39:06:97:4d:7c:d8:af:52:27:dc:9f:a3:b4:6a:74:8f:
bf:c4:c7:77:90:31:ce:39:43:9e:ee:fb:c7:93:16:a4:ff:3e:
83:24:98:fd:74:c5:4e:4e:70:e5:58:f6:45:56:01:bc:8a:e7:
22:51:8e:af:08:61:2c:b0:01:19:58:b0:42:2a:0f:00:bb:a2:
13:84:01:c6:cc:87:c7:a6:8b:7c:44:63:0e:27:4c:e7:9c:5e:
1f:63:74:81:a8:16:af:ff:e8:5f:33:c8:fe:0d:f9:52:e0:c7:
3c:f0:18:85:8d:d8:6f:e0:c8:16:9f:8b:dd:06:2a:d2:12:dd:
8b:60:20:24:78:1e:22:da:2d:d4:7d:0d:ae:86:b4:e7:6b:74:
45:db:87:d3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUNC
MUNBNzBBMzMyNDhGQjNEQUVFOEJGNDFFMkRBQTc2QTdEQ0ZEMzAeFw0yMzA5MDEx
MDIxMjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRFMkQ1NUQ2QTk2MUEx
NDNCQjQ2QzdDRUEyNkMyMDNEMEExNDAzRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA2zctCGSMFMiV+Y6L3JT/iggfB6hTW275XFl/XXv7FX+GxRB0
mCyKrHXvbL2tIVBxtgfIjEYNm8uKY4IMAX9dwPbpGL38tB7NXnwSFziqsWgRtizm
nYh27yZUh0AWfVDoRNzpeYEsYuRYUtop4xk+056chs1ihRv9UMjEN4AAGUmjS+tY
dBL6z+E5Q/i0MBYrNQjjHxm+w52rMpsxloU9GqXl7ymiwfOK7ETWPgDVOHrgK71c
iFaOPpDuaYcqDBrPxwQ5cl4aOUEYrlmVbHqGjG5j7bb9+BsGDvoQAcoWK0AzYGZC
KZZyQCFeMb242ILfVtVPdE882KVgVdvT0iLhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTi1V1qlhoUO7RsfOomwgPQoUA/MwHwYDVR0jBBgwFoAUHLHKcKMySPs9rui/
QeLap2p9z9MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV1NOLVRX
L0hMSEtjS015U1BzOXJ1aV9RZUxhcDJwOXo5TS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSExIS2NLTXlTUHM5cnVpX1FlTGFwMnA5ejlNLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvV1NOLVRXL1RpMVYxcWxob1VPN1JzZk9v
bXdnUFFvVUFfTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
5TIwDQYJKoZIhvcNAQELBQADggEBAD8yeuq3F4boB3LwlVR+bhKDFHJMjn1JPJg+
GQJtGH4nawCAHnM28Ng1GJt4aXI3XvWn4toICAj8gtWAPWrnVjjPTh+iFlJT2cjf
4s3I/mawipbFiOXeHg8F6lhfYEFYXliGQop+Zanq/O3V5rLBOQaXTXzYr1In3J+j
tGp0j7/Ex3eQMc45Q57u+8eTFqT/PoMkmP10xU5OcOVY9kVWAbyK5yJRjq8IYSyw
ARlYsEIqDwC7ohOEAcbMh8emi3xEYw4nTOecXh9jdIGoFq//6F8zyP4N+VLgxzzw
GIWN2G/gyBafi90GKtIS3YtgICR4HiLaLdR9Da6GtOdrdEXbh9M=
-----END CERTIFICATE-----
Generated at Mon Apr 15 02:59:41 2024 by rpki-client on console-fra.rpki-client.org