Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/JDfn2WGSZDzMaitI7Vc_QpnsCaU.roa
File: JDfn2WGSZDzMaitI7Vc_QpnsCaU.roa (raw, json)
Hash identifier: ju3Yqmc4aEWJ4854iyZQUdideu9KWvJmPQYOXhGPTiE=
Subject key identifier: 24:37:E7:D9:61:92:64:3C:CC:6A:2B:48:ED:57:3F:42:99:EC:09:A5
Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial: 0B58
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/JDfn2WGSZDzMaitI7Vc_QpnsCaU.roa
Signing time: Fri 01 Sep 2023 10:24:07 +0000
ROA not before: Fri 01 Sep 2023 10:24:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.17.8.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 02:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2904 (0xb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Validity
Not Before: Sep 1 10:24:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2437E7D96192643CCC6A2B48ED573F4299EC09A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:ba:74:17:50:3f:7e:16:3e:8d:10:79:f1:
b5:d9:7b:fe:d0:d8:ae:9a:bf:b1:05:a6:7c:99:20:
63:22:70:f5:cb:11:e8:9b:78:05:7e:ba:05:7d:ee:
6d:06:7a:85:be:9d:2f:ff:e7:1a:ae:27:26:b9:22:
74:d4:7a:7d:00:d7:d1:c0:be:11:9a:07:58:61:dc:
33:f7:5d:ce:65:91:74:8f:fd:ab:24:76:1f:c3:fc:
99:bf:7c:2f:b4:2e:3a:ae:8c:1a:2e:e4:8f:ee:11:
c6:cc:2a:8d:79:d5:c0:89:3a:89:82:34:1f:d2:18:
39:80:8e:aa:74:2b:33:ca:1c:cb:3a:77:de:49:ad:
3f:26:4b:4c:4d:53:5b:1d:a5:43:f5:6e:d4:6a:53:
60:d3:d1:e8:8d:24:31:bb:78:d0:39:fd:61:1f:9e:
97:72:70:2d:2b:1b:9b:15:77:d7:a2:a3:eb:d8:ee:
85:70:ee:22:fd:bb:d5:b6:6f:85:d5:65:44:84:51:
66:da:b5:70:49:5c:96:a8:3d:ab:32:f0:57:1b:fd:
3a:95:62:da:01:d0:0c:81:fa:f8:4a:52:af:8c:f8:
4f:46:11:43:73:9c:44:d6:95:32:e9:c2:bd:25:9c:
01:76:80:ec:f4:19:73:eb:f2:31:1a:22:b9:39:f1:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:37:E7:D9:61:92:64:3C:CC:6A:2B:48:ED:57:3F:42:99:EC:09:A5
X509v3 Authority Key Identifier:
keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/JDfn2WGSZDzMaitI7Vc_QpnsCaU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:5b:1b:3c:d3:fd:5c:43:9f:06:dc:49:e2:7c:74:aa:c6:33:
59:b5:dc:c6:b3:4a:1a:88:2e:16:b1:db:96:15:f7:cd:3c:df:
68:87:5d:79:e5:69:e3:fa:f2:8e:1d:96:f7:d4:d1:e9:ae:51:
e4:2e:cc:e7:1a:87:e6:f3:d1:10:69:80:90:8e:7f:9b:80:4f:
2e:c2:a1:11:ec:8d:a6:04:e4:7c:91:76:66:a9:82:3a:a4:48:
90:b8:b7:9c:c0:68:64:b9:91:67:25:e8:24:71:c9:22:34:76:
1d:0d:b1:1c:65:a6:28:db:3f:8c:a2:aa:77:05:20:e0:38:74:
a3:ae:95:f4:44:f0:53:a0:74:57:50:d2:46:9a:fa:54:ad:0c:
09:1a:6c:4c:bf:2a:56:f3:72:c8:66:96:a1:d2:6b:8d:2b:c9:
a1:cf:47:af:c7:99:00:15:f8:1a:0d:ac:52:9b:aa:91:d9:4c:
69:74:9f:1b:04:94:ac:72:f6:33:1a:05:a0:b6:a6:b6:8a:c1:
ae:61:c1:00:20:9b:c2:fd:77:21:7b:1a:41:28:55:30:e8:bd:
c2:f2:2b:30:27:40:08:ae:94:19:bd:d6:c3:2f:c7:4f:9d:33:
5d:5a:bb:e7:b1:7b:1b:fc:1e:d9:9b:75:d9:b5:7a:46:25:33:
15:84:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 06:14:04 2024 by rpki-client on console-ams.rpki-client.org