Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/w4-0BsSjklxKh0es-q6h2iauMpw.roa
File: w4-0BsSjklxKh0es-q6h2iauMpw.roa (raw, json)
Hash identifier: qjSVzL0AsIZ1WHI/8xjl49xUT3ayV7ZHH/zfXTiP8V8=
Subject key identifier: C3:8F:B4:06:C4:A3:92:5C:4A:87:47:AC:FA:AE:A1:DA:26:AE:32:9C
Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial: 0B83
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/w4-0BsSjklxKh0es-q6h2iauMpw.roa
Signing time: Thu 12 Oct 2023 07:20:51 +0000
ROA not before: Thu 12 Oct 2023 07:20:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.123.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 03:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2947 (0xb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Validity
Not Before: Oct 12 07:20:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C38FB406C4A3925C4A8747ACFAAEA1DA26AE329C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:ab:69:7f:57:2b:66:7c:9c:d4:1f:59:8b:
08:81:eb:a7:19:61:bf:d4:b1:09:a3:fc:89:1f:56:
aa:2b:5e:37:47:d5:e4:cc:86:5e:be:4e:32:cd:5f:
08:5a:09:b6:6e:bc:36:a4:85:8f:41:a1:38:9b:27:
ab:1d:31:3c:9d:6b:dd:a1:94:d7:be:62:38:3b:de:
99:0f:48:b9:6a:f6:2e:60:3d:c5:a1:52:7f:5c:b8:
55:f0:bd:67:23:c1:b5:c1:88:37:d7:a6:84:89:8c:
d9:a7:51:0f:56:34:3c:91:42:0a:a7:1e:23:bf:21:
f4:94:3d:e0:03:6a:e8:ae:30:90:00:a4:a8:ca:e2:
64:da:80:c9:07:97:80:7a:07:42:b9:13:2f:c4:35:
89:4a:44:e7:7e:e6:a5:07:49:3b:c8:53:96:f6:c1:
40:ef:71:e0:ae:41:ba:db:28:33:9d:2f:2f:a0:7c:
9d:d8:3b:3a:3a:ee:f4:9a:be:51:97:56:52:03:13:
66:9d:b7:26:39:2a:77:59:a6:c8:b2:45:45:73:fd:
37:ac:3a:98:6a:6d:e1:5c:77:80:7c:4c:7b:a1:63:
17:dc:63:37:e7:1a:bb:b5:b0:74:26:24:45:81:0c:
1c:31:6c:33:b2:1e:9b:47:4d:1f:7e:f6:04:1d:b9:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:B4:06:C4:A3:92:5C:4A:87:47:AC:FA:AE:A1:DA:26:AE:32:9C
X509v3 Authority Key Identifier:
keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/w4-0BsSjklxKh0es-q6h2iauMpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:31:ad:19:93:25:db:9f:1b:03:68:dc:93:da:e5:61:ca:a6:
50:c2:89:86:e5:b8:ad:b0:ff:9f:91:51:04:d6:1f:14:80:3a:
9f:4c:3b:ff:04:6e:60:b2:1d:51:d5:f2:c2:8b:6c:f1:a8:7a:
f2:b2:3d:09:51:b2:21:ba:c8:97:18:ba:18:1b:65:ad:41:fb:
0e:35:b5:a6:a5:b3:6c:14:da:a3:22:2f:12:68:44:05:40:e5:
8f:3d:0a:9b:33:6c:95:c5:89:41:34:7b:c8:dd:b0:75:18:59:
ca:99:87:9b:09:5d:83:79:20:99:ae:6e:41:f1:7d:78:81:1c:
fe:3f:f4:9c:0d:a4:9e:11:81:45:e9:b6:4c:b3:0c:0b:c2:81:
0d:2c:b3:0d:f9:17:85:80:d2:99:5e:93:07:44:f3:e7:6c:90:
d9:1d:a6:fa:ae:0c:63:08:c4:dc:9e:dc:70:57:43:ea:d0:cc:
4e:3f:16:8b:cc:9c:5e:2a:56:97:06:ce:8a:74:99:9b:a9:a9:
46:27:20:35:04:a7:40:0e:a0:06:ee:dc:c5:5f:36:4b:56:2d:
be:7f:34:8e:11:ca:8f:e3:85:91:26:66:6f:92:3a:d2:56:51:
68:c2:08:65:58:a5:34:e5:c2:6e:61:19:53:c4:84:9e:84:32:
76:e0:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org