Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/s_NF40Sl4HyxN8FrC3qkmm5vaYA.roa
File: s_NF40Sl4HyxN8FrC3qkmm5vaYA.roa (raw, json)
Hash identifier: a+J6gTjNRCIOQZ7lUUMTuXgq5XwKobTkTIWxK/5pzHs=
Subject key identifier: B3:F3:45:E3:44:A5:E0:7C:B1:37:C1:6B:0B:7A:A4:9A:6E:6F:69:80
Certificate issuer: /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Certificate serial: F2
Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/s_NF40Sl4HyxN8FrC3qkmm5vaYA.roa
Signing time: Fri 20 Oct 2023 01:35:23 +0000
ROA not before: Fri 20 Oct 2023 01:35:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7483
IP address blocks: 103.24.54.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 02:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Validity
Not Before: Oct 20 01:35:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B3F345E344A5E07CB137C16B0B7AA49A6E6F6980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:b8:78:16:9a:65:40:65:a1:3c:70:2c:5d:
a1:2e:77:f5:16:8f:22:d7:01:82:5f:6d:57:a9:72:
bf:d1:59:04:00:fb:a8:06:82:d1:98:91:88:bb:77:
a7:2d:86:99:ce:fc:f3:ae:17:1e:f5:6e:41:ec:d9:
d8:a3:b3:1f:6d:11:ee:3a:03:22:0a:be:92:82:7c:
e0:c7:b1:ea:a6:3d:f7:1c:ae:c5:f1:4d:50:be:47:
5c:a3:a1:ad:8e:35:f2:c2:66:be:48:a9:02:16:91:
e5:af:a3:08:6e:5f:56:dd:14:67:1f:7c:bc:61:77:
43:c9:bd:83:1f:41:b9:04:c1:1e:11:76:b0:fc:1a:
59:43:a5:a1:db:32:3d:e9:76:de:f5:ba:b9:b3:0d:
84:10:8e:fd:53:f0:2f:ec:fc:77:d0:19:1d:37:dc:
db:f2:1c:6f:38:c7:6a:9a:12:e9:bc:57:8c:97:d8:
77:dc:37:83:69:7c:55:6d:37:50:12:75:05:c2:11:
11:1c:32:e5:fc:79:55:e2:d5:2c:8d:c0:f0:37:1d:
8d:ae:59:1b:dd:a3:27:fb:fe:74:17:a7:9e:2a:6d:
fd:9a:93:4f:6c:fc:fa:e4:69:a1:60:93:7e:78:7a:
93:60:11:a8:f7:1b:16:fa:e2:25:83:44:56:92:9c:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F3:45:E3:44:A5:E0:7C:B1:37:C1:6B:0B:7A:A4:9A:6E:6F:69:80
X509v3 Authority Key Identifier:
keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/s_NF40Sl4HyxN8FrC3qkmm5vaYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.54.0/23
Signature Algorithm: sha256WithRSAEncryption
04:bb:40:7f:b8:9e:4d:79:0a:16:28:ad:06:9d:18:74:9a:ea:
4e:ec:1a:b1:6d:38:4d:4f:5e:9e:7f:f6:88:c4:d0:7d:46:a7:
40:25:2b:9f:61:17:ee:65:50:5d:3e:14:47:e4:81:a2:fe:37:
11:d6:cd:50:25:2b:38:f1:f9:5e:c9:25:0c:e9:ac:7d:10:f4:
c4:bb:67:96:04:64:18:e4:f1:1e:b7:44:dc:7d:05:3a:c5:15:
4e:f2:1b:d1:3b:9f:28:91:7b:d3:29:ab:f0:85:d3:58:c9:aa:
60:34:f9:13:22:35:c3:e5:ed:ea:b4:14:3c:e9:b8:08:ff:71:
ea:ff:3d:98:5c:1b:28:45:0b:48:af:b9:28:f6:5c:7e:2d:2d:
8f:b1:22:e1:0d:b8:5e:f8:8e:d8:5a:8a:0a:00:17:a0:b8:cc:
0e:88:7c:53:83:ae:23:38:a1:06:8d:47:c1:e2:03:a9:f5:e3:
83:6f:0c:1d:09:1f:77:e4:80:ea:f9:34:85:eb:51:50:25:23:
d2:6c:46:7f:a9:46:76:87:b8:77:18:c9:b7:fe:d1:94:83:28:
ed:1b:c6:f9:85:40:66:c8:e7:47:e9:4d:2b:8b:85:2e:54:c4:
bf:21:27:0f:07:64:26:a8:9f:1a:31:19:6b:98:a5:38:2f:e4:
d6:97:91:cb
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 26 06:14:04 2024 by rpki-client on console-ams.rpki-client.org