Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZAT/YDygZCPg_4DZqRDKrB7238xGekk.roa
File: YDygZCPg_4DZqRDKrB7238xGekk.roa (raw, json)
Hash identifier: r6vuiiAAUub5+OLQGavKMRYL3Ub4v3ZMRVVTk58+EUc=
Subject key identifier: 60:3C:A0:64:23:E0:FF:80:D9:A9:10:CA:AC:1E:F6:DF:CC:46:7A:49
Certificate issuer: /CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Certificate serial: 05
Authority key identifier: 41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/YDygZCPg_4DZqRDKrB7238xGekk.roa
Signing time: Wed 06 Dec 2023 07:14:28 +0000
ROA not before: Wed 06 Dec 2023 07:14:28 +0000
ROA not after: Fri 29 Nov 2024 15:30:20 +0000
asID: 18041
IP address blocks: 210.79.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 15:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Validity
Not Before: Dec 6 07:14:28 2023 GMT
Not After : Nov 29 15:30:20 2024 GMT
Subject: CN=603CA06423E0FF80D9A910CAAC1EF6DFCC467A49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:fd:a2:98:5c:e9:57:18:9e:d4:68:fc:6d:
70:aa:d6:a6:56:68:4f:63:bb:0f:ff:f7:eb:b3:1f:
c3:27:08:f3:10:ee:81:51:52:81:b3:bf:da:50:33:
0a:1a:ea:d8:ac:b3:32:54:d0:40:09:ee:98:12:b5:
fd:28:db:f1:0a:28:e1:8f:b4:09:82:32:3b:f5:45:
dc:ff:d8:2c:e8:05:81:94:49:08:a5:42:c5:00:c0:
ea:2a:b2:eb:dc:20:46:75:ad:45:fe:06:d1:4b:ed:
57:82:f8:af:77:10:c5:30:c7:28:a9:34:e8:1a:e3:
71:e7:0a:86:7c:c8:8f:2a:b7:1f:5c:66:28:da:0a:
af:4c:27:03:b3:82:a8:43:24:5a:a0:31:5b:cd:91:
50:cc:e1:79:46:e4:00:bd:cd:13:0d:96:bd:b0:b1:
1e:fa:03:6a:35:ed:4e:8a:0f:ac:04:6a:26:0f:e7:
6d:52:35:fb:75:ee:d4:2d:a4:08:03:4e:70:a5:d3:
ef:a5:81:bd:ca:c3:c5:2e:5a:39:dd:9a:49:9d:84:
23:07:8d:ef:db:76:76:ae:67:e7:0c:49:48:f5:34:
b5:43:5f:7e:86:50:a3:28:fb:46:2d:54:de:b1:74:
92:d3:21:82:8c:ec:04:40:b3:ef:d2:44:92:26:63:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:A0:64:23:E0:FF:80:D9:A9:10:CA:AC:1E:F6:DF:CC:46:7A:49
X509v3 Authority Key Identifier:
keyid:41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/YDygZCPg_4DZqRDKrB7238xGekk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.150.0/23
Signature Algorithm: sha256WithRSAEncryption
79:2a:60:bd:11:7b:fb:7a:2f:f2:07:a0:02:aa:4d:cb:ad:12:
d2:f2:5c:f3:a4:e2:1a:27:2e:de:aa:43:f4:47:8b:33:aa:2b:
c4:53:fd:97:e1:f9:c3:0b:90:cf:3f:6b:0c:00:23:d5:79:dd:
dc:af:79:14:16:ec:95:fc:16:48:a7:76:36:d3:58:c0:73:e6:
7b:5f:c4:f9:d6:b9:e0:72:f4:46:31:45:45:ad:77:50:53:1a:
7a:a9:54:1f:98:77:ed:1d:96:95:90:69:23:e6:58:0a:82:3f:
35:f7:f6:17:e0:3d:63:e8:7e:33:1d:33:77:8d:60:9e:63:e3:
a4:f1:0a:79:7b:22:ae:d4:23:37:cd:bb:83:de:a5:6e:d8:a1:
4c:46:73:81:af:70:ba:ef:7b:75:db:da:7a:ef:f7:e2:2a:a7:
5f:83:9f:ff:50:b2:81:51:bc:89:09:90:e1:a9:a1:f7:f4:d1:
ff:6f:20:2b:9a:a7:f7:08:70:98:f7:a8:0b:b5:9a:b7:7d:cb:
55:13:52:de:8e:f8:c5:ed:9a:21:5f:be:f7:79:b6:e4:ba:e5:
7f:3f:ba:39:76:49:af:2c:fa:b2:5d:15:c2:b4:b6:1b:f8:4b:
00:92:1a:5c:6c:22:40:e2:27:57:68:a0:73:83:4f:2b:49:3a:
8f:46:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 18:09:04 2024 by rpki-client on console-fra.rpki-client.org