Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZAT/lAxjCcuXdi0mEAJszxQYK8jrS5c.roa
File: lAxjCcuXdi0mEAJszxQYK8jrS5c.roa (raw, json)
Hash identifier: ePfyez5a4SL/kZgBYgTAEieRlmJl0OzBUuwDXZoOlyo=
Subject key identifier: 94:0C:63:09:CB:97:76:2D:26:10:02:6C:CF:14:18:2B:C8:EB:4B:97
Certificate issuer: /CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Certificate serial: 03
Authority key identifier: 41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/lAxjCcuXdi0mEAJszxQYK8jrS5c.roa
Signing time: Wed 06 Dec 2023 07:14:19 +0000
ROA not before: Wed 06 Dec 2023 07:14:19 +0000
ROA not after: Fri 29 Nov 2024 15:30:20 +0000
asID: 18041
IP address blocks: 2401:55a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Nov 2024 15:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Validity
Not Before: Dec 6 07:14:19 2023 GMT
Not After : Nov 29 15:30:20 2024 GMT
Subject: CN=940C6309CB97762D2610026CCF14182BC8EB4B97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:74:39:5c:fb:82:63:63:d4:b6:2a:a2:90:
5d:ee:39:3f:64:f8:0c:d9:99:a5:62:47:d4:0d:6d:
97:0b:73:b2:22:55:fe:86:45:45:5e:89:a5:98:47:
81:b1:2b:b9:22:1a:ee:b5:4d:a2:83:d9:4c:ff:fa:
9a:ba:d1:82:9c:63:c9:99:d4:2f:c6:8a:41:77:09:
6f:5a:16:9c:be:e7:93:32:16:bc:07:d4:66:66:3c:
68:ec:f5:82:c9:49:77:ea:8f:93:36:63:43:e0:fa:
4c:a7:b7:e6:8d:34:85:d6:e7:74:ca:7a:5b:e2:10:
e6:af:52:13:98:b9:88:46:c5:74:3a:76:a0:be:33:
91:f4:76:0b:df:54:c1:bb:0b:dc:26:5d:cc:d4:60:
39:08:88:2c:69:7e:11:ce:9e:a2:06:88:d2:a8:1a:
92:e9:ec:1d:c7:c7:95:a1:10:98:e1:5e:c0:23:03:
8f:ea:26:0f:c5:a0:af:14:86:a7:4b:92:e8:c2:64:
06:66:73:a9:83:8b:80:09:ae:ff:18:7e:80:db:23:
75:05:5d:03:14:e5:2c:05:89:e5:bb:d7:f4:15:c7:
41:de:f5:36:0f:1d:4c:7b:57:ad:24:6d:87:db:62:
8d:fb:1d:5e:ac:9d:67:5c:c4:5c:57:e6:e5:b0:ad:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0C:63:09:CB:97:76:2D:26:10:02:6C:CF:14:18:2B:C8:EB:4B:97
X509v3 Authority Key Identifier:
keyid:41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/lAxjCcuXdi0mEAJszxQYK8jrS5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:55a0::/32
Signature Algorithm: sha256WithRSAEncryption
63:01:6c:e3:83:f1:f8:44:ea:f3:e8:8a:32:5f:d7:d1:b0:ad:
44:8f:2b:1c:44:89:4c:e9:3d:a4:20:cd:6b:85:af:fd:42:98:
de:4f:ad:8e:61:d5:52:d3:3e:69:18:c5:40:7e:f4:af:1a:77:
80:99:6f:c1:01:df:00:53:63:ac:95:86:64:16:3f:36:63:01:
32:ed:85:34:61:b0:05:aa:4c:01:94:ae:c9:57:57:53:dc:22:
c5:55:f7:7d:5f:09:43:8e:33:fc:9d:87:f1:21:f3:69:ae:3b:
95:76:1d:44:24:61:16:f5:ea:b5:16:fb:4e:f0:69:4a:94:42:
cb:7c:af:55:c4:8f:b5:fe:eb:a2:58:d4:9b:ba:7e:f7:9b:c6:
3d:cc:70:a7:eb:3a:33:57:79:c7:f8:2d:af:36:d9:39:8e:18:
74:ef:6e:11:fd:6a:ae:0e:27:6a:91:21:7b:57:bd:5c:23:0e:
e7:86:d1:36:bf:dd:3a:6b:b0:85:f1:92:25:7b:73:34:14:59:
56:df:05:9d:b5:29:d5:05:4e:49:7e:03:ae:e8:ee:e0:c9:cf:
80:02:c9:d5:93:77:d5:37:a9:04:23:3c:2f:24:58:d3:cf:13:
38:4f:4f:a9:6b:5e:4e:1a:b5:15:f9:aa:79:61:c2:6e:08:92:
30:1a:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 18:09:04 2024 by rpki-client on console-fra.rpki-client.org