Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/__AYvr7AgKazPx5myY-zrtN6fr4.roa
File: __AYvr7AgKazPx5myY-zrtN6fr4.roa (raw, json)
Hash identifier: QpIuPtVUl8qSgAMMTwjRBsxoFt7g4MruuWCTfjRVtyQ=
Subject key identifier: FF:F0:18:BE:BE:C0:80:A6:B3:3F:1E:66:C9:8F:B3:AE:D3:7A:7E:BE
Certificate issuer: /CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Certificate serial: FB
Authority key identifier: 60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/__AYvr7AgKazPx5myY-zrtN6fr4.roa
Signing time: Mon 26 Aug 2024 05:10:30 +0000
ROA not before: Mon 26 Aug 2024 05:10:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 2401:30e0::/32 maxlen: 64
Validation: Failed, certificate revoked on Thu 09 Jan 2025 02:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Validity
Not Before: Aug 26 05:10:30 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FFF018BEBEC080A6B33F1E66C98FB3AED37A7EBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:a7:36:0b:13:f6:f5:ff:c3:b2:83:4c:8b:
78:d0:f2:02:54:e8:3d:7b:49:e7:53:7a:60:00:6c:
4c:5e:22:54:59:14:d9:d1:9a:a5:5a:d6:e6:6f:73:
92:da:1d:da:d6:0b:9b:97:d4:c0:2a:2d:93:85:73:
73:0e:6f:3d:fd:ca:13:67:9b:c3:d3:7d:a4:aa:0c:
59:4e:8f:22:89:ab:f1:15:ef:46:1e:77:07:0f:d2:
da:8d:01:f1:bc:42:6a:4d:8f:d8:46:08:77:d8:15:
38:85:5c:ab:28:86:b4:82:40:59:3b:ab:5d:ee:21:
36:f5:f5:9c:7f:bb:ad:ad:e3:9f:a0:d9:53:96:33:
c2:06:3a:9f:56:ed:14:71:21:22:4a:3e:5c:06:33:
75:c6:8f:55:a0:9c:a2:34:f2:51:fd:98:b5:81:24:
8a:c5:13:2a:96:0b:86:81:5f:e1:2b:f3:2c:7c:7a:
4e:1c:2c:52:90:80:4d:2a:75:62:49:3f:e4:ce:11:
58:66:05:78:8b:b1:b2:ea:74:94:15:55:84:80:b0:
89:10:04:8c:a6:79:59:85:29:01:7f:f3:36:a7:8c:
7d:4c:ee:8f:54:2b:fb:ab:3f:55:3f:82:ae:6d:41:
67:d8:74:c4:f4:33:8d:8b:98:ff:e5:1c:c8:3b:bd:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:18:BE:BE:C0:80:A6:B3:3F:1E:66:C9:8F:B3:AE:D3:7A:7E:BE
X509v3 Authority Key Identifier:
keyid:60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/__AYvr7AgKazPx5myY-zrtN6fr4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:30e0::/32
Signature Algorithm: sha256WithRSAEncryption
16:6e:4f:2c:e2:47:b4:fe:57:9f:08:7d:8e:70:f6:8e:ad:94:
e4:c7:6f:95:9b:ac:ad:7f:52:7b:9f:1a:f6:19:9d:60:d9:74:
78:1d:ec:3b:c9:fb:5a:df:c3:83:f1:96:60:65:b5:81:10:85:
59:72:5d:06:3f:b3:46:8f:38:bd:cb:8a:49:c9:bd:52:ba:57:
98:fc:d1:b2:88:f3:5f:e0:03:51:0e:b4:7d:0f:a7:37:45:dd:
6c:85:2d:a1:31:29:c8:0c:39:c4:03:96:50:55:e9:cb:10:83:
ee:9b:52:0d:42:03:f6:5d:fa:fa:31:5e:ed:5c:ee:a0:4d:91:
ee:e9:ba:60:62:73:a5:92:ad:a1:70:96:3d:30:a7:a9:a2:c9:
a8:44:46:23:7a:cb:d1:b2:c3:b5:3e:e9:98:b9:c3:dd:28:07:
c5:f6:5a:f8:a7:6a:41:f1:11:40:77:d6:1d:a6:ef:98:88:03:
45:91:c9:ae:f8:f6:ad:36:81:56:db:0b:e1:24:5e:05:8e:43:
67:cc:42:b8:7d:11:3d:1e:6b:6e:cb:3f:44:7e:3c:b1:5e:27:
ef:23:6f:2f:f9:46:80:8f:7d:a5:6c:8f:88:72:2d:69:3a:a5:
a8:4c:f5:5c:1e:10:84:bf:ba:ae:75:b5:12:ec:03:00:9d:62:
f9:43:ad:8a
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAx
NkVGNDFGMzIxQzlBQTZDMUUxM0QxMTVCNUI2MEEzMDI5QzhFNTAeFw0yNDA4MjYw
NTEwMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGRjAxOEJFQkVDMDgw
QTZCMzNGMUU2NkM5OEZCM0FFRDM3QTdFQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3Kac2CxP29f/DsoNMi3jQ8gJU6D17SedTemAAbExeIlRZFNnR
mqVa1uZvc5LaHdrWC5uX1MAqLZOFc3MObz39yhNnm8PTfaSqDFlOjyKJq/EV70Ye
dwcP0tqNAfG8QmpNj9hGCHfYFTiFXKsohrSCQFk7q13uITb19Zx/u62t45+g2VOW
M8IGOp9W7RRxISJKPlwGM3XGj1WgnKI08lH9mLWBJIrFEyqWC4aBX+Er8yx8ek4c
LFKQgE0qdWJJP+TOEVhmBXiLsbLqdJQVVYSAsIkQBIymeVmFKQF/8zanjH1M7o9U
K/urP1U/gq5tQWfYdMT0M42LmP/lHMg7vSVDAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQU//AYvr7AgKazPx5myY+zrtN6fr4wHwYDVR0jBBgwFoAUYBbvQfMhyapsHhPR
FbW2CjApyOUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBTkdT
SEVOL1lCYnZRZk1oeWFwc0hoUFJGYlcyQ2pBcHlPVS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvWUJidlFmTWh5YXBzSGhQUkZiVzJDakFweU9VLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBTkdTSEVOL19fQVl2cjdBZ0th
elB4NW15WS16cnRONmZyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAkATDgMA0GCSqGSIb3DQEBCwUAA4IBAQAWbk8s4ke0/lefCH2OcPaOrZTk
x2+Vm6ytf1J7nxr2GZ1g2XR4Hew7yfta38OD8ZZgZbWBEIVZcl0GP7NGjzi9y4pJ
yb1SuleY/NGyiPNf4ANRDrR9D6c3Rd1shS2hMSnIDDnEA5ZQVenLEIPum1INQgP2
Xfr6MV7tXO6gTZHu6bpgYnOlkq2hcJY9MKeposmoREYjesvRssO1PumYucPdKAfF
9lr4p2pB8RFAd9Ydpu+YiANFkcmu+PatNoFW2wvhJF4FjkNnzEK4fRE9Hmtuyz9E
fjyxXifvI28v+UaAj32lbI+Ici1pOqWoTPVcHhCEv7qudbUS7AMAnWL5Q62K
-----END CERTIFICATE-----
Generated at Thu Jan 9 09:19:11 2025 by rpki-client on console.sobornost.net