Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FUYU/dqeANVsjploG1zt7ZrXCouL8HbQ.roa
File: dqeANVsjploG1zt7ZrXCouL8HbQ.roa (raw, json)
Hash identifier: c5uxdAivKmilpMsxB8scBCJamGcg/9PvYuupqK0Bsm8=
Subject key identifier: 76:A7:80:35:5B:23:A6:5A:06:D7:3B:7B:66:B5:C2:A2:E2:FC:1D:B4
Certificate issuer: /CN=6B3C09A6D48E6F4E1760EDD8942C436D0A196387
Certificate serial: E6
Authority key identifier: 6B:3C:09:A6:D4:8E:6F:4E:17:60:ED:D8:94:2C:43:6D:0A:19:63:87
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/azwJptSOb04XYO3YlCxDbQoZY4c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/dqeANVsjploG1zt7ZrXCouL8HbQ.roa
Signing time: Fri 07 Feb 2025 15:40:00 +0000
ROA not before: Fri 07 Feb 2025 15:40:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 150771
IP address blocks: 2401:81a0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B3C09A6D48E6F4E1760EDD8942C436D0A196387
Validity
Not Before: Feb 7 15:40:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=76A780355B23A65A06D73B7B66B5C2A2E2FC1DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:3a:84:80:ca:da:49:49:94:63:16:de:f2:
5f:fb:d3:23:19:c4:a9:23:a2:6c:5b:b0:6e:e6:68:
a5:c1:12:a9:32:ba:4c:fc:d4:62:c2:28:b8:c7:5d:
b8:7c:c0:a2:28:d2:7d:5a:42:af:9b:12:0b:4f:85:
d8:4c:5a:22:9f:56:83:f7:b6:46:3a:40:d4:ed:31:
3f:e4:bc:60:ce:b0:a9:99:cf:d0:69:8a:ce:81:86:
fb:60:73:03:c9:de:5d:4a:79:d7:b6:54:aa:5c:9c:
2e:40:49:bb:75:47:48:37:57:0a:e8:81:2e:55:4e:
58:bf:43:e6:27:f4:69:79:dc:8e:36:b9:6a:24:ae:
a8:87:d8:0f:3a:d8:48:32:ed:a8:d8:f9:e3:96:88:
cf:64:d4:56:0a:7b:d0:1d:23:03:71:43:f1:8d:fb:
e8:38:83:a3:24:7c:88:ba:84:89:fa:bc:22:4a:9e:
cf:be:6d:38:fc:86:fd:03:02:f3:62:4a:54:1e:dc:
cb:5c:fa:1f:33:7d:35:94:87:92:26:3a:7a:28:cf:
03:6e:8e:a5:88:ed:94:7c:bb:ab:da:af:32:ce:c3:
07:77:59:f1:a5:6d:b0:a1:09:b0:b5:fa:b4:b0:c7:
76:56:2e:25:ca:d8:63:a4:19:e6:3a:a6:ad:ca:2e:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A7:80:35:5B:23:A6:5A:06:D7:3B:7B:66:B5:C2:A2:E2:FC:1D:B4
X509v3 Authority Key Identifier:
keyid:6B:3C:09:A6:D4:8E:6F:4E:17:60:ED:D8:94:2C:43:6D:0A:19:63:87
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/azwJptSOb04XYO3YlCxDbQoZY4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/azwJptSOb04XYO3YlCxDbQoZY4c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/dqeANVsjploG1zt7ZrXCouL8HbQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:81a0::/32
Signature Algorithm: sha256WithRSAEncryption
87:58:cd:71:58:fa:54:a9:95:73:26:e2:9f:f3:b7:40:11:c9:
ac:06:c1:61:9a:2d:cc:2d:39:8e:3c:0a:8d:5a:d6:2a:c3:a4:
9b:d8:f0:1e:31:ae:6b:d0:0f:cf:eb:75:61:b7:3f:29:df:a7:
d3:3f:0b:0f:d1:ff:b7:e3:47:19:8a:60:01:0b:5c:0d:ce:3e:
2b:9d:1f:ce:ad:d5:95:e6:92:9a:b4:6f:be:3c:f5:ff:63:f8:
af:37:79:41:62:6e:78:9d:3c:e6:6d:d9:4d:22:13:54:76:8e:
4e:7c:28:e5:b5:e7:34:06:f4:ef:a9:50:a0:78:79:47:88:c6:
65:9e:d6:d7:77:c0:62:93:1f:42:80:22:df:8d:35:2e:2d:a9:
c3:01:77:67:16:02:80:6c:f8:c8:9a:59:ab:3e:f3:dd:47:47:
87:a2:8b:2a:38:df:d0:42:7c:99:c3:41:be:7a:ac:13:cf:1f:
78:c6:c0:93:14:a4:db:36:99:52:d5:a3:a7:0b:5d:84:03:3d:
91:48:fb:a0:eb:47:a4:9e:b7:e1:89:fd:a9:e2:16:1d:26:5e:
39:9d:40:29:17:cb:32:02:6d:ac:15:48:91:76:a9:28:0d:fe:
fb:97:72:73:93:86:6d:00:a2:5a:6c:e4:15:55:df:23:58:09:
82:20:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 03:42:44 2025 by rpki-client on console.sobornost.net