Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/_d0gpf-ai_zy9SXZmtwJxhM4mZ0.roa
File: _d0gpf-ai_zy9SXZmtwJxhM4mZ0.roa (raw, json)
Hash identifier: J/EU+zNuDa7oRR9epyFsB84PRokaqCEYQUBT/aphPSU=
Subject key identifier: FD:DD:20:A5:FF:9A:8B:FC:F2:F5:25:D9:9A:DC:09:C6:13:38:99:9D
Certificate issuer: /CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378
Certificate serial: 0A3E
Authority key identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/_d0gpf-ai_zy9SXZmtwJxhM4mZ0.roa
Signing time: Thu 15 Sep 2022 02:42:19 +0000
ROA not before: Thu 15 Sep 2022 02:42:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 136162
IP address blocks: 103.100.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622 (0xa3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378
Validity
Not Before: Sep 15 02:42:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FDDD20A5FF9A8BFCF2F525D99ADC09C61338999D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:b4:2a:83:ca:93:ee:4c:8e:6c:ab:98:da:
97:dc:5e:da:04:cf:91:d4:1c:f8:a8:20:e2:5f:8c:
28:20:ca:01:98:f9:b2:28:a5:24:c4:cb:86:06:0b:
95:f6:58:5f:49:39:1f:e7:35:75:63:48:77:a9:42:
29:d4:e4:25:d0:39:0e:94:f1:a0:f8:82:e3:49:35:
01:8c:1a:51:fe:89:0e:3c:70:ab:a1:02:e4:e9:17:
e1:e7:4c:0c:ed:22:74:7f:61:0b:8e:40:1e:69:d5:
98:ee:11:fc:f0:dd:1f:0e:2c:39:bf:1b:78:e7:44:
e3:34:1c:be:e6:78:7b:12:f6:bc:f6:17:c1:ac:23:
e1:2a:4e:10:12:31:60:b1:45:fe:bf:b6:5a:ab:fe:
65:80:c0:de:fc:c0:4e:4d:b1:46:99:2b:c9:b6:94:
4c:76:9c:73:79:aa:e4:59:87:42:3e:8e:eb:93:36:
aa:03:89:94:51:35:b9:27:a5:65:b2:4b:70:95:e4:
06:87:64:10:06:26:57:71:d1:fb:ea:f3:69:36:e2:
b1:01:eb:af:4c:89:55:ff:1a:85:a3:09:24:ae:20:
ec:5e:b7:59:7e:72:a9:84:d3:58:c7:cd:3a:07:de:
5f:bf:5d:07:82:71:59:89:2d:df:13:1d:0b:5e:54:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:20:A5:FF:9A:8B:FC:F2:F5:25:D9:9A:DC:09:C6:13:38:99:9D
X509v3 Authority Key Identifier:
keyid:80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/_d0gpf-ai_zy9SXZmtwJxhM4mZ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:3e:7e:8e:ce:80:34:89:9a:a4:e0:2f:9a:52:08:4b:81:a6:
c9:dc:44:a9:bf:20:a0:b9:0d:e1:0c:b3:46:06:0f:8f:7f:8e:
36:0e:11:8e:fc:3d:09:74:4b:36:03:fd:42:37:a9:11:37:d9:
ea:15:9c:12:63:79:b1:0e:2c:81:c5:e3:0e:b0:e3:eb:7c:08:
34:62:b4:0b:1d:7c:f2:e9:81:3b:fa:34:e0:fa:25:f5:6f:a9:
cb:b7:d3:98:58:c4:3d:de:30:77:ab:76:bc:cf:d2:0e:29:cf:
bb:3b:95:f9:07:5c:77:02:65:75:61:56:b1:6b:47:18:78:ee:
4c:16:de:92:10:ab:f3:f3:44:e1:f6:0c:ce:9f:1a:92:04:39:
52:29:86:f5:c4:07:cd:4e:59:7b:15:ae:f1:d9:7c:44:7a:32:
3e:01:02:67:7b:a9:88:45:60:e1:97:d0:26:69:1a:e0:27:f3:
68:b4:83:f4:72:be:65:2e:8b:4f:22:aa:09:fc:9e:39:67:70:
e9:b5:68:79:61:91:6c:59:a8:3b:ca:1f:58:26:01:45:9a:25:
1a:53:91:18:bc:36:67:4e:82:06:31:36:9e:ed:c9:7c:10:2b:
04:8b:c8:cf:05:ea:b1:20:92:39:20:38:84:9f:20:76:3b:23:
c1:c9:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-fra.rpki-client.org