Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3iZlChutKwdkGf8G4bsZPElnBtA.roa
File: 3iZlChutKwdkGf8G4bsZPElnBtA.roa (raw, json)
Hash identifier: roFdE3mQR0+gxDX4B0T1QTNfZ9fuGlQhyKDC8q2ny1I=
Subject key identifier: DE:26:65:0A:1B:AD:2B:07:64:19:FF:06:E1:BB:19:3C:49:67:06:D0
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0C5E
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3iZlChutKwdkGf8G4bsZPElnBtA.roa
Signing time: Thu 15 Sep 2022 02:51:06 +0000
ROA not before: Thu 15 Sep 2022 02:51:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131618
IP address blocks: 103.135.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 15 02:51:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DE26650A1BAD2B076419FF06E1BB193C496706D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:0a:9c:9b:45:94:5b:11:94:11:73:58:cb:
cf:53:6c:28:e3:38:a8:6a:67:61:d0:e5:4e:04:ee:
f7:22:91:39:53:2b:a9:53:30:5a:56:e6:81:a9:04:
cf:66:a2:77:b4:8a:e9:12:3d:05:0b:a1:c4:16:ae:
bd:bd:cd:73:61:c1:ae:c8:b7:9d:02:f3:43:3c:37:
26:e2:82:30:8a:30:df:95:6f:a5:9f:b8:3d:9f:23:
e2:f8:30:4f:fa:16:db:fb:d5:ad:2a:38:d6:e4:cc:
20:4b:de:d6:92:f3:01:1b:55:ae:c1:3c:45:01:98:
cf:89:67:4b:57:d9:2d:87:17:ee:f7:17:a9:5c:62:
0c:cf:8e:29:b8:bb:b7:44:bf:8a:94:cb:96:53:2b:
7c:18:90:9d:95:7e:ae:c9:bc:e2:29:f6:4b:07:1b:
f6:ca:fb:01:ac:d8:9f:d1:3b:63:5a:b6:13:bd:8a:
30:6f:c2:23:22:f3:fa:1d:8e:bd:7d:4d:6a:32:20:
4f:8d:6a:e8:a3:b0:a1:89:72:e3:8e:39:92:e6:da:
ba:30:05:43:c1:f8:94:e9:44:51:9b:5f:5f:d4:d8:
74:32:29:ef:15:5b:33:c3:04:d2:75:14:09:61:b2:
14:8d:7f:30:8d:c5:32:5a:49:15:3d:7f:61:92:92:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:65:0A:1B:AD:2B:07:64:19:FF:06:E1:BB:19:3C:49:67:06:D0
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3iZlChutKwdkGf8G4bsZPElnBtA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:3c:4e:55:3e:e4:46:f3:18:97:4b:ee:b7:2d:68:b4:e8:2d:
ce:bd:98:3a:77:99:62:b1:e1:5d:5c:38:3e:03:ef:97:ef:34:
6b:b8:bb:54:7f:c0:a1:e5:7c:ce:a5:ae:12:84:df:10:f1:b6:
06:3c:37:76:44:fb:a1:23:a4:af:97:63:ca:5d:8e:9e:53:64:
57:61:8d:60:7c:03:1e:d2:5d:b6:77:a1:07:c2:9b:ce:6f:33:
8a:8d:d1:bd:b5:16:fd:12:8f:f0:0c:8b:47:38:01:2f:17:bc:
a7:57:c9:a5:53:61:a4:89:89:70:9c:30:70:8e:35:4b:02:85:
01:68:b0:8a:8e:b8:26:0b:86:02:0a:50:6b:fd:18:40:c3:a1:
57:4f:18:77:c8:b3:6e:b7:87:66:72:74:68:6c:34:c0:15:88:
9f:e0:45:06:aa:97:58:f3:92:24:9e:e1:36:3b:80:bf:15:2a:
8b:44:21:a6:aa:33:a5:6b:89:12:88:81:10:6b:da:3b:c7:7e:
64:6a:b2:f0:a1:f9:e1:37:27:72:24:f0:b7:5d:00:55:d5:bb:
22:30:23:53:60:15:39:78:9c:1a:18:64:c6:d2:4b:57:80:f1:
6e:4b:a8:63:31:82:20:46:fa:b6:79:d5:ad:71:12:76:b0:2b:
97:09:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:46 2023 by rpki-client on console-fra.rpki-client.org