Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/eYvzpPf79pEIpVeDagVM9iXXNAQ.roa
File: eYvzpPf79pEIpVeDagVM9iXXNAQ.roa (raw, json)
Hash identifier: /w1QjKBPvc3tv81hM7PItjWmJ4F1YHml3Uw/f1AhHDM=
Subject key identifier: 79:8B:F3:A4:F7:FB:F6:91:08:A5:57:83:6A:05:4C:F6:25:D7:34:04
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0C5E
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/eYvzpPf79pEIpVeDagVM9iXXNAQ.roa
Signing time: Thu 15 Sep 2022 02:51:06 +0000
ROA not before: Thu 15 Sep 2022 02:51:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131618
IP address blocks: 103.135.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 15 02:51:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=798BF3A4F7FBF69108A557836A054CF625D73404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:83:d6:77:66:10:67:b8:78:fa:24:da:1f:
c2:87:2e:2d:a6:06:69:61:dd:43:b6:9c:dc:bd:87:
6a:a2:bf:d0:a9:57:f5:2f:58:a5:f0:ef:b3:12:cc:
40:a2:39:f5:5c:f2:0d:70:26:0e:7f:d5:72:fc:51:
ab:b0:5a:aa:96:65:b9:4c:48:f9:ab:28:d8:31:1b:
f1:a4:5f:a8:e9:58:5f:99:8f:40:29:dc:18:e1:69:
b7:12:b1:b6:39:05:d0:96:11:33:e7:a9:37:a4:e8:
8b:d6:68:a9:d0:e9:b6:89:65:63:5c:70:d1:cc:b6:
ed:16:fc:22:e3:26:df:6e:89:56:8d:2d:fd:f7:97:
05:14:7d:1d:cc:eb:9e:03:44:76:19:5e:2f:e5:c7:
c2:4c:c7:42:e7:64:bd:94:b1:03:71:73:18:76:d3:
b3:87:02:9c:b9:41:03:08:a1:2f:5f:d6:ca:f0:9f:
43:24:d7:3d:05:18:08:17:a2:05:67:77:8a:f0:12:
ec:85:27:91:de:8f:a5:6b:29:36:23:92:96:8b:cb:
1d:bb:71:42:fa:24:be:70:70:cb:73:3e:63:23:42:
62:72:0b:8b:53:d7:24:50:82:f6:3b:48:37:94:0f:
7a:f4:e1:85:05:15:76:de:53:b2:81:ea:7b:12:60:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:F3:A4:F7:FB:F6:91:08:A5:57:83:6A:05:4C:F6:25:D7:34:04
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/eYvzpPf79pEIpVeDagVM9iXXNAQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.117.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b7:f4:ab:f9:57:15:15:b7:12:dd:c3:24:ae:29:9a:6f:bb:
ad:83:14:90:0d:74:46:e0:22:b4:4e:d2:0d:3e:09:39:6d:c0:
d8:4c:06:6a:db:aa:5a:ae:87:69:8d:a8:8c:cf:40:b1:47:8f:
0f:10:f8:91:6c:f8:ce:18:a9:82:cf:c4:39:61:69:31:56:45:
7f:85:2b:8d:60:0f:9f:e1:c6:4b:db:8e:e0:c0:f0:87:ee:6a:
09:63:b9:fe:3d:ba:8d:d1:a6:24:f2:75:e4:82:73:57:51:31:
66:fc:83:a8:23:05:7e:76:5c:a4:44:89:68:4e:27:37:18:48:
32:18:e7:7f:68:39:9a:b5:b2:be:5e:3f:84:3a:f2:b4:a8:e3:
e3:4d:71:31:6f:2f:7b:43:07:85:59:c6:69:8c:7d:2a:d3:08:
3f:57:22:35:bc:51:d3:77:20:db:79:6e:74:b4:e9:e8:d6:8e:
de:06:d2:c7:54:e2:11:f0:da:fa:28:4f:6c:0a:25:1a:35:ea:
7c:23:12:b4:72:00:a0:41:75:6d:de:23:f4:47:90:6a:6a:84:
37:ed:9f:fb:c7:48:6f:28:5e:ad:d4:89:85:34:3e:af:ce:e8:
b0:38:17:88:85:56:39:eb:82:9f:f9:1c:26:b0:9a:c5:ee:fa:
f5:f2:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:36 2023 by rpki-client on console-ams.rpki-client.org