Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/EvK8WFciS7oVXc2muj-g0h2wpdA.roa
File: EvK8WFciS7oVXc2muj-g0h2wpdA.roa (raw, json)
Hash identifier: hOxquJiDO/1UpF3XOmZtSj3VssS64AVfrxIK2RY9nCQ=
Subject key identifier: 12:F2:BC:58:57:22:4B:BA:15:5D:CD:A6:BA:3F:A0:D2:1D:B0:A5:D0
Certificate issuer: /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial: 0A10
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/EvK8WFciS7oVXc2muj-g0h2wpdA.roa
Signing time: Thu 15 Sep 2022 02:49:02 +0000
ROA not before: Thu 15 Sep 2022 02:49:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 147035
IP address blocks: 103.122.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2576 (0xa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Validity
Not Before: Sep 15 02:49:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=12F2BC5857224BBA155DCDA6BA3FA0D21DB0A5D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f8:81:7d:10:23:2d:71:43:d7:62:13:01:56:
f0:49:d0:82:84:1a:8a:67:33:94:d2:95:a4:58:51:
84:9a:c7:7a:84:a6:96:44:b9:c1:82:f7:67:71:00:
14:c8:3c:a0:57:47:44:df:dc:fa:ff:0d:5e:e4:0d:
f9:5d:77:5c:23:b7:ac:67:64:54:36:da:b0:76:5d:
c9:b9:a0:df:59:02:5a:38:70:b0:c3:10:fb:30:c9:
2c:2d:8a:e5:80:51:f9:86:5e:96:a9:27:5e:a0:18:
70:7a:eb:7a:0f:6d:26:4f:c5:75:8a:6f:be:41:91:
5a:d0:67:d8:24:a7:da:4c:5e:e2:6b:09:7b:f1:69:
fc:69:ed:f1:f8:9e:14:4e:d4:26:75:0c:0f:67:8a:
94:33:b5:00:7e:e7:ef:0a:17:20:58:27:78:fe:7a:
e8:d9:ad:5e:02:01:5f:13:88:c9:6f:87:a4:71:46:
fa:3b:a9:ac:82:36:cc:49:31:2a:2c:9b:7f:d4:72:
3b:c5:44:8a:c0:7a:62:19:d9:b5:8d:92:70:e2:6e:
97:f4:fb:eb:a0:39:57:f0:09:a4:3a:ff:85:46:ce:
b6:0e:56:e2:4b:7d:28:86:76:eb:f1:5f:92:26:f0:
6a:92:3f:76:94:15:86:07:21:0a:f9:d5:41:17:6b:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:BC:58:57:22:4B:BA:15:5D:CD:A6:BA:3F:A0:D2:1D:B0:A5:D0
X509v3 Authority Key Identifier:
keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/EvK8WFciS7oVXc2muj-g0h2wpdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.116.0/22
Signature Algorithm: sha256WithRSAEncryption
48:ba:77:e6:d5:5a:8e:a1:ee:34:44:9c:5a:11:58:b1:17:08:
23:d1:de:3e:fc:82:1c:6c:1d:1f:62:bd:f7:fa:7d:f8:67:e1:
9f:3c:04:99:d8:e4:8e:07:8c:bc:00:0a:3e:97:21:fe:88:30:
ed:ec:69:83:7e:fd:d3:d3:82:26:e5:bb:80:23:a8:34:00:53:
9b:02:4e:ec:d2:ec:96:a3:20:54:9a:70:a7:5d:c3:83:ea:5d:
e1:1e:a4:c8:2c:41:07:91:98:cd:02:d8:6f:07:91:fd:80:de:
15:98:bd:d3:45:ba:84:58:ed:c7:fb:51:19:62:aa:d9:2d:b7:
b1:af:82:75:d5:84:10:7f:8f:4a:55:de:ae:b0:97:fa:b9:ac:
cb:36:cc:11:a7:c2:c7:da:43:12:90:b4:56:c9:c2:85:d0:cd:
25:09:e0:fd:2f:05:59:52:9f:39:65:6c:f1:89:86:01:12:5a:
68:b9:8a:c0:17:c8:ac:ba:3e:a5:14:89:a1:18:02:a9:b2:8e:
87:19:2a:31:53:4b:9e:ab:8a:18:ba:ba:51:12:50:e3:41:8f:
43:99:5a:48:a6:6b:a4:15:ee:df:97:0a:66:da:86:30:c4:61:
f6:2e:2a:d8:97:8c:e5:3c:e4:4a:00:d8:85:a7:0e:11:79:22:
c6:6c:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:13 2023 by rpki-client on console-fra.rpki-client.org