Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/47mSd90U4Ng19nkA6nyWta2qUrQ.roa
File: 47mSd90U4Ng19nkA6nyWta2qUrQ.roa (raw, json)
Hash identifier: 58LDh9sFjH+VjMXhBeQJWIMo/Xg+j+m9czMhb1ZtxQQ=
Subject key identifier: E3:B9:92:77:DD:14:E0:D8:35:F6:79:00:EA:7C:96:B5:AD:AA:52:B4
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0A00
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/47mSd90U4Ng19nkA6nyWta2qUrQ.roa
Signing time: Thu 15 Sep 2022 02:49:19 +0000
ROA not before: Thu 15 Sep 2022 02:49:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 135293
IP address blocks: 103.104.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560 (0xa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Sep 15 02:49:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E3B99277DD14E0D835F67900EA7C96B5ADAA52B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:be:e4:b4:13:8b:03:53:3c:96:35:50:6b:
a0:4b:bd:44:ed:aa:9f:95:78:31:76:4d:bc:65:ea:
48:b8:31:aa:76:f2:0c:83:1b:d7:94:53:f1:98:5e:
52:94:0a:70:53:49:6f:42:51:22:67:eb:aa:27:95:
76:a6:2d:44:cf:54:a8:af:7a:e8:e8:bf:e2:1c:3c:
3e:bd:1c:51:7b:df:b3:99:04:5c:e1:6b:ed:05:1e:
30:bb:e6:82:56:0d:b4:8b:f1:ad:fc:1d:fe:0d:96:
61:57:f9:5a:87:20:13:f0:02:40:11:5d:f6:1d:e2:
46:75:ad:eb:67:7c:b8:48:af:e4:88:5c:0b:0f:bf:
12:a9:18:59:67:fb:ce:78:1e:60:0e:59:5f:12:57:
6d:64:65:55:f9:23:f4:70:f9:12:91:f0:69:88:fb:
a0:51:80:76:35:2b:78:41:cc:0e:e9:cd:ae:2d:a9:
10:5c:62:9d:a9:76:de:6a:1b:60:27:9d:18:5d:14:
1f:c7:e4:6d:9b:aa:55:86:fb:74:bc:a2:06:a6:fe:
e1:89:8e:e1:2d:14:e0:84:f2:23:d7:8e:a1:e0:f0:
0b:37:3f:e1:8b:b4:6a:ea:03:b8:6d:3b:d6:50:66:
b6:ba:59:18:d7:fd:42:58:23:86:9e:9a:3c:23:d0:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B9:92:77:DD:14:E0:D8:35:F6:79:00:EA:7C:96:B5:AD:AA:52:B4
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/47mSd90U4Ng19nkA6nyWta2qUrQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6f:59:24:df:7e:06:b6:0a:c5:cb:53:98:1e:c6:5e:d9:b5:
d6:13:7c:44:40:92:0f:b8:fd:a7:17:7d:ee:a4:21:92:b5:c0:
c7:6f:c3:08:b5:f6:bf:23:1e:ca:4b:2f:3d:5c:0f:69:81:29:
b8:c9:56:96:b6:40:39:26:fa:4a:97:65:54:cc:8a:0a:2e:30:
83:69:ab:92:67:ee:76:ec:cc:1e:f1:a8:42:11:7f:b2:13:d5:
6b:56:b0:5e:f9:e1:78:41:dc:79:52:e8:8d:72:7a:52:58:4f:
87:0a:b2:30:4a:54:c1:0c:b7:43:ca:1a:e6:64:a0:01:65:c6:
7b:82:dd:d3:ff:30:96:7b:de:27:f0:97:31:f6:dc:4f:31:9b:
8d:72:3c:46:55:48:76:6c:97:54:7a:40:79:73:db:d4:5d:4b:
76:0a:b6:8e:7f:1c:3b:36:09:80:07:2b:16:d0:64:82:76:de:
9c:1e:1d:09:48:d6:b6:27:af:55:aa:6f:65:eb:77:06:5f:27:
f9:4c:7b:42:a6:09:1c:8e:b9:f9:d0:59:8d:fa:00:21:51:6a:
d2:dd:44:b3:e7:10:3c:1b:ab:90:e4:92:5a:83:b8:27:38:f9:
d6:73:e1:38:f3:2f:94:b1:6d:42:7e:c2:9a:ba:55:35:46:28:
87:37:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:14 2023 by rpki-client on console-fra.rpki-client.org