Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/X2caHsXUuG1TLAC1avISgVPEfwQ.roa
File: X2caHsXUuG1TLAC1avISgVPEfwQ.roa (raw, json)
Hash identifier: u3yO0fpmIFT0Hkd81Db29IWwqpNMGmyDOAtFstK0+4Y=
Subject key identifier: 5F:67:1A:1E:C5:D4:B8:6D:53:2C:00:B5:6A:F2:12:81:53:C4:7F:04
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0A00
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/X2caHsXUuG1TLAC1avISgVPEfwQ.roa
Signing time: Thu 15 Sep 2022 02:49:19 +0000
ROA not before: Thu 15 Sep 2022 02:49:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131618
IP address blocks: 103.104.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560 (0xa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Sep 15 02:49:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5F671A1EC5D4B86D532C00B56AF2128153C47F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:60:df:93:74:43:9e:7e:2f:0f:57:49:1e:
1c:97:fa:58:fe:1d:61:50:05:b7:d6:1c:3d:e4:4a:
64:45:05:76:60:c9:32:c6:09:60:a0:fa:5b:a9:e5:
15:d0:08:6e:f7:d5:dd:0a:f4:31:42:1d:44:7e:46:
f8:c3:26:40:eb:9b:47:69:55:10:88:34:13:1d:8b:
f0:db:2b:44:94:84:b5:e2:26:c6:1f:46:51:bd:7a:
78:2f:d1:7e:e6:0b:9c:b7:43:49:12:2b:05:70:7b:
f5:81:b8:3b:b9:31:c3:ad:4d:51:80:2b:74:72:09:
9a:16:a6:97:dc:96:f3:5c:8b:7d:34:01:02:58:cf:
53:63:73:f9:f8:b3:a2:ce:97:7c:12:b8:c1:ae:1a:
17:1e:9d:d8:0e:79:b6:02:d0:c2:27:e9:26:c5:7a:
ca:8b:46:9d:96:73:0d:c9:06:b8:af:63:e1:12:06:
03:4d:7b:19:74:89:13:c5:3f:c4:7a:43:b4:48:99:
d6:4d:55:ad:bf:f3:e2:3e:56:d7:18:24:dd:1e:53:
f7:9b:bb:90:64:2a:5f:14:93:69:d3:58:5e:ba:f2:
44:ee:56:83:21:45:28:42:60:0b:b4:0c:03:ad:c1:
1f:c3:75:dc:82:ed:bd:ee:dc:0a:16:6e:cf:e0:e2:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:1A:1E:C5:D4:B8:6D:53:2C:00:B5:6A:F2:12:81:53:C4:7F:04
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/X2caHsXUuG1TLAC1avISgVPEfwQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.151.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f3:00:10:62:4e:01:f5:bc:fe:d0:b9:c1:c3:2a:66:f1:62:
83:76:20:78:f3:71:57:b3:69:69:49:3e:a2:ff:68:94:36:fe:
82:b1:38:a5:cb:1c:f0:76:73:31:a4:5f:9a:5b:b0:e6:04:2a:
5a:ae:53:af:d4:20:0d:a3:11:95:71:98:07:98:99:a9:4a:73:
7a:44:9b:85:d9:20:c2:27:cd:05:64:5a:04:d0:b2:01:25:cb:
a8:91:0d:27:04:c6:8c:28:5a:56:b5:46:e1:d8:21:41:b3:21:
38:8a:d1:49:3c:9a:35:c1:07:ed:ef:52:1c:de:02:39:3f:ca:
6b:db:e4:5a:6a:09:7d:c8:ba:be:6f:b7:0d:49:fc:42:f6:c8:
c9:b1:74:a4:73:fe:87:0b:14:0d:fe:a5:82:84:2f:03:20:f6:
ba:4b:10:df:10:24:c7:c4:45:05:a4:57:8f:63:66:6c:66:5e:
56:b6:b5:88:28:24:cd:dc:79:7e:1d:b6:2d:9f:14:3d:ec:da:
17:7e:af:a0:86:82:d6:f8:0c:0f:3e:59:59:68:39:b6:1e:3c:
86:30:eb:cc:0c:d9:1d:79:41:ee:cd:9a:fd:b7:4a:22:3c:34:
9f:49:5d:82:90:c8:0e:71:6a:59:dc:41:1f:78:0e:5c:1a:ea:
a2:5c:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:14 2023 by rpki-client on console-fra.rpki-client.org