Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/rgNo5nyiYaW9u3rISf4MvzV-q3o.roa
File: rgNo5nyiYaW9u3rISf4MvzV-q3o.roa (raw, json)
Hash identifier: MfgmiKowu7h+FWKYd3o3Xq6hZOg3yDoMmV9dow6qtEo=
Subject key identifier: AE:03:68:E6:7C:A2:61:A5:BD:BB:7A:C8:49:FE:0C:BF:35:7E:AB:7A
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0A00
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/rgNo5nyiYaW9u3rISf4MvzV-q3o.roa
Signing time: Thu 15 Sep 2022 02:49:18 +0000
ROA not before: Thu 15 Sep 2022 02:49:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 135293
IP address blocks: 103.104.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560 (0xa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Sep 15 02:49:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AE0368E67CA261A5BDBB7AC849FE0CBF357EAB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:bc:66:14:8b:70:ef:be:e7:cf:73:8a:31:
4d:3e:5c:9a:cd:3d:59:aa:02:ef:cc:22:f7:44:b0:
b2:bb:1c:9d:3c:17:5f:41:4a:f9:5a:d8:78:3e:a2:
9c:f7:de:9f:d6:9b:ee:bd:83:27:18:ae:30:b1:b5:
91:a7:c1:f7:34:bd:7e:6d:e2:99:aa:53:5f:f9:e9:
b8:1a:e7:38:40:c1:39:62:6f:b3:b3:2e:d1:ce:cf:
16:4e:e8:c8:69:26:1a:ee:29:66:a8:8a:41:e0:d9:
79:9d:54:84:7a:dc:4e:e2:3c:75:9a:75:6a:bc:f1:
c2:92:08:74:66:1f:2b:87:c2:9f:80:fe:23:71:64:
22:41:b0:40:2d:21:33:f4:6d:d8:db:de:90:31:e7:
41:1f:ce:a4:d3:8a:55:5d:34:23:08:bd:d1:86:73:
f5:b3:21:91:7f:ff:9b:90:09:67:20:d0:51:74:12:
71:37:2c:22:e9:2a:26:b8:9e:37:70:45:b5:7e:03:
df:fe:4d:51:46:0c:b5:f1:78:da:65:00:74:6b:09:
f6:15:a6:93:49:52:7a:9b:e8:d5:70:ae:d5:d9:d6:
02:42:ce:6e:29:a4:24:cc:cf:fc:fe:aa:bb:90:46:
82:57:63:66:c0:e8:da:f0:77:08:96:05:53:06:60:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:68:E6:7C:A2:61:A5:BD:BB:7A:C8:49:FE:0C:BF:35:7E:AB:7A
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/rgNo5nyiYaW9u3rISf4MvzV-q3o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.150.0/24
Signature Algorithm: sha256WithRSAEncryption
db:a9:d1:29:ca:b5:dc:28:11:24:fd:76:df:67:36:a7:36:ba:
c9:6f:85:51:ad:80:12:36:70:3b:2b:50:34:43:da:91:4d:63:
2b:e1:a7:7f:e2:06:22:7f:40:37:2e:7d:8a:89:a0:c6:43:ba:
10:1a:93:1c:c9:5f:a6:6f:8d:c2:d4:94:e6:f7:bc:d0:63:8d:
47:96:52:54:30:17:5d:22:33:a3:36:b0:a9:64:42:49:16:b2:
df:ac:7f:09:18:7d:70:72:67:8e:44:59:33:a0:e0:01:6d:41:
fc:16:a5:f2:60:11:87:eb:39:d8:6a:53:64:ce:1d:b8:4a:f0:
a6:14:9b:19:3c:8c:10:fe:bb:07:52:1b:cf:2c:6f:76:4b:f9:
54:65:2e:90:bf:7a:f0:63:ea:a1:0a:87:68:2a:17:e3:d1:07:
ed:10:99:88:59:d0:40:80:32:0e:89:d3:de:2d:de:8c:48:99:
a7:55:dc:0e:c9:b3:69:37:c6:6b:46:94:7f:6b:94:04:69:e4:
2e:de:70:50:c8:27:37:c1:0d:86:8e:cf:ed:8a:b8:60:91:42:
0e:55:70:9e:85:20:f2:1f:0b:8a:ff:24:f6:65:be:63:61:4e:
99:d7:17:25:4d:24:89:70:93:81:a5:a0:a9:b6:c1:c4:89:da:
ec:9a:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:36 2023 by rpki-client on console-ams.rpki-client.org