Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/XojiK6REvvs-kyuaWWc5nT4FHIQ.roa
File: XojiK6REvvs-kyuaWWc5nT4FHIQ.roa (raw, json)
Hash identifier: UeYeO6DPP5k3ME1874Hro6m7emU1VHEwEYfC5783lNo=
Subject key identifier: 5E:88:E2:2B:A4:44:BE:FB:3E:93:2B:9A:59:67:39:9D:3E:05:1C:84
Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5
Certificate serial: F8
Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/XojiK6REvvs-kyuaWWc5nT4FHIQ.roa
Signing time: Wed 22 Feb 2023 06:53:56 +0000
ROA not before: Wed 22 Feb 2023 06:53:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38047
IP address blocks: 103.183.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5
Validity
Not Before: Feb 22 06:53:56 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5E88E22BA444BEFB3E932B9A5967399D3E051C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:64:e4:65:2e:a5:2d:d8:f7:51:57:f4:d7:
a4:da:1b:bf:4f:60:44:a4:70:a8:3e:a7:e3:c7:c5:
44:4b:92:65:57:ed:bf:6a:0a:a7:e4:a9:05:d6:34:
4b:e2:a0:79:51:fd:a2:f5:0d:e2:07:e3:e0:13:b0:
22:81:38:6b:3a:a2:51:13:14:8b:28:7c:c8:c0:be:
ca:dd:3e:a9:13:37:bf:d4:a0:46:31:67:dd:d7:32:
63:2a:3a:08:84:f6:24:fd:a2:fa:6f:fd:6a:84:e3:
17:d9:be:ea:2f:76:50:74:d3:15:a5:0d:f1:4b:1d:
4f:b2:23:05:56:f4:d1:69:99:8e:c5:e8:03:bf:26:
47:68:00:08:5f:76:dd:6f:d7:49:7e:dc:fd:09:7c:
2d:74:dd:a6:ad:5d:0c:c8:4c:85:cf:af:bd:62:5f:
9d:28:57:53:c5:2a:ea:bc:e5:a0:1f:7c:8d:2a:31:
fb:a5:d8:ea:a3:64:1f:22:b5:8d:81:03:3b:cb:31:
01:91:53:3a:79:f1:1c:ed:69:2e:f8:12:3f:51:cc:
87:b0:bb:01:4a:6d:25:b8:75:ca:55:4a:f9:54:4c:
aa:86:08:08:f3:aa:bb:59:f5:0b:64:af:5b:b3:24:
af:79:19:ff:51:49:57:12:b4:47:ca:14:e3:48:89:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:88:E2:2B:A4:44:BE:FB:3E:93:2B:9A:59:67:39:9D:3E:05:1C:84
X509v3 Authority Key Identifier:
keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/XojiK6REvvs-kyuaWWc5nT4FHIQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.79.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d8:a7:5d:08:8c:b8:a2:c1:1f:03:79:6b:cc:1f:85:bf:0a:
54:8a:05:2d:2a:81:0b:ab:e1:08:ed:39:67:a7:8a:22:d6:3e:
ef:4a:ab:11:04:09:bd:db:27:50:63:0f:4e:6d:82:cb:ad:7e:
b2:18:93:dc:bc:10:98:45:09:54:e8:f8:f3:1b:46:38:b2:c8:
62:68:11:d2:c2:85:b1:7e:e9:5b:5f:2c:d0:5f:90:25:df:57:
34:cd:3e:17:bc:22:ee:fa:dd:2d:93:de:c9:36:c5:9b:cb:8b:
73:47:cc:70:47:79:36:15:51:37:b2:37:23:2b:f4:ec:e1:5e:
dc:bb:23:da:2d:fd:66:1c:1d:e6:3c:a2:56:82:93:27:6c:96:
ff:08:ac:cf:54:2b:0c:f9:5d:61:2a:6a:a0:bc:6b:13:c3:ea:
3f:cc:95:4a:97:26:91:dd:90:cf:bc:e6:0d:0f:c3:ef:a3:cd:
32:01:41:a4:a4:12:6c:d6:ca:c6:81:3e:d9:bf:96:20:76:cc:
ee:4c:24:a9:5b:a9:3b:36:98:64:a4:8f:e8:87:d4:ea:a0:35:
ae:bb:75:17:b3:e9:e4:99:57:18:0a:4f:7d:7d:d9:40:3f:d4:
cc:df:6b:d8:88:fc:89:67:8b:53:05:8a:74:3d:02:4b:a0:a4:
9b:ef:1d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:15 2023 by rpki-client on console-fra.rpki-client.org