Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CWTW/BBbWwsho_oyeqsl-ILYn4aCE1Zw.roa
File: BBbWwsho_oyeqsl-ILYn4aCE1Zw.roa (raw, json)
Hash identifier: anailUfoc98vaffJJ3KWPU0n7JwoId1oCOpUB9qorOw=
Subject key identifier: 04:16:D6:C2:C8:68:FE:8C:9E:AA:C9:7E:20:B6:27:E1:A0:84:D5:9C
Certificate issuer: /CN=996D67023ED27754ACB1B568433D4376C88200F5
Certificate serial: 0176
Authority key identifier: 99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/BBbWwsho_oyeqsl-ILYn4aCE1Zw.roa
Signing time: Thu 15 Sep 2022 02:49:12 +0000
ROA not before: Thu 15 Sep 2022 02:49:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131273
IP address blocks: 103.161.78.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996D67023ED27754ACB1B568433D4376C88200F5
Validity
Not Before: Sep 15 02:49:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0416D6C2C868FE8C9EAAC97E20B627E1A084D59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:cc:2a:13:cb:3a:4b:01:0e:51:0d:1f:17:
96:75:38:0e:bd:1d:24:88:6f:7c:dd:e0:e8:53:ae:
8a:e1:c6:ea:ab:c9:bf:a8:f2:d7:09:b3:f9:5c:a1:
6b:2f:1c:d6:45:63:eb:88:3f:3d:9f:cc:fc:ca:66:
f4:35:85:3a:4a:43:4f:fa:e2:37:4e:e4:cb:02:17:
db:82:0c:31:75:4f:bb:0c:79:4d:2f:67:1e:c5:1e:
f7:cd:c6:3e:4f:59:99:4d:72:68:d7:04:65:a1:5b:
98:2b:23:77:d9:06:36:bf:a0:87:c6:ab:c1:b7:54:
07:9d:8b:d5:9b:b2:d5:a5:d8:eb:09:28:3d:43:28:
7f:d5:6a:07:b6:29:a2:26:9a:7f:9a:6a:dc:b0:26:
28:48:09:da:20:0f:b0:8c:e1:94:69:80:2d:f3:3b:
52:28:ce:f7:b9:8d:e7:b5:0f:3a:94:80:5a:fc:71:
62:29:bb:1d:c0:3c:96:2a:bd:12:a3:8f:82:cb:91:
d9:c1:a6:67:43:74:69:e0:d6:6c:ce:30:a3:bb:a0:
b6:79:2d:7e:5d:59:4b:2d:40:40:53:49:56:cc:6c:
2e:24:8d:c0:f7:55:85:be:4a:4d:f1:47:1f:23:e3:
21:d6:fc:d6:c7:0e:14:04:71:4a:e3:3e:c8:c2:60:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:D6:C2:C8:68:FE:8C:9E:AA:C9:7E:20:B6:27:E1:A0:84:D5:9C
X509v3 Authority Key Identifier:
keyid:99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/BBbWwsho_oyeqsl-ILYn4aCE1Zw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.78.0/23
Signature Algorithm: sha256WithRSAEncryption
94:34:bd:45:09:48:1d:e0:37:27:e0:b1:98:b2:51:ba:30:8d:
1b:e5:40:f8:76:31:3e:e2:cb:75:27:68:e8:26:02:37:b6:df:
62:78:90:74:0c:6c:fa:67:bc:e0:d0:5e:b2:18:44:13:48:13:
0d:e3:12:28:1d:7f:dc:51:ac:2e:4c:b9:fb:3d:66:d7:2f:04:
85:0e:2c:a0:95:ee:c5:96:a0:9a:e1:c8:6d:aa:4e:cf:fd:d0:
fb:26:56:8d:8d:ba:82:8d:a5:2a:4d:0c:eb:08:c5:d1:77:96:
44:e8:24:de:bc:3e:4b:ff:28:e3:61:bf:a1:25:30:18:e2:96:
a6:96:ea:bc:a4:42:3d:3a:f1:0e:b8:71:01:a9:79:7f:a7:de:
8f:3b:eb:ac:fe:85:21:93:a7:0a:dc:75:0f:95:a6:60:bf:b0:
1c:fa:8f:55:d6:10:7d:d5:07:9c:48:e9:95:52:39:3d:19:17:
ba:21:e1:2a:66:75:f9:70:1d:72:59:83:23:6f:8d:be:cb:83:
e2:fd:cf:3a:22:f6:f3:8b:51:e7:0c:f7:de:00:17:fc:3d:e9:
82:82:5b:2e:06:c9:ed:10:51:8f:08:2c:a8:d0:fc:e8:92:0f:
b2:f7:2a:d4:61:70:2c:d2:45:35:32:bc:b1:fb:36:8f:1c:d4:
30:17:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:15 2023 by rpki-client on console-fra.rpki-client.org