Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CWTW/xv5oJVDUJsneEmt78oA1szhG9yc.roa
File: xv5oJVDUJsneEmt78oA1szhG9yc.roa (raw, json)
Hash identifier: GDl1HBhmVhoj9Xo1MYDuhdiMs4YZh7iRwEE6KYpPa0o=
Subject key identifier: C6:FE:68:25:50:D4:26:C9:DE:12:6B:7B:F2:80:35:B3:38:46:F7:27
Certificate issuer: /CN=996D67023ED27754ACB1B568433D4376C88200F5
Certificate serial: 0176
Authority key identifier: 99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/xv5oJVDUJsneEmt78oA1szhG9yc.roa
Signing time: Thu 15 Sep 2022 02:49:12 +0000
ROA not before: Thu 15 Sep 2022 02:49:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131646
IP address blocks: 103.161.78.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996D67023ED27754ACB1B568433D4376C88200F5
Validity
Not Before: Sep 15 02:49:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C6FE682550D426C9DE126B7BF28035B33846F727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:59:a6:11:98:e3:21:80:b8:84:e7:8d:44:
1c:d7:c3:05:17:a1:34:8e:c3:c6:30:8a:d4:24:23:
da:06:40:0d:5e:4d:45:92:bf:d4:99:6d:fe:e1:81:
d6:1b:cd:c6:6f:c0:70:c7:1e:0e:c5:50:67:e4:97:
1e:b5:d9:0f:95:63:e3:84:9b:ad:89:bb:4e:80:a5:
d5:18:30:99:ec:ef:02:82:96:a7:4f:19:ed:e0:1a:
ab:ac:1a:1a:47:a1:1b:fb:45:ae:52:5c:fd:fb:d1:
1d:37:c9:5b:34:95:e1:0a:f6:ed:06:c0:32:fd:90:
9b:72:e4:fd:c7:4d:1e:dd:2c:e3:ae:6e:14:67:1b:
b4:02:a6:bc:dc:b9:25:ce:ae:0f:a8:0d:71:ce:2d:
5f:60:8e:57:04:03:bc:7b:3e:97:05:ba:e9:50:40:
20:df:15:5e:38:a1:c9:d2:b3:26:43:08:1f:bd:96:
49:e7:af:a0:a8:29:7e:d4:55:46:17:3f:bf:8e:30:
f1:48:07:f8:e0:bd:07:c6:2c:ed:32:37:6e:d4:f3:
3b:1f:38:92:83:43:4e:f1:b4:2c:f9:61:41:ad:90:
1d:ab:c0:05:fe:a8:bb:69:3e:f6:48:d4:25:cc:f9:
43:bf:1a:b0:5f:c3:c6:5c:40:0f:9b:fb:2c:d1:32:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:68:25:50:D4:26:C9:DE:12:6B:7B:F2:80:35:B3:38:46:F7:27
X509v3 Authority Key Identifier:
keyid:99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/xv5oJVDUJsneEmt78oA1szhG9yc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:d7:87:92:ff:e6:57:ce:ac:ee:fc:b8:d7:c6:ae:86:af:ee:
b8:8a:49:70:1f:bf:f4:31:a9:bd:73:44:f9:65:a2:81:a6:74:
0e:33:5d:3f:05:10:1c:d3:dd:3d:6c:fa:1d:b7:89:ad:d3:e7:
f0:fd:e1:bd:87:ab:1a:e9:59:da:17:e1:5c:db:eb:7a:64:1c:
70:b9:d6:78:6c:74:e7:ff:37:93:b2:ee:ee:b8:cb:90:63:47:
38:bf:11:86:5e:57:22:07:85:17:1d:46:53:59:bc:2c:96:ad:
f6:f1:63:d3:6c:e7:2f:62:0e:97:11:07:ab:97:4d:bc:4d:97:
71:f6:74:1b:8d:02:54:c2:91:1e:11:b9:91:4c:e0:dd:eb:a8:
1a:42:57:ea:a8:3a:ed:ac:fe:f4:1a:c2:bd:fa:6d:4d:f9:6d:
f5:60:2b:4e:b3:fd:8d:c4:ef:eb:37:a2:e2:25:20:42:62:54:
7f:7a:fb:79:5e:b5:20:2e:66:43:6f:3b:6b:c8:3f:ed:0d:e0:
21:b6:33:d5:7f:a3:e9:84:f4:da:b7:2c:36:02:44:58:70:1d:
57:7b:83:4e:59:9c:b9:90:ff:d4:73:b4:25:24:36:09:a4:04:
bd:b7:3d:98:51:d6:59:ea:c1:f1:65:b6:20:fc:5a:69:4a:62:
03:65:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:15 2023 by rpki-client on console-fra.rpki-client.org