Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/c-h1kOL1zuvcAdvsdoN68LWMICQ.roa
File: c-h1kOL1zuvcAdvsdoN68LWMICQ.roa (raw, json)
Hash identifier: cTKFXNYJzhl0+IGyRhXAExsm923+KmoOyv4+yx79eOU=
Subject key identifier: 73:E8:75:90:E2:F5:CE:EB:DC:01:DB:EC:76:83:7A:F0:B5:8C:20:24
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 07CB
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/c-h1kOL1zuvcAdvsdoN68LWMICQ.roa
Signing time: Thu 15 Sep 2022 02:38:32 +0000
ROA not before: Thu 15 Sep 2022 02:38:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131671
IP address blocks: 103.146.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Sep 15 02:38:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=73E87590E2F5CEEBDC01DBEC76837AF0B58C2024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:b2:8a:b6:4e:34:31:89:ea:cc:c8:17:d7:
c4:15:fa:f1:cb:e1:e9:71:16:bf:8e:f0:f0:c3:0b:
bc:b9:b1:a5:c0:a6:31:37:3f:f2:c7:24:49:88:9c:
cb:09:6e:83:72:a4:7a:04:9b:df:96:0b:ba:16:54:
e8:cd:93:0d:3c:d6:d0:20:ac:42:b8:97:9c:a8:82:
3a:23:d3:28:f4:a5:05:be:7f:3d:7a:cf:45:de:d6:
ee:d9:19:2e:0d:f7:ea:44:3e:15:44:90:9d:be:9b:
84:3f:7b:fc:d7:1b:34:72:84:94:40:d9:c0:cb:3e:
22:bb:e8:87:cc:5c:fa:c0:4a:e4:73:81:03:a6:21:
53:56:00:bb:4b:35:85:f1:4d:9d:9d:db:ca:45:d3:
40:49:bc:66:f4:0e:0f:a9:47:f9:9b:f2:2d:57:d3:
5d:ae:47:29:e8:cd:24:e6:c2:ab:6b:50:46:69:36:
31:a5:5f:f2:82:ba:13:d5:e3:cc:13:b4:d4:c1:32:
2f:af:83:c7:6e:91:b0:7a:88:ff:b1:b8:7e:35:97:
8d:05:33:b8:12:b9:f4:20:c2:47:a8:d0:27:6f:5d:
1d:9d:1a:74:d8:98:e8:b7:1b:30:9d:74:b1:69:85:
67:fb:aa:d2:c7:7a:9c:04:05:e7:86:5c:2c:66:50:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E8:75:90:E2:F5:CE:EB:DC:01:DB:EC:76:83:7A:F0:B5:8C:20:24
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/c-h1kOL1zuvcAdvsdoN68LWMICQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.212.0/24
Signature Algorithm: sha256WithRSAEncryption
16:50:ed:c3:04:49:6c:4c:1c:4e:94:a2:19:4a:0c:e5:94:0e:
a5:36:05:be:08:80:79:2e:a3:f7:5a:60:09:3b:67:0b:16:09:
4d:77:5d:72:de:a3:76:69:26:ae:66:43:18:62:ca:af:82:58:
e8:ae:c0:47:36:b1:97:ed:4c:11:6a:74:5c:78:c4:ca:f0:1f:
90:51:86:34:10:03:8f:a4:61:28:8d:a0:e5:62:8d:8c:37:33:
13:fc:6a:8d:3e:1d:2f:cb:ae:a2:46:3e:e1:62:93:41:3d:ff:
d4:ea:b7:82:3c:fc:ab:f4:2d:c9:f4:3c:86:73:3f:87:7c:91:
c1:1a:55:f0:03:df:3c:83:bd:d4:73:15:18:59:d6:00:c9:8e:
c9:93:c6:5f:64:d1:e2:94:d1:d5:16:6b:c3:53:73:1f:26:02:
4c:d6:ff:13:22:8f:49:a9:1e:b2:f3:78:ce:ca:34:89:cb:29:
18:38:ce:48:5f:d2:2a:08:ca:23:55:47:6b:9a:b9:65:16:8c:
1d:0a:a8:e1:ab:db:3f:b7:a5:6b:c3:fc:fc:95:5a:6f:f9:9c:
fa:9b:9d:da:45:f6:32:47:14:be:52:87:a1:99:0c:a8:52:72:
8e:29:50:c5:61:a7:06:b4:fe:44:7c:2c:97:a5:1a:96:67:da:
66:2b:42:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org