Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xuh_hgDv0ROGqjg9PypOwYLYweA.roa
File: xuh_hgDv0ROGqjg9PypOwYLYweA.roa (raw, json)
Hash identifier: 6anqPvNdl0TF2ku8DudJinb4m7flKNGudiIqFEp+cyY=
Subject key identifier: C6:E8:7F:86:00:EF:D1:13:86:AA:38:3D:3F:2A:4E:C1:82:D8:C1:E0
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 07CB
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xuh_hgDv0ROGqjg9PypOwYLYweA.roa
Signing time: Thu 15 Sep 2022 02:38:31 +0000
ROA not before: Thu 15 Sep 2022 02:38:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131671
IP address blocks: 103.146.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Sep 15 02:38:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C6E87F8600EFD11386AA383D3F2A4EC182D8C1E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:b5:0b:29:17:c7:ff:11:9f:e6:4d:79:71:
27:cb:b3:52:d7:34:e3:34:0d:cb:33:39:df:a7:82:
32:87:c9:86:de:0a:3a:7b:88:1f:ef:b7:8c:da:9b:
43:0c:50:ff:2e:e5:a2:9c:8f:02:6b:c3:09:7f:04:
cf:99:c6:90:df:7c:12:4f:77:88:64:a8:94:ba:dc:
ff:79:cb:18:2c:1c:95:af:e5:b2:90:eb:7e:5f:ed:
50:3f:5a:dc:d9:0a:0f:66:40:38:2e:81:a4:7e:4b:
ae:32:fb:a7:16:99:1f:81:15:cb:8e:1d:a2:ff:ca:
66:e7:38:54:6c:cf:7d:da:ce:1f:c8:06:1d:fb:e3:
1c:5c:a3:55:91:bd:28:81:6a:d3:3f:14:f4:25:69:
0a:99:d9:ce:b0:e5:26:63:ec:66:c1:0a:77:82:61:
c9:39:cb:4c:7e:42:67:f7:00:0a:55:f3:e7:ee:6b:
bd:94:e5:0c:62:09:3d:50:e8:48:63:06:b5:dd:8e:
b9:7f:e9:85:1b:e9:76:69:01:03:fe:ed:b3:7a:09:
38:f9:7b:9c:2a:a5:16:cc:70:12:3e:c6:1c:d5:92:
f0:51:1f:8b:c4:42:88:d7:95:63:c9:ff:f0:b1:46:
6f:9a:84:d4:bb:5c:d5:1f:1c:9e:94:f8:46:77:b3:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:7F:86:00:EF:D1:13:86:AA:38:3D:3F:2A:4E:C1:82:D8:C1:E0
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xuh_hgDv0ROGqjg9PypOwYLYweA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.213.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c6:9e:3f:f9:ed:cd:f6:a0:1c:c5:b1:80:a5:b5:39:e5:de:
46:16:15:3b:73:93:18:2f:22:55:3d:3c:87:a0:a8:95:31:5d:
c3:48:57:f8:61:ff:a6:f2:f1:40:cc:f3:6d:90:d9:aa:72:a3:
8a:95:13:26:be:6c:00:e6:09:a7:7d:f5:f7:91:2c:b7:ca:12:
0b:85:d0:86:14:85:8c:9e:eb:84:85:d2:52:d5:5e:8c:3f:ab:
ce:10:a0:d5:99:a7:95:24:d8:d5:86:6c:ab:43:02:60:af:f6:
25:f1:10:33:85:99:3a:cf:20:7d:bb:d9:25:55:3c:3d:e0:c9:
fd:15:6c:39:eb:87:e5:bf:62:27:57:9e:42:0f:77:47:d0:27:
87:8c:65:b1:b8:b9:f7:33:c0:c7:15:28:bd:23:78:77:91:84:
3a:b7:35:1b:f1:64:9b:22:3a:e4:6d:10:c8:64:e9:06:3c:85:
43:56:93:40:4f:16:25:8f:80:58:39:7a:90:b4:90:d6:11:4b:
46:11:b6:3d:55:15:f9:a7:58:9a:dc:78:cf:17:7a:68:e7:c5:
41:3e:b6:8c:75:7f:b5:e5:d7:15:7e:cc:23:ee:21:db:23:f2:
ff:57:26:4e:ae:4b:a5:91:36:ce:4e:45:62:03:ab:a8:75:4a:
bb:92:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org