Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LFzUgW13SUnWtn58189CXs3zdA0.roa
File: LFzUgW13SUnWtn58189CXs3zdA0.roa (raw, json)
Hash identifier: ZmZYO1twQeMDut66LKUoSbyUIBMvPL/eeIpRw690tTE=
Subject key identifier: 2C:5C:D4:81:6D:77:49:49:D6:B6:7E:7C:D7:CF:42:5E:CD:F3:74:0D
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 0A68
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LFzUgW13SUnWtn58189CXs3zdA0.roa
Signing time: Thu 15 Sep 2022 02:47:52 +0000
ROA not before: Thu 15 Sep 2022 02:47:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131657
IP address blocks: 103.122.188.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Sep 15 02:47:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2C5CD4816D774949D6B67E7CD7CF425ECDF3740D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:7b:88:a0:3c:ec:98:9f:60:3c:3e:ca:a3:
0a:8e:35:76:b7:be:09:91:2a:64:91:c5:07:da:84:
46:2c:9c:36:1a:01:50:73:33:1a:0a:0a:1e:2b:8b:
55:b9:27:1c:7e:5e:a2:43:4e:72:18:43:4f:ea:34:
ed:6f:9a:cd:54:6f:3a:71:df:ac:a4:6c:16:c1:f1:
af:10:20:f1:31:3b:87:79:21:9a:01:19:15:4b:ab:
65:86:78:bd:6c:fb:62:44:bc:59:40:73:d3:eb:b0:
cc:e5:d1:4c:21:8c:69:81:c4:61:28:00:64:04:c8:
25:a7:f3:00:bf:f8:df:fc:f1:39:9d:21:d8:a1:8a:
5c:f3:86:69:cd:11:d2:58:8d:ed:cb:3b:cd:29:df:
d1:28:bd:39:99:4b:a9:10:c2:65:db:f8:40:82:83:
03:f2:68:fc:b2:08:7a:9f:54:09:d4:2e:cb:8a:f6:
dc:f2:d0:f3:6c:8c:3f:15:88:13:b4:de:ca:07:fa:
6c:83:f3:28:fd:92:1e:f7:ae:73:b1:d2:40:7c:69:
1c:aa:b3:53:22:fa:d9:99:46:53:51:6f:c1:66:39:
c1:fe:57:dd:7f:10:9a:4b:89:ef:7f:35:1a:e8:a7:
86:4e:e3:b6:8c:eb:ba:e1:a6:be:c6:40:a7:c8:41:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:D4:81:6D:77:49:49:D6:B6:7E:7C:D7:CF:42:5E:CD:F3:74:0D
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LFzUgW13SUnWtn58189CXs3zdA0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:d3:cb:be:f8:fe:35:21:89:5d:b2:e7:b6:05:b6:28:06:cd:
21:fc:f8:48:b2:2b:43:8e:12:b5:8a:e9:e3:3d:c2:aa:a5:d8:
5e:44:47:71:85:04:3a:a7:61:dc:58:e9:12:65:52:50:8c:89:
0d:42:2f:9b:80:9a:64:7a:6a:6e:27:53:1b:49:7b:b8:91:7c:
f3:f4:e5:32:bf:9d:75:c5:61:33:a2:f2:e2:f1:a2:b7:0e:4e:
ca:97:a9:bc:80:d8:5c:62:72:3e:a8:28:b3:8e:d9:ce:fa:fe:
8d:09:61:35:d6:78:da:0e:d5:c2:1e:19:7f:c4:1a:08:cd:1a:
9f:2d:b3:4b:e3:26:81:c7:0d:5f:5b:e8:a7:6b:25:b1:d2:f5:
f2:35:75:fd:ae:21:7b:cc:62:0d:1a:c6:67:7f:ae:eb:41:7b:
fc:8a:60:8a:13:32:01:a7:93:57:e4:fb:c1:06:70:44:8a:a7:
4f:68:36:7c:73:48:fc:65:c0:56:95:80:f5:8f:11:1a:26:b8:
f1:17:4a:8d:47:11:68:90:00:a9:04:16:63:66:c0:b9:2c:cc:
bc:4a:3d:81:f8:b5:6c:f3:96:79:ff:59:36:44:04:d4:69:4a:
ff:28:80:5f:0e:b5:fe:c7:b0:a1:62:cf:e8:64:44:84:88:a4:
60:ef:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org