Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LOdmgVnP9g1dBmchREnTKxuH63c.roa
File: LOdmgVnP9g1dBmchREnTKxuH63c.roa (raw, json)
Hash identifier: 4O9EB6M4q5lFRQJK8GvsSa0M3xmRZFn5OljmgXhfzio=
Subject key identifier: 2C:E7:66:81:59:CF:F6:0D:5D:06:67:21:44:49:D3:2B:1B:87:EB:77
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 0A68
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LOdmgVnP9g1dBmchREnTKxuH63c.roa
Signing time: Thu 15 Sep 2022 02:47:51 +0000
ROA not before: Thu 15 Sep 2022 02:47:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 20473
IP address blocks: 103.122.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Sep 15 02:47:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CE7668159CFF60D5D0667214449D32B1B87EB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:de:d9:32:41:0d:46:92:1d:6b:e3:93:e9:
8b:ee:1b:7b:eb:c6:37:be:94:2b:22:56:98:40:67:
25:da:1c:c4:41:d8:3c:a5:52:64:30:5b:60:bf:4e:
4e:17:92:de:6f:e4:db:d8:4c:8c:40:17:6b:88:5c:
c1:b3:9a:c3:80:c7:51:70:e6:83:7c:86:83:52:3e:
a8:be:e5:96:3e:8e:73:4d:5e:dd:ec:2f:32:e2:77:
d1:b9:47:5e:14:17:08:73:d7:14:65:f2:e3:e2:e6:
3a:7d:ec:f1:aa:84:08:0a:88:61:b3:e3:90:1d:e9:
94:58:8c:8d:49:84:5d:65:28:a9:9f:cb:24:38:e8:
d6:ac:1d:49:56:55:49:c1:8c:f6:89:c7:32:d3:fe:
cc:e4:80:ce:95:94:8a:fb:48:da:bf:c0:c3:c5:f8:
d2:8f:49:f2:70:2b:b1:06:55:1c:da:75:8c:40:f9:
16:13:c3:0e:30:63:39:07:02:08:d5:e9:da:26:a1:
8d:32:9d:38:75:c9:cc:53:01:70:c5:5a:e9:a4:a4:
c8:26:8d:78:0a:2e:c2:49:88:7e:aa:1c:7b:b1:3d:
5a:c7:0c:a0:c5:aa:e3:27:11:37:df:48:ab:55:6a:
af:2d:fe:c1:ca:f9:e0:96:ff:60:41:3b:5a:ab:fa:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:66:81:59:CF:F6:0D:5D:06:67:21:44:49:D3:2B:1B:87:EB:77
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LOdmgVnP9g1dBmchREnTKxuH63c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/22
Signature Algorithm: sha256WithRSAEncryption
10:c5:83:bf:78:c2:39:f2:68:76:38:69:1e:64:51:33:16:11:
bb:65:31:de:1d:83:78:7e:27:23:d7:30:56:c3:cc:40:27:0f:
f3:1d:3e:40:1b:1b:12:91:9c:52:0f:37:fd:ec:d5:e9:ad:bf:
78:21:9a:2f:0c:c8:35:7d:8d:2b:d6:40:50:59:e7:64:f3:71:
11:e7:29:f3:b4:a9:7a:94:7e:ee:ca:6e:6a:04:01:7d:c8:24:
18:f8:23:57:72:ec:50:38:70:c7:97:c2:f1:9f:b1:94:2d:7c:
0c:8e:3e:95:4c:0b:32:8b:51:63:c3:44:44:83:2d:af:33:d3:
3c:19:e8:22:1c:17:35:9e:cf:0b:af:36:db:10:5b:3a:ee:3b:
1b:eb:ce:81:10:5e:fe:50:64:0a:1a:47:8f:c5:17:7e:d4:5d:
53:a3:8a:5d:2e:ec:0c:a6:22:40:b8:9e:75:b0:ef:e7:d1:6a:
93:23:99:6a:1f:a4:23:01:fc:45:13:7d:30:30:7d:6b:cb:76:
b6:52:04:e9:d6:72:d7:14:40:9d:b7:b2:33:86:e6:1b:86:98:
75:c5:51:df:e0:26:31:3e:e9:9c:76:af:6a:b6:e8:63:e8:38:
15:09:9f:ce:51:36:e0:28:7a:fc:d7:20:ba:b6:5f:2a:49:01:
f4:51:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:40 2023 by rpki-client on console-ams.rpki-client.org