Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/SpUJTAXItDdGlJicM17_ZsIaMSs.roa
File: SpUJTAXItDdGlJicM17_ZsIaMSs.roa (raw, json)
Hash identifier: /SFvNN6SrA3wxE8ZtV9QEwKfxN0x+wp50+E1nXVZvpg=
Subject key identifier: 4A:95:09:4C:05:C8:B4:37:46:94:98:9C:33:5E:FF:66:C2:1A:31:2B
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 0A68
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/SpUJTAXItDdGlJicM17_ZsIaMSs.roa
Signing time: Thu 15 Sep 2022 02:47:51 +0000
ROA not before: Thu 15 Sep 2022 02:47:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 103.122.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Sep 15 02:47:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4A95094C05C8B4374694989C335EFF66C21A312B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:23:e6:97:2c:22:18:4e:66:70:71:5f:66:
e0:19:bd:ac:fa:02:31:73:72:20:f4:bd:de:f1:bb:
d9:7c:0d:96:de:08:4e:e7:bc:9f:6a:1a:6d:36:1b:
dc:f2:48:ec:0a:88:ba:5a:bb:6d:e9:a1:d8:87:62:
56:95:b8:2a:bf:5b:31:2b:9a:fe:57:e6:60:e9:54:
3e:89:44:f5:bf:e2:ae:16:fe:16:8f:5e:90:97:0d:
2f:b8:47:41:7a:8f:de:f0:07:d0:cb:d0:2d:b8:48:
d9:9d:08:d2:5d:c7:f0:b2:27:fc:0b:ba:e1:4b:70:
7f:a2:f5:11:ea:9c:91:57:d3:4e:1f:9f:b1:50:50:
cf:45:b5:56:fa:bb:4b:c8:a9:72:22:88:a2:bd:03:
26:e5:4e:3f:79:f9:85:3a:88:88:93:18:d4:29:29:
61:15:e1:f0:72:f3:42:2e:c6:40:6f:41:d7:2f:33:
fc:6c:11:be:25:88:48:39:c2:64:b7:92:f9:9f:45:
37:39:64:9d:ba:ea:ba:e9:c4:e2:3d:61:7d:eb:34:
b7:78:8c:77:ac:b4:de:b4:07:b4:02:07:51:0b:94:
dd:c1:44:c1:d4:17:f8:3f:11:b7:cc:26:09:83:5e:
17:89:38:c6:68:33:ec:8a:34:de:63:08:ba:32:00:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:09:4C:05:C8:B4:37:46:94:98:9C:33:5E:FF:66:C2:1A:31:2B
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/SpUJTAXItDdGlJicM17_ZsIaMSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:3e:f1:19:ec:82:85:bc:37:c8:1d:e3:34:95:ea:e6:7a:72:
9f:e2:a6:3c:ae:3d:85:3a:94:3b:c7:11:31:dd:72:84:6c:28:
0c:3e:02:a6:ab:e0:78:b5:44:d7:25:5b:20:5d:39:b2:83:79:
5d:f8:8d:77:bf:01:ce:95:2b:41:3f:f5:09:ac:a8:4d:85:37:
b5:bf:47:b6:b1:3a:38:e7:d2:f6:26:97:91:2d:6f:e1:a4:df:
64:07:3c:4c:d3:98:df:ef:57:e3:8e:63:f9:95:59:b5:ae:e1:
0d:88:6c:5f:af:32:57:b5:07:f9:53:aa:ab:e0:78:78:27:f1:
e0:e5:29:c0:8a:b4:ca:04:41:23:52:c9:30:1d:44:ad:37:a9:
f4:48:6b:fc:65:33:57:47:7d:ae:fc:48:99:61:b8:21:e4:3a:
c7:a4:64:d6:11:c2:75:3a:c3:14:97:0a:00:b4:38:c3:4f:75:
b9:e3:38:4b:db:61:fc:d7:a8:84:ef:ad:25:f1:06:c5:75:71:
0e:2d:28:d2:0e:41:f7:aa:8d:20:3f:2f:a0:23:55:aa:8a:6b:
b6:e4:5a:93:30:ac:7d:87:26:9d:44:ed:6f:82:26:22:46:61:
a5:51:3b:4b:97:fc:9f:a8:19:ae:59:2a:7e:76:4e:0a:5c:43:
15:f8:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org