Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/dhMgy3qdAHwQiDvlTYrt0PsNUyM.roa
File: dhMgy3qdAHwQiDvlTYrt0PsNUyM.roa (raw, json)
Hash identifier: CB1nTn7WBJDSwVV6WwJ21czcHjeNvwW5zCBuLu5aN4Y=
Subject key identifier: 76:13:20:CB:7A:9D:00:7C:10:88:3B:E5:4D:8A:ED:D0:FB:0D:53:23
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 0A68
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/dhMgy3qdAHwQiDvlTYrt0PsNUyM.roa
Signing time: Thu 15 Sep 2022 02:47:50 +0000
ROA not before: Thu 15 Sep 2022 02:47:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131657
IP address blocks: 103.122.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Sep 15 02:47:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=761320CB7A9D007C10883BE54D8AEDD0FB0D5323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:9e:ab:7a:66:d8:ff:f9:b7:3e:3b:09:3b:
65:96:de:aa:6a:77:f7:82:71:56:de:83:04:98:f5:
5d:64:cc:18:21:4e:d4:8a:67:2c:d9:ae:cf:49:c7:
62:92:be:e8:3e:52:ee:43:0b:65:cc:25:66:8b:91:
ef:cf:6b:d9:9d:b8:cd:c4:3c:7c:5c:59:ed:35:25:
d0:55:42:0c:da:e0:b1:9d:5d:1d:a4:47:0b:bd:f6:
0b:8a:18:db:42:09:d6:fb:c2:6c:d4:eb:f8:5a:b8:
dc:65:f9:c3:63:08:df:4a:1d:8b:d1:c6:03:3e:db:
20:ad:8c:49:55:3d:2a:c8:5f:78:44:24:2d:03:8a:
2f:24:b0:75:31:e8:d4:53:ed:1d:c4:64:10:f9:ac:
da:8b:3b:59:28:d2:18:f4:06:de:72:e1:f0:e9:4b:
00:bc:e0:cb:44:7e:f5:88:a8:c1:13:70:d2:31:ea:
5f:81:25:fa:3f:5b:c8:65:3d:50:d1:66:3d:43:59:
bf:53:af:d7:96:4a:ad:6b:fe:7e:54:38:77:a9:a8:
cc:28:cd:6d:41:61:69:39:78:e9:23:d5:48:37:04:
82:66:3f:10:e7:81:31:89:be:84:cb:d5:b0:ba:d6:
c2:69:c0:90:52:32:df:b4:a9:4f:a2:3f:ae:70:e8:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:20:CB:7A:9D:00:7C:10:88:3B:E5:4D:8A:ED:D0:FB:0D:53:23
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/dhMgy3qdAHwQiDvlTYrt0PsNUyM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
88:79:fc:74:8c:01:c6:27:4b:30:14:bf:20:2e:8f:7b:d3:ff:
f7:90:21:44:cf:2e:10:68:47:70:59:d3:da:b1:de:6b:e5:e7:
a5:84:21:94:69:64:fa:44:38:32:f2:a2:f0:b8:e5:f6:70:04:
9f:d0:31:65:71:cc:c4:07:5f:53:42:e8:7d:87:4d:21:89:65:
f6:b2:7f:9a:41:83:50:1f:e3:04:5b:a7:cb:83:6d:c1:a6:ac:
23:2d:fe:c6:5c:b0:05:39:a3:8a:ec:23:5b:a4:5b:5e:99:6f:
01:41:a7:c5:f7:02:ad:de:3a:d5:82:17:76:61:22:bb:65:54:
08:c6:d8:55:fb:fc:2d:00:59:d1:da:0d:2e:d2:3a:ba:5a:a0:
1f:35:8e:06:69:b4:06:38:dd:5f:b9:6b:89:f5:59:e0:b2:62:
3b:6f:4a:71:95:6d:0b:04:9b:63:b9:6f:db:e1:14:15:4d:78:
62:cb:87:8a:29:ed:09:f6:09:d5:47:96:1a:7a:6f:d4:9b:01:
62:ce:7e:31:1f:da:34:67:c0:1e:2f:0a:df:48:3c:4d:d1:5e:
30:f7:f4:c8:d8:ec:42:5b:7c:7f:59:88:72:96:ed:50:04:c0:
2a:91:7c:f6:fe:82:fb:57:7d:61:d0:94:b9:d5:8a:b5:8a:53:
91:78:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:40 2023 by rpki-client on console-ams.rpki-client.org