Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/o_Z5KSr3YM3rbHCQnXLLJ5_vCIw.roa
File: o_Z5KSr3YM3rbHCQnXLLJ5_vCIw.roa (raw, json)
Hash identifier: jLpSGDTakcGAhRaqz4Yw4R1/Os23t5nppdaYtVBbCGg=
Subject key identifier: A3:F6:79:29:2A:F7:60:CD:EB:6C:70:90:9D:72:CB:27:9F:EF:08:8C
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 0B75
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/o_Z5KSr3YM3rbHCQnXLLJ5_vCIw.roa
Signing time: Fri 01 Sep 2023 08:56:23 +0000
ROA not before: Fri 01 Sep 2023 08:56:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.122.188.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2933 (0xb75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Sep 1 08:56:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A3F679292AF760CDEB6C70909D72CB279FEF088C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:64:91:8b:a0:aa:d9:c6:65:90:69:b2:9f:
7d:5d:3b:78:e0:57:71:0e:c2:2d:c7:ff:f2:73:1e:
8c:3d:ae:e0:fd:02:5b:41:20:d3:ba:df:3c:40:70:
dd:b4:83:7c:46:89:26:6e:09:f1:84:2c:7e:08:27:
96:c7:83:fe:50:ba:dd:22:e2:3d:ce:9a:54:68:15:
9a:fc:50:2c:07:7e:af:3f:8f:e3:11:a5:48:fd:c0:
61:24:96:83:12:f1:b4:c6:69:99:f3:9c:ff:7f:ca:
c1:e3:fd:93:10:6f:b7:a9:ac:bc:23:d5:df:90:e0:
d6:70:18:64:1d:24:77:cd:ea:10:cb:d7:67:2f:35:
ec:3e:73:2d:85:41:af:23:54:f1:c0:15:9d:4f:26:
49:0a:0e:61:5b:1a:b6:b1:ee:ca:14:7c:38:42:13:
79:b0:fb:da:fe:92:b6:71:5b:a3:fc:39:a5:63:9b:
f0:b5:4c:27:d8:65:16:8f:42:7c:76:d3:3f:8f:93:
2e:e4:cc:b6:2f:b1:e2:42:b6:c5:e1:bc:65:ac:2b:
b1:ff:d7:37:ff:a8:b7:8e:69:1d:1f:cf:5c:85:20:
59:a3:6b:b3:6e:56:41:07:8e:fa:83:71:02:1d:86:
b2:66:78:dd:c9:cb:a6:97:fd:5e:c3:78:df:90:45:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:79:29:2A:F7:60:CD:EB:6C:70:90:9D:72:CB:27:9F:EF:08:8C
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/o_Z5KSr3YM3rbHCQnXLLJ5_vCIw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:b5:49:59:41:13:96:e3:e4:e6:0a:24:3a:a3:30:0c:a9:a5:
ab:f2:57:d0:d2:8a:74:24:94:74:2b:8e:ab:81:cf:71:be:e7:
c3:28:8a:2a:9a:fa:7c:b8:55:4f:63:38:8b:c2:4b:bb:79:bd:
76:18:cd:db:75:53:2b:07:4b:3e:65:90:3a:2f:91:a1:0e:42:
13:ae:af:6b:ac:9f:b2:25:b9:3b:0e:3f:9a:b2:90:dc:0b:43:
6e:88:d9:b6:88:89:22:93:73:9e:70:b9:b8:c8:2a:38:a8:1e:
45:d0:f5:68:60:9a:48:a3:3b:2e:f4:51:6c:5a:2a:70:4a:15:
7d:ef:55:6b:80:e8:74:92:a8:f8:7f:c5:97:95:20:cd:a7:12:
2a:2f:75:f8:4a:55:0e:69:40:b9:62:93:cb:d8:61:d4:79:39:
5c:60:0a:19:8b:6e:b9:37:32:50:ac:e4:10:aa:06:08:dd:8a:
99:37:ec:67:2a:d2:6b:c9:9f:80:8f:ae:13:17:63:4f:1f:e1:
88:04:26:75:7c:6d:8c:b4:45:43:08:50:ae:48:33:2c:1f:82:
40:a7:46:a1:ff:11:a1:f5:b9:9a:16:e3:98:36:63:54:8b:a4:
43:8d:98:19:10:92:f8:d1:e8:80:7e:22:3b:ba:02:0c:5a:cc:
53:aa:c2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 08:26:14 2023 by rpki-client on console-fra.rpki-client.org