Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/rIjDyQ20bcAM-4Q4vDs8MI8lUbI.roa
File: rIjDyQ20bcAM-4Q4vDs8MI8lUbI.roa (raw, json)
Hash identifier: YrOZUZmWSXRkMbpzKK814zv6QlywypXBTzjLyZ99ZZI=
Subject key identifier: AC:88:C3:C9:0D:B4:6D:C0:0C:FB:84:38:BC:3B:3C:30:8F:25:51:B2
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 0A68
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/rIjDyQ20bcAM-4Q4vDs8MI8lUbI.roa
Signing time: Thu 15 Sep 2022 02:47:50 +0000
ROA not before: Thu 15 Sep 2022 02:47:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 103.122.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Sep 15 02:47:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AC88C3C90DB46DC00CFB8438BC3B3C308F2551B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:c3:c1:6f:7f:63:f4:ed:7b:f6:86:e8:1f:
0e:5f:0a:23:e2:74:74:3b:f6:95:00:0a:73:bc:d3:
c0:29:a8:3a:a4:f3:18:eb:12:02:44:c3:5c:db:ad:
35:ed:a1:ce:e2:2f:82:46:f4:0d:6a:85:ba:6e:09:
9a:27:cf:b1:eb:87:2d:c3:6c:db:f3:64:8e:bb:ef:
d2:17:95:22:e5:40:80:ef:29:bb:e8:a1:36:09:64:
f6:c3:c5:18:b8:45:ca:c8:f0:54:af:92:fa:2c:cd:
b4:9a:16:1d:9a:7a:92:c9:b3:35:e5:4a:05:8a:f8:
f8:99:f6:9c:fe:e9:9d:e4:51:e2:03:c2:d8:e9:bc:
6e:1b:5e:cc:a0:c7:07:b8:cb:31:c8:6d:f9:00:b4:
38:96:6f:25:1a:30:28:24:4b:60:cd:d1:cc:75:8e:
21:3c:85:63:9c:86:88:98:6b:ae:02:f0:70:54:c9:
2f:27:a8:9d:f3:a6:9a:ea:d4:38:b6:7d:2e:12:ac:
4e:19:c7:ed:ae:2b:ff:39:83:7f:0b:15:07:bd:59:
b5:5f:bf:c5:a7:f1:c7:1d:ba:b2:ec:f5:62:77:ff:
59:6c:01:21:ad:6a:1e:8e:9a:9d:88:88:18:67:2d:
99:32:73:f9:4a:0c:ca:92:b3:45:c5:e8:11:c8:b4:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:C3:C9:0D:B4:6D:C0:0C:FB:84:38:BC:3B:3C:30:8F:25:51:B2
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/rIjDyQ20bcAM-4Q4vDs8MI8lUbI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.191.0/24
Signature Algorithm: sha256WithRSAEncryption
04:88:d3:00:d1:17:0b:0b:6c:62:a9:cc:a1:65:ba:9b:04:04:
8b:50:f7:c4:32:b8:d2:f9:97:d2:97:98:c8:c5:eb:9f:7f:52:
16:42:da:36:b8:ba:cb:ce:9a:ff:9c:44:3f:69:d2:40:fe:c9:
03:2e:cb:b8:44:d4:24:b5:c2:5d:3b:6d:10:7a:ed:b0:e7:19:
a7:7d:08:69:2e:71:16:a3:80:cb:bd:49:33:ff:4c:eb:51:eb:
ec:83:f9:ad:62:9c:01:ea:89:ca:86:24:d7:63:01:6d:66:65:
ec:b7:2c:bb:f6:16:2f:15:05:c5:08:b3:6c:55:16:57:bd:41:
b7:a8:0b:d7:f6:fd:07:c6:fb:c6:9b:a7:20:63:7b:95:b3:2c:
e3:60:00:1d:9e:6f:d7:53:4c:9c:89:ce:49:41:3e:4e:26:94:
59:57:e3:cd:e4:04:24:3e:e2:e7:b3:4d:6a:d2:23:55:ad:66:
2c:83:e1:80:0a:67:4e:06:2f:a3:a4:34:c8:1c:7d:ac:17:15:
7e:c1:20:bc:ad:b8:1d:de:34:6a:79:a7:90:48:a4:1b:8c:e5:
1b:2a:fc:7b:df:73:ea:01:f9:45:f7:69:aa:a0:47:a0:fa:41:
68:6f:5a:a2:46:ba:8a:cd:89:72:34:2e:2f:22:d7:10:e7:29:
16:05:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:40 2023 by rpki-client on console-ams.rpki-client.org