Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/T4QwtapqIL9iJc__8baNGKhM_q8.roa
File: T4QwtapqIL9iJc__8baNGKhM_q8.roa (raw, json)
Hash identifier: mRqIUqpgTLNmejuDEhZKCLqavRVM1SF52yzDT2Aow0Q=
Subject key identifier: 4F:84:30:B5:AA:6A:20:BF:62:25:CF:FF:F1:B6:8D:18:A8:4C:FE:AF
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/T4QwtapqIL9iJc__8baNGKhM_q8.roa
Signing time: Thu 15 Sep 2022 02:34:56 +0000
ROA not before: Thu 15 Sep 2022 02:34:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17418
IP address blocks: 103.153.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 15 02:34:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F8430B5AA6A20BF6225CFFFF1B68D18A84CFEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:c7:f2:02:16:8b:44:26:76:c5:a4:ab:65:
53:ee:ef:33:50:66:ff:cd:88:f7:50:85:55:c3:70:
c8:9a:5b:00:68:82:df:e6:0c:34:f4:b7:88:c8:93:
43:25:0d:9c:e5:f6:d7:b4:fc:55:c8:fe:d1:68:41:
c3:46:34:5b:a4:5e:26:40:8a:55:bc:58:a6:ea:19:
3f:9e:c3:46:7c:0f:1f:2b:41:06:a1:d6:d8:d2:c7:
fd:8e:8c:6f:fa:18:43:8b:eb:4f:c5:b5:b1:6e:92:
39:b7:de:2b:84:15:de:ad:2b:41:49:d0:6c:eb:11:
d4:f9:e3:c1:68:e2:0e:a8:1f:56:c9:e2:cd:0a:34:
c0:3c:62:98:38:d9:83:aa:80:dc:83:f7:07:b1:80:
07:0d:d1:d2:2c:26:dd:0b:5f:1d:46:29:39:3a:71:
79:5d:5b:04:64:ed:ca:0f:3d:07:5d:f8:07:f6:8b:
5a:ee:ef:b3:40:1d:f7:69:38:74:9e:a1:ff:61:2b:
a5:31:b1:bf:45:e6:36:a1:5d:6b:d6:c9:7c:af:b6:
81:75:a8:b2:9b:a4:b0:f7:12:cf:cc:61:9e:94:26:
bd:d0:e7:3b:41:48:3f:df:71:7a:0f:4f:c4:83:ac:
a5:c5:ce:f0:8b:ce:a3:20:94:5d:4d:55:90:aa:45:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:30:B5:AA:6A:20:BF:62:25:CF:FF:F1:B6:8D:18:A8:4C:FE:AF
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/T4QwtapqIL9iJc__8baNGKhM_q8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e9:d4:a2:b4:1e:3e:6a:2f:00:b5:c2:a6:a4:ea:6a:70:2c:
85:bd:b0:62:a8:53:5f:49:48:f4:21:c3:cf:70:18:20:88:2a:
7a:76:af:87:43:78:7c:f4:54:d2:fc:18:b1:c2:de:10:57:1b:
e2:a8:bb:4a:ba:6f:7a:de:82:f2:ea:8e:9a:0a:34:e8:ad:f4:
5b:d0:5b:ed:44:be:9a:7b:03:1c:b8:c6:1f:02:99:a4:43:5f:
2c:5f:72:23:c9:32:4d:0d:cf:1f:e4:78:1c:8c:4e:cc:e8:04:
3e:20:47:d4:5b:22:55:85:ec:73:f4:db:1b:35:18:81:2e:fa:
6d:5d:49:03:ce:2b:fc:d9:67:a1:9a:af:cd:76:93:e3:53:c3:
1e:11:42:4b:04:a9:8a:6e:4b:97:08:00:86:87:5e:60:3f:b7:
a3:d2:9e:4a:8e:af:52:99:d0:7a:7f:fd:4d:eb:c4:a8:3b:dd:
07:17:82:94:80:b7:eb:f8:03:3b:52:3c:da:36:3d:2e:c2:60:
73:06:99:74:c1:dc:9e:5e:92:54:05:45:2b:aa:89:2f:f0:dc:
bb:3c:0e:3a:fc:30:c2:7c:f9:47:e0:e0:09:79:ab:bf:d9:9a:
6d:b0:aa:54:69:c5:18:53:8e:04:e4:d2:28:bd:d2:e0:01:e2:
7f:98:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org