Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Wl518r1HXqtOS7x41Ch-7d8sDto.roa
File: Wl518r1HXqtOS7x41Ch-7d8sDto.roa (raw, json)
Hash identifier: dhZaqgFr7Bmtt70C4RweMb8qfp81vhW7EbgG7flVsgY=
Subject key identifier: 5A:5E:75:F2:BD:47:5E:AB:4E:4B:BC:78:D4:28:7E:ED:DF:2C:0E:DA
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Wl518r1HXqtOS7x41Ch-7d8sDto.roa
Signing time: Thu 15 Sep 2022 02:34:55 +0000
ROA not before: Thu 15 Sep 2022 02:34:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131657
IP address blocks: 103.153.176.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 15 02:34:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5A5E75F2BD475EAB4E4BBC78D4287EEDDF2C0EDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:28:f6:95:87:7d:6d:88:36:d0:ae:ed:2c:
47:37:8e:04:10:3e:9a:6a:63:28:9e:1e:87:5e:90:
a8:38:98:3c:45:f3:ff:97:a1:92:cd:9a:37:46:bb:
a7:b2:a3:3c:82:50:cb:dd:87:e6:78:2c:bd:17:ed:
39:7c:fd:7c:33:80:a4:4b:eb:87:42:ba:ad:b9:24:
69:a1:8a:e2:50:32:90:74:a0:c3:33:18:85:d3:78:
a6:d4:8e:e1:3f:41:fb:aa:5f:77:86:71:bf:7d:88:
2e:fa:26:51:ce:d6:6c:96:6e:8a:78:1f:18:be:5d:
ef:9e:4f:cf:8c:9a:c8:a7:36:86:a1:6b:71:67:d2:
d1:e5:b5:e4:06:8b:04:fe:96:99:78:42:05:f7:4e:
d1:4b:26:d8:e3:88:77:b4:15:c9:f2:c4:1e:f8:71:
3e:06:b3:a7:73:11:42:a2:bd:32:3e:5b:75:da:cf:
f0:1b:76:a7:04:bb:b8:17:18:70:bf:5e:53:21:4c:
99:3a:48:9d:2f:64:c9:3a:10:c4:d8:47:99:8d:07:
37:95:52:b9:50:ce:3b:01:86:93:da:b9:c9:90:66:
4b:be:da:67:51:fb:40:f0:fa:f6:0c:7d:e2:5f:7f:
7f:f6:d5:85:71:fb:72:5b:31:17:6c:52:0c:09:06:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:75:F2:BD:47:5E:AB:4E:4B:BC:78:D4:28:7E:ED:DF:2C:0E:DA
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Wl518r1HXqtOS7x41Ch-7d8sDto.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/23
Signature Algorithm: sha256WithRSAEncryption
56:21:f4:6d:bd:18:d6:3e:20:80:e6:c1:35:17:90:09:b6:ab:
53:f4:fc:b5:7d:41:60:30:61:d2:bf:4c:1a:07:9d:c8:b9:6e:
4e:73:e4:37:11:83:de:e0:33:4b:44:9d:25:c3:78:de:94:68:
67:99:86:66:b9:94:3f:bc:07:ed:bf:11:5a:02:11:a4:2d:ad:
51:a0:80:57:f2:b1:dc:20:56:30:f6:cd:29:2a:99:09:8f:1a:
e3:02:24:14:e6:c7:85:e0:bd:86:20:99:f1:dc:7a:6b:05:66:
43:25:72:79:d5:ec:59:ad:6d:8c:67:f3:fc:7a:2c:f1:1b:91:
d6:d6:06:8c:57:e0:e7:43:1f:09:8f:bf:2c:04:9d:86:1c:c3:
76:02:3e:13:54:42:e0:c9:0a:2c:12:d1:78:a1:44:44:69:11:
ab:47:34:a3:92:b0:1c:49:c6:56:dd:7f:64:43:6a:a8:19:dc:
c1:9b:e2:60:73:ec:7b:76:e4:ad:4b:f4:a8:ca:dd:7b:ff:ac:
9a:c2:bb:8e:bf:75:2b:ff:bd:b9:5d:26:cb:06:25:c1:fe:be:
9b:98:a9:28:77:5a:40:42:5c:34:a5:60:aa:b9:51:9e:01:40:
05:61:2e:d9:75:5d:84:a3:a7:c4:de:a4:9a:12:9e:06:84:98:
d8:ef:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org