Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/aKiQTSBl_mt9jUHsWqd8mmcCXj0.roa
File: aKiQTSBl_mt9jUHsWqd8mmcCXj0.roa (raw, json)
Hash identifier: 6v+yg6x2tCUQvTGabgLcZpMKuAiDyDriXuePyFDO5eo=
Subject key identifier: 68:A8:90:4D:20:65:FE:6B:7D:8D:41:EC:5A:A7:7C:9A:67:02:5E:3D
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/aKiQTSBl_mt9jUHsWqd8mmcCXj0.roa
Signing time: Thu 15 Sep 2022 02:34:57 +0000
ROA not before: Thu 15 Sep 2022 02:34:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17418
IP address blocks: 103.153.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 15 02:34:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=68A8904D2065FE6B7D8D41EC5AA77C9A67025E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:9c:2f:e6:1b:f0:b9:ae:f0:25:7c:b6:40:
67:93:58:16:f0:2a:01:d2:47:9c:0e:46:91:87:b6:
6b:17:fa:13:60:83:fe:31:16:91:c6:89:b4:39:d7:
92:ac:14:76:6c:7e:bc:03:29:31:c1:be:02:01:5a:
c5:e9:79:bd:78:65:d9:e6:c3:03:59:25:dc:64:fa:
d1:d0:49:ad:5a:ca:9c:f6:b4:fb:4a:67:ce:91:84:
f5:1b:09:e4:00:12:94:7e:60:dc:c4:61:cf:b5:d8:
d7:54:3d:b4:36:20:4b:da:d8:ca:36:f5:b6:e4:b1:
d2:4d:42:41:a2:e3:be:a0:41:b9:ec:e2:c4:13:88:
34:99:de:1b:29:10:11:6a:bc:cf:09:de:82:e7:63:
94:5d:46:03:38:08:9d:5c:fb:b7:8c:e7:24:4d:38:
e2:d8:e4:01:b8:5b:2a:ac:3e:5e:9e:f8:86:11:2d:
c6:c3:f0:b5:e0:cc:3e:b4:02:52:79:a0:ba:35:76:
01:25:0b:f2:6c:b7:8a:65:37:d1:24:24:71:47:73:
5d:34:f5:ed:c2:03:68:48:e3:c8:be:54:47:db:03:
ad:94:38:32:8e:d4:db:23:4d:52:b3:b5:0e:3d:30:
3a:ed:9a:96:05:43:db:5b:52:c5:bc:93:3b:1a:27:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:90:4D:20:65:FE:6B:7D:8D:41:EC:5A:A7:7C:9A:67:02:5E:3D
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/aKiQTSBl_mt9jUHsWqd8mmcCXj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3f:93:49:ee:6c:88:a0:c0:5a:57:8c:d8:32:08:96:47:f2:
5d:4d:c5:48:1c:5b:88:79:b5:9a:2c:6d:82:a4:c3:86:a1:be:
d0:a3:d8:96:38:d3:6e:85:c5:68:d0:b8:85:26:40:13:43:8b:
c2:76:0e:23:81:40:80:c4:e2:3e:a5:98:d9:42:55:68:61:f7:
50:63:46:14:83:b3:bc:03:fd:4c:61:87:36:fb:8c:fd:cd:e9:
a0:a8:f1:e8:1a:52:f9:b4:ea:d3:cc:b6:ec:a2:11:f8:83:38:
ba:3a:d2:76:32:ad:00:58:8a:40:fe:56:d9:25:03:74:77:e8:
dd:42:e2:d7:08:c2:42:06:06:3c:45:99:5b:a0:60:28:3d:75:
8f:8f:63:c3:6b:b7:88:57:de:bf:ac:b1:d7:03:f0:6e:56:82:
90:98:e4:38:26:71:60:2d:6c:26:91:66:9b:4c:b4:f6:6f:11:
93:63:8e:a1:bb:2b:07:b7:ae:d6:41:44:63:3d:5f:e1:54:37:
63:bd:1e:9f:5c:2c:36:6d:98:4a:04:c4:71:e6:ac:3d:37:1d:
8b:b9:0a:7f:06:30:36:61:6e:15:e1:0f:b3:45:c7:ae:31:3a:
ee:47:19:7a:9f:01:8d:90:c2:06:fa:5b:1e:a2:77:52:00:36:
3d:ae:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:41 2023 by rpki-client on console-ams.rpki-client.org