Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/CR77uXRczAUlEKah6lXT9R_H0EQ.roa
File: CR77uXRczAUlEKah6lXT9R_H0EQ.roa (raw, json)
Hash identifier: +YQFzEOAd5+cIzyF8FIbcZ9MNZPvt+Y3Ly4u7EoR6nU=
Subject key identifier: 09:1E:FB:B9:74:5C:CC:05:25:10:A6:A1:EA:55:D3:F5:1F:C7:D0:44
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0471
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/CR77uXRczAUlEKah6lXT9R_H0EQ.roa
Signing time: Thu 15 Sep 2022 02:35:01 +0000
ROA not before: Thu 15 Sep 2022 02:35:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9678
IP address blocks: 103.98.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Sep 15 02:35:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=091EFBB9745CCC052510A6A1EA55D3F51FC7D044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:e5:53:30:0e:b6:6d:c6:6c:3c:af:39:39:
60:db:78:b6:b8:64:e1:36:e8:85:7e:bc:be:27:60:
a4:fa:b0:ef:c5:d1:fe:d0:1c:45:ed:62:6d:14:24:
22:d8:92:d4:da:02:e9:dd:be:a1:54:9d:67:2e:20:
a3:e6:03:57:b5:fa:88:da:77:c7:ae:40:62:9a:67:
82:b3:3f:ba:81:88:f8:ba:e5:4f:55:74:a6:10:0f:
1b:90:37:3f:e5:62:b8:cc:92:53:27:8e:9d:12:8d:
ad:a7:5b:ee:b9:00:08:d5:61:cb:4d:e5:dd:e8:91:
61:86:c0:db:4c:d5:95:05:9a:d7:6d:58:ba:d2:08:
c6:0d:bd:36:12:31:f1:3a:11:cf:30:4e:f7:ed:7b:
bc:89:d5:23:48:c1:85:79:e6:91:de:5f:70:62:55:
bf:d0:ce:96:4d:7f:7a:6e:f5:b4:6d:16:f6:45:9f:
ab:a1:0d:c4:4f:cd:66:90:78:91:9f:39:9a:a7:8f:
b8:47:d1:1e:24:4f:c0:c1:85:2c:2e:90:0f:a7:37:
7c:f9:14:aa:a1:20:70:b5:10:8e:fe:27:c6:24:1b:
11:81:aa:c3:6d:e2:2a:07:ff:aa:cb:b7:c4:90:c3:
f9:e9:34:da:df:be:9b:ce:af:d0:db:b4:fd:2f:d5:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:FB:B9:74:5C:CC:05:25:10:A6:A1:EA:55:D3:F5:1F:C7:D0:44
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/CR77uXRczAUlEKah6lXT9R_H0EQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cf:91:78:49:37:a6:2d:27:c2:cf:2f:5b:d8:13:eb:e3:b0:
52:5d:c6:11:9c:d1:5e:c5:3b:7d:06:93:55:2f:f3:bb:3d:f4:
34:70:58:b4:3c:27:ce:a6:00:0f:ac:ef:f1:39:a9:12:86:f5:
d1:a1:04:ba:bc:d1:f1:cb:fd:1b:4b:1f:d2:58:0a:36:db:cf:
65:93:7f:cb:20:15:9a:52:52:31:a5:4f:b8:62:91:72:3b:f1:
fa:44:f5:fe:86:85:1e:0c:cc:04:e6:c8:43:4b:bf:ae:84:32:
b3:cf:c2:33:54:19:0d:05:93:81:74:2f:bb:ba:d4:a4:7c:e4:
6f:ee:57:ab:c1:f0:1a:a4:c7:a0:19:a3:1d:da:27:4b:c5:cc:
20:df:7d:9e:2a:92:38:cd:8c:e9:a8:84:7d:5c:1b:02:53:ed:
69:65:21:05:43:89:b4:a6:c1:d8:cb:ee:7a:28:18:e0:6b:21:
a5:ae:ce:ca:b8:4c:80:f8:a2:02:87:1a:41:5e:67:c4:35:63:
30:64:c4:60:d1:4f:09:67:aa:2a:f8:55:0e:84:02:b2:22:f6:
f4:4c:2a:2c:6a:d6:56:1f:6c:8e:9f:0b:ac:87:95:86:2d:34:
ea:4b:65:62:6e:14:99:37:19:10:2b:fc:e5:47:db:db:30:31:
e5:9f:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org