Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/lVgLmj9LZUWfzMIVz8W_fmYwFdc.roa
File: lVgLmj9LZUWfzMIVz8W_fmYwFdc.roa (raw, json)
Hash identifier: zaoqwOBAcjLz/9w+cRv4+BoiMmWfR1p6AUz1BYX9OJc=
Subject key identifier: 95:58:0B:9A:3F:4B:65:45:9F:CC:C2:15:CF:C5:BF:7E:66:30:15:D7
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0471
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/lVgLmj9LZUWfzMIVz8W_fmYwFdc.roa
Signing time: Thu 15 Sep 2022 02:35:03 +0000
ROA not before: Thu 15 Sep 2022 02:35:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9678
IP address blocks: 103.98.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Sep 15 02:35:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=95580B9A3F4B65459FCCC215CFC5BF7E663015D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:17:4f:4c:01:15:14:64:9f:92:dd:e0:e7:
63:1f:ad:e4:3a:8a:ba:2d:57:0a:72:d1:92:72:5b:
c8:df:76:42:db:ad:54:b1:e7:4e:e4:74:c8:de:18:
16:21:54:93:20:40:16:c7:98:2e:56:34:a6:dc:00:
a0:97:52:58:63:4f:5b:e6:2e:c2:21:ad:c4:e2:3e:
3b:c1:c2:1e:cc:6d:23:b1:84:8b:d6:9e:15:76:28:
f1:22:c3:be:f6:03:1d:9b:8c:dd:82:85:70:e8:c5:
06:35:aa:f6:75:ee:80:01:13:73:99:b2:a7:0e:82:
8b:55:fe:b8:76:6f:00:3e:d8:a4:a0:5e:cb:90:3f:
07:29:5b:c3:63:d0:01:8e:53:5a:aa:be:05:81:51:
2a:d3:cf:d0:96:94:35:e9:70:2c:3a:32:6a:73:c2:
b0:b9:e2:32:49:6e:b9:83:07:1b:17:84:cd:df:ce:
54:d2:90:f3:f6:1b:8b:77:41:5e:2a:ff:34:9a:5a:
54:ab:5b:cd:69:0f:0e:e1:cd:ef:64:07:43:0c:90:
bb:cb:6d:e4:15:37:6f:0c:9c:0a:cc:8a:91:62:b6:
73:0b:50:86:b1:17:be:16:fa:6d:50:62:27:e0:cd:
ef:91:02:19:3a:ab:72:d4:be:d1:84:6f:db:39:8d:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:0B:9A:3F:4B:65:45:9F:CC:C2:15:CF:C5:BF:7E:66:30:15:D7
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/lVgLmj9LZUWfzMIVz8W_fmYwFdc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bb:45:35:8d:0e:d4:b7:5f:cb:f9:6a:ab:88:9e:65:8e:58:
4b:c3:5e:47:4f:9b:51:6e:78:06:6d:ac:e8:cd:45:12:42:86:
8d:d0:c6:a8:e6:73:85:d6:9a:ba:5c:e9:df:c2:fa:00:5d:7d:
d6:ca:ea:0e:3f:68:5f:66:ac:28:cf:95:b2:ad:69:34:14:69:
a7:0f:b0:d4:cc:23:3d:9f:8a:73:5f:c0:fe:c9:b7:c9:0e:3e:
c7:ce:0b:f0:5d:fc:50:55:5e:8e:03:ca:a4:f7:1e:93:64:bd:
f2:9d:d5:d4:a8:b6:9c:a3:a5:96:bf:41:71:cf:82:d6:8a:85:
b4:8f:0f:26:29:f8:03:da:9e:60:e5:bc:d4:51:46:3a:38:8e:
82:6b:38:c2:c2:59:47:6a:71:bb:17:80:69:74:00:66:c9:ad:
dd:cf:e6:64:a2:cd:5e:e2:38:08:66:8d:2c:2f:5d:2d:ad:28:
b5:44:93:96:9a:36:88:f4:d6:dd:38:f6:18:1b:8c:b3:a2:b7:
a8:8a:7c:88:24:fe:54:2f:a7:71:78:77:7a:89:44:dd:9e:47:
7c:d5:3c:ec:50:06:d2:e4:7b:c8:27:09:3c:8a:f4:ec:8c:69:
57:b1:f6:cd:ad:54:3c:3d:1c:dd:26:81:a3:e4:5d:d3:bc:bc:
10:d5:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:41 2023 by rpki-client on console-ams.rpki-client.org