Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/vtnWjlIzpzoqN-moVp6_AY88Ig0.roa
File: vtnWjlIzpzoqN-moVp6_AY88Ig0.roa (raw, json)
Hash identifier: tsYAwRlj4GHLSpY2DYSePOio7XSuVhYUqnqGdk5K5ug=
Subject key identifier: BE:D9:D6:8E:52:33:A7:3A:2A:37:E9:A8:56:9E:BF:01:8F:3C:22:0D
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0471
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/vtnWjlIzpzoqN-moVp6_AY88Ig0.roa
Signing time: Thu 15 Sep 2022 02:35:04 +0000
ROA not before: Thu 15 Sep 2022 02:35:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9678
IP address blocks: 103.98.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Sep 15 02:35:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BED9D68E5233A73A2A37E9A8569EBF018F3C220D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:61:1e:ea:b6:7c:cb:8f:46:2c:ec:05:69:
89:0c:e1:5e:12:2b:c9:6f:41:50:a1:84:ed:67:e5:
d1:43:d1:30:c0:84:f0:27:47:0d:5f:1e:a3:04:c3:
8c:50:7e:17:5e:3b:3c:03:e7:67:32:40:21:6f:8a:
e9:9d:a8:3d:0c:28:f1:5f:6b:5d:42:77:68:e3:e9:
83:e9:06:40:b1:b3:59:f0:2b:52:63:91:0e:ef:3e:
02:61:99:ba:99:57:84:fb:07:49:5e:ec:5a:4c:c6:
c4:11:87:34:e2:8d:bf:8c:45:8d:0f:e8:71:1a:87:
70:fe:18:f5:5d:79:6b:e0:5b:0c:f9:b5:05:ff:e7:
f4:34:1a:85:78:4c:3e:d9:b2:6b:3c:4e:53:b0:8c:
b2:0e:d8:90:58:37:61:a0:7b:1c:b0:b0:03:34:dd:
4f:e5:4d:da:c8:96:65:3c:f8:de:6a:fe:e9:24:8d:
a7:dd:4b:2f:18:cb:14:aa:9e:82:e4:64:c1:56:9b:
79:47:5b:bd:8d:ca:14:bf:58:d2:8e:0c:d3:9b:8d:
9e:23:76:f9:53:16:bd:b7:5b:de:5b:88:7e:14:5e:
a0:ac:cd:d6:c9:64:0c:02:2f:97:b0:98:8a:98:8e:
66:c6:10:dc:e7:82:16:c8:84:28:ad:b1:4f:27:ce:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:D6:8E:52:33:A7:3A:2A:37:E9:A8:56:9E:BF:01:8F:3C:22:0D
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/vtnWjlIzpzoqN-moVp6_AY88Ig0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e4:49:7a:65:e1:8b:8b:c0:c4:32:0f:3f:e6:1d:01:70:be:
81:9d:73:24:87:44:fa:c7:15:a3:b5:e2:b8:87:88:44:fa:f9:
0b:2f:a5:0a:b0:03:c8:0c:0d:01:7a:51:fd:62:64:59:6a:b1:
a1:ac:56:e9:39:7d:b1:63:ff:41:eb:e0:e1:af:e1:2f:ac:c0:
4f:f0:84:c5:c8:e7:9a:b4:d5:b4:a6:5f:83:43:40:c7:b9:b8:
d9:69:73:32:19:65:1c:25:09:fc:cf:6a:b3:b6:02:29:b4:49:
e5:94:a9:70:e5:c6:59:82:c2:8a:db:ad:2d:80:c0:21:76:46:
d0:1c:62:c7:42:fe:61:6a:db:83:b9:00:32:a0:96:cf:d2:7a:
11:1d:bf:50:14:b7:0f:1b:eb:45:6a:7c:3b:27:4a:e5:62:da:
81:ae:e4:7d:2c:ad:a7:01:24:6e:41:62:d5:dc:c9:fa:a3:c2:
7b:9c:81:27:01:e8:f4:5b:5e:70:ab:96:fb:08:f3:e5:e5:36:
fe:b3:80:cb:e3:b6:a8:42:44:c8:35:a4:6f:5c:d2:02:71:46:
b1:29:eb:c4:2e:58:e8:dc:1c:36:25:4b:57:9e:99:dd:a5:c9:
fd:ec:37:d4:fe:54:93:50:f5:c0:0f:b6:6b:d7:7c:bd:e7:97:
a1:90:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org