Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/dxXcL3KByckELkjhX3heCM98UM0.roa
File: dxXcL3KByckELkjhX3heCM98UM0.roa (raw, json)
Hash identifier: wnl98vTCaVYOIKjSOBp9ENj5iOLxs78VK/EWm9B8jwU=
Subject key identifier: 77:15:DC:2F:72:81:C9:C9:04:2E:48:E1:5F:78:5E:08:CF:7C:50:CD
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 0A36
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/dxXcL3KByckELkjhX3heCM98UM0.roa
Signing time: Thu 15 Sep 2022 02:49:13 +0000
ROA not before: Thu 15 Sep 2022 02:49:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 103.252.128.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: Sep 15 02:49:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7715DC2F7281C9C9042E48E15F785E08CF7C50CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:59:70:83:fb:de:64:2d:fa:b5:49:55:1f:
5f:67:ae:c5:13:c5:78:c2:cc:e4:f3:2e:8d:5a:0f:
16:cc:de:82:0b:0d:2b:e7:1f:de:34:a8:f9:30:e1:
f1:2c:15:b8:3f:ba:80:5b:e8:14:b0:c9:9f:55:f3:
82:ee:4c:04:bf:96:57:67:8e:73:01:71:28:e8:19:
67:e9:0f:5d:88:6d:df:40:c3:15:ee:a0:0b:78:f3:
4a:6a:e6:2c:c7:02:80:d2:44:28:7c:e7:49:62:e9:
fa:b8:7b:71:6c:ac:be:dc:9b:95:ce:6a:43:08:2a:
c6:4f:45:7e:d9:12:dd:0c:03:3b:13:6e:a2:5e:21:
f3:9a:07:a2:8d:29:a3:4c:2f:39:5b:33:66:a9:1a:
70:a7:fa:c8:79:61:14:ce:57:1e:88:04:d8:17:66:
fe:dd:9f:91:ee:9f:4e:2a:7e:d8:d9:52:86:03:cd:
b0:13:ed:1a:d9:4d:01:a1:24:37:c4:af:68:c2:a7:
0f:c3:73:a3:f0:17:68:48:93:35:b7:37:19:6d:3c:
bd:78:e0:18:3f:06:5b:ef:08:d2:b3:7c:36:2f:84:
82:f1:94:fd:6a:15:43:4b:45:c2:e5:05:82:a8:82:
45:3e:89:7a:ba:ba:a9:c2:16:a7:8c:f9:a7:ad:08:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:15:DC:2F:72:81:C9:C9:04:2E:48:E1:5F:78:5E:08:CF:7C:50:CD
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/dxXcL3KByckELkjhX3heCM98UM0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ed:f7:8e:17:c0:e5:57:15:bc:4b:6d:f4:cc:2a:5d:a2:0e:
f4:89:ab:e2:f7:bd:76:fa:a5:9f:dc:c7:ee:8b:a5:bc:29:46:
3b:64:ed:f7:cd:86:81:e7:ae:85:f7:65:08:a1:f8:25:e1:3c:
50:d3:64:b8:75:04:48:c5:4b:e2:65:52:aa:fe:bb:16:21:2d:
63:63:6d:9a:ed:50:2d:be:46:84:bb:3b:29:4d:a6:67:e2:cb:
d2:b4:80:0e:8f:85:5e:f9:09:a6:17:ff:eb:35:c9:10:8f:e1:
20:3c:3c:41:0d:a9:e9:9c:bb:b6:32:4d:d9:66:e0:e5:61:c3:
03:b9:71:da:74:2b:95:7c:c7:ac:dc:d1:90:b1:a5:5d:a2:ba:
bb:ab:09:4e:a0:05:f3:66:2a:06:b4:cf:51:d5:59:56:da:5d:
25:4a:0c:4a:07:aa:3b:b1:e9:cb:82:8f:fb:84:44:68:ff:73:
3d:07:69:33:43:79:cc:0a:b6:0f:60:50:3f:30:47:1b:ae:d7:
da:8e:ba:b2:ec:05:b5:58:71:18:a5:f2:f5:79:57:96:9e:f7:
6a:c1:92:22:75:42:df:b5:ce:84:12:95:8a:de:ef:4b:38:dc:
00:c5:bd:8f:fd:64:ff:9f:cd:40:51:20:58:35:2d:86:7a:b3:
9d:fb:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:41 2023 by rpki-client on console-ams.rpki-client.org