Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/1o8TIESvZTw8aVRDa0omJArcdTk.roa
File: 1o8TIESvZTw8aVRDa0omJArcdTk.roa (raw, json)
Hash identifier: ObHslj54XtgsC6njS1Kh/5qRhyEw/EyCrGIdTKY7aho=
Subject key identifier: D6:8F:13:20:44:AF:65:3C:3C:69:54:43:6B:4A:26:24:0A:DC:75:39
Certificate issuer: /CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB
Certificate serial: EE
Authority key identifier: 2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/1o8TIESvZTw8aVRDa0omJArcdTk.roa
Signing time: Sat 22 Oct 2022 00:24:25 +0000
ROA not before: Sat 22 Oct 2022 00:24:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7483
IP address blocks: 103.175.194.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB
Validity
Not Before: Oct 22 00:24:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D68F132044AF653C3C6954436B4A26240ADC7539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:0b:35:8f:c8:95:cf:f5:fd:1d:c6:48:44:
83:ef:72:86:f3:f2:49:7a:08:bc:6f:94:63:02:3e:
47:f4:1e:1e:a6:46:c1:58:dc:83:0d:75:65:c3:96:
3e:46:27:97:d9:ed:1c:d6:50:54:03:56:14:bb:0c:
16:9e:67:4d:d4:13:67:bb:b7:c9:31:0b:83:94:e9:
59:2b:82:6b:8b:41:77:8f:f8:95:73:6a:f3:8f:08:
5b:b0:44:0d:a5:81:15:95:1c:b9:4b:38:ce:f5:15:
45:cf:58:b7:aa:47:7b:4a:66:b1:4a:0f:12:f6:f4:
c2:43:af:1f:1c:e7:01:58:f9:34:66:4d:72:fe:32:
ae:a5:07:2a:9b:ec:bf:58:4d:58:79:81:f3:46:32:
3f:7c:73:8f:ea:0f:a5:9e:52:49:f7:de:a6:04:9f:
ff:f8:9b:bb:49:84:68:c3:09:b9:d2:34:55:48:f1:
ba:1a:17:6d:96:94:ba:72:20:9d:1e:44:29:62:f7:
d3:3e:e1:53:9b:b0:f1:17:25:3d:02:16:82:00:20:
68:b5:eb:d6:21:57:52:57:a4:bc:a1:5d:ff:9b:d2:
1d:f2:8d:36:8b:25:72:17:63:e6:2d:2e:c6:21:5d:
ba:29:76:37:d6:ba:65:74:b3:8e:40:b2:5b:1c:8e:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:13:20:44:AF:65:3C:3C:69:54:43:6B:4A:26:24:0A:DC:75:39
X509v3 Authority Key Identifier:
keyid:2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/1o8TIESvZTw8aVRDa0omJArcdTk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.194.0/23
Signature Algorithm: sha256WithRSAEncryption
95:30:67:8d:d3:c7:09:07:3f:4a:c8:27:7e:b7:bb:63:30:77:
bb:e3:a7:a3:aa:00:ab:d9:7b:90:ef:9c:db:96:dd:10:b7:ae:
1c:64:d5:24:fe:45:5c:bc:18:72:2e:ff:19:55:83:08:0b:7c:
fd:5f:76:76:b4:9c:6f:a5:78:78:40:63:9c:13:e4:86:1e:fa:
48:1f:a8:8d:41:a6:0f:f7:bb:ea:d0:cc:08:86:2d:12:82:65:
b7:1e:71:66:aa:81:ab:65:e2:11:a4:c3:98:ef:c7:2d:1f:8f:
67:1a:be:50:08:74:18:b0:8c:6a:22:ac:8d:2e:04:51:da:37:
22:ff:0d:37:0e:c5:7c:67:7e:78:5c:0d:41:ed:14:94:a3:e5:
2d:77:54:b9:d8:f9:63:f8:85:2f:74:c8:f0:c3:31:57:8f:ff:
c3:9e:7b:e5:fb:97:1f:2e:cb:3a:af:44:ca:90:8d:61:9b:d6:
b1:47:db:3a:2f:d0:bf:cd:c1:bc:3a:4f:ef:40:59:11:ea:83:
af:3f:ad:a7:fc:4e:04:b0:8a:5c:31:5c:06:a0:10:36:f1:27:
21:bc:dc:c4:76:95:89:73:5d:a4:c4:4d:35:d7:e2:3f:2e:ea:
8b:db:bd:25:01:8f:00:28:27:33:ff:89:23:3c:25:c5:a8:20:
ea:d0:2e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:49 2023 by rpki-client on console-ams.rpki-client.org