Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/CR510CW_QjPyptZXhiZginnkfoQ.roa
File: CR510CW_QjPyptZXhiZginnkfoQ.roa (raw, json)
Hash identifier: 3Y5V7mP4rKuJzo6yInL26PafI6KhbqyuzRAlspzDF4o=
Subject key identifier: 09:1E:75:D0:25:BF:42:33:F2:A6:D6:57:86:26:60:8A:79:E4:7E:84
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5714
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/CR510CW_QjPyptZXhiZginnkfoQ.roa
Signing time: Thu 15 Sep 2022 02:47:40 +0000
ROA not before: Thu 15 Sep 2022 02:47:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 103.131.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22292 (0x5714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Sep 15 02:47:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=091E75D025BF4233F2A6D6578626608A79E47E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:f6:14:4c:56:ed:14:b5:ea:59:f7:4e:56:
59:10:55:09:69:55:f3:4f:5a:27:bc:ad:04:2a:db:
35:94:90:33:ae:fa:aa:ef:3e:a4:29:47:34:1d:c7:
75:79:79:01:15:c2:d6:60:65:e2:3f:f7:ec:2f:6e:
5d:8e:09:38:a0:a2:2d:a9:db:80:76:50:a3:f3:bf:
d5:89:7b:93:16:3d:35:48:26:6a:a0:f0:d2:4a:04:
f2:9b:1f:73:7e:4d:4b:5e:95:72:f9:5e:26:a3:62:
7d:d1:d8:9b:47:93:02:14:5d:f3:71:8e:66:89:96:
83:e8:22:ec:dc:55:da:de:9e:31:fa:e9:0c:d5:64:
78:6f:68:10:24:08:7f:c9:fc:00:2a:c7:61:e0:b0:
83:07:48:67:a3:a1:ac:78:78:0a:39:a5:58:34:30:
ab:5e:eb:7a:1a:09:0b:3e:10:4b:e1:ff:14:d9:9f:
ce:3f:f7:f1:1f:bc:4e:9e:a8:a3:c8:07:3f:ca:c3:
29:25:d2:52:58:ab:17:ee:86:e0:20:eb:03:db:43:
6f:e1:2d:6f:74:ea:c4:e8:d0:8f:31:eb:fa:30:bc:
9b:d0:83:66:a7:d4:d5:71:3e:50:44:d1:39:84:5d:
07:0d:0e:e4:85:9a:c2:23:52:82:9a:f6:8f:b7:3f:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:75:D0:25:BF:42:33:F2:A6:D6:57:86:26:60:8A:79:E4:7E:84
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/CR510CW_QjPyptZXhiZginnkfoQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.172.0/22
Signature Algorithm: sha256WithRSAEncryption
16:61:53:04:c9:f5:fe:84:d6:6a:0f:e1:de:d7:2b:27:54:40:
38:f8:10:32:c0:23:f7:ed:a4:f3:2a:56:b4:cf:70:92:fd:b9:
4f:46:3c:8e:20:77:4b:90:24:20:43:40:df:44:b5:63:ec:60:
7c:1f:e7:ca:48:39:e4:d2:ee:89:50:c6:e8:1f:a9:cf:59:b3:
d8:b5:7f:68:2e:45:b0:c6:43:d4:ae:96:d2:92:4c:fa:b7:b1:
e4:80:f2:47:0a:57:20:f1:28:60:6b:d7:38:04:6b:19:66:bc:
f8:d6:4d:fa:32:75:92:71:02:c8:88:f7:1e:d4:ee:d6:dd:0b:
19:34:ab:d0:1c:21:a4:e6:c0:75:ff:d4:b8:b7:89:5d:ca:21:
7e:af:44:c2:9e:79:82:b6:0a:85:59:e2:37:cd:e0:3a:46:46:
d2:d2:83:b4:7b:02:59:6e:27:f6:b9:58:ef:f2:9b:6d:64:f7:
bc:32:53:07:57:9e:75:21:f2:1f:51:19:77:ce:12:72:1c:8a:
5f:11:4e:7b:8d:47:7d:20:6f:4d:31:7e:6c:37:c2:0c:09:0d:
cd:05:e8:a8:69:96:79:8d:35:00:dc:b5:59:2a:cc:41:bb:d9:
a1:07:bb:e4:50:e2:1f:92:c5:a1:2a:e6:03:49:fa:7a:73:bc:
4a:bf:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org