Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/OuMJCqEL2LnzxZ75vimCwFK0gsE.roa
File: OuMJCqEL2LnzxZ75vimCwFK0gsE.roa (raw, json)
Hash identifier: y4WaguU0WSsaH7f3nPCLDdZrxxNgd+pbRic1wdzudP8=
Subject key identifier: 3A:E3:09:0A:A1:0B:D8:B9:F3:C5:9E:F9:BE:29:82:C0:52:B4:82:C1
Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Certificate serial: 0644
Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/OuMJCqEL2LnzxZ75vimCwFK0gsE.roa
Signing time: Thu 15 Sep 2022 02:47:46 +0000
ROA not before: Thu 15 Sep 2022 02:47:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131677
IP address blocks: 103.149.64.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Validity
Not Before: Sep 15 02:47:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3AE3090AA10BD8B9F3C59EF9BE2982C052B482C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:4e:f3:90:c2:78:0a:bb:2d:b1:fe:05:15:
ca:6c:4b:6a:d9:71:cb:22:bd:b5:f8:65:21:21:90:
63:28:07:cb:59:72:a4:56:8d:56:0a:b4:ae:d7:97:
0d:73:9f:e2:0c:38:d2:1f:70:06:cc:60:53:e8:85:
c0:91:ed:50:19:cd:da:a5:8c:8a:d5:63:4c:8c:5c:
60:94:d6:e0:2f:25:58:88:9b:bf:d1:9d:da:68:0c:
86:9a:28:02:cc:34:d6:21:f9:b6:b6:e1:fb:04:57:
04:b7:38:d4:bb:7a:ae:ec:d2:ec:df:03:00:57:e6:
fa:de:a4:af:cb:42:d5:b9:04:5f:2c:0d:68:31:da:
2b:99:72:97:72:00:4d:04:35:d9:96:45:db:64:5a:
0e:c0:4a:75:1f:5a:43:90:3b:4b:62:2d:a6:18:7a:
2d:ec:a1:1f:87:48:53:a2:6d:88:94:bb:a7:a6:25:
0e:ea:a1:88:57:89:dc:49:58:73:5c:b8:39:f3:13:
9d:67:e1:7a:f8:5c:b2:be:96:13:33:8d:28:b3:cf:
1d:71:82:21:89:1a:09:6d:05:93:7a:a1:93:fd:c9:
2d:7b:c8:79:ca:aa:81:76:df:d6:ea:b8:84:bf:60:
f8:b4:35:8b:bc:60:95:89:2b:b0:ca:ce:9e:04:be:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:09:0A:A1:0B:D8:B9:F3:C5:9E:F9:BE:29:82:C0:52:B4:82:C1
X509v3 Authority Key Identifier:
keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/OuMJCqEL2LnzxZ75vimCwFK0gsE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.64.0/23
Signature Algorithm: sha256WithRSAEncryption
83:22:5d:3d:1d:6f:e8:d1:16:8c:5c:df:1f:29:59:61:d1:e6:
dc:95:34:b1:65:62:7b:d6:3e:f7:e7:61:81:2e:97:49:7e:86:
e7:6f:a6:75:16:ec:a5:78:ef:bb:eb:8c:06:73:f0:6c:b5:5a:
a3:c2:d3:fa:a0:db:c8:fb:d5:ae:ec:c8:ee:1e:e1:83:85:e4:
67:3b:a8:d1:37:2e:07:3a:5a:ad:30:9c:14:34:31:aa:a3:9c:
38:b0:10:b8:f2:df:7b:df:fc:f3:af:8c:63:34:16:29:e2:42:
26:1a:ad:8b:b3:88:05:f3:79:6e:e0:09:df:b9:14:0a:c3:f0:
90:cd:23:68:35:f3:63:dd:e8:a5:18:6c:d2:e9:a9:62:f1:aa:
da:05:99:9b:47:5d:38:7a:d5:46:70:0a:18:ff:72:32:f2:31:
58:e3:58:a3:53:42:dc:4e:7d:7a:25:b8:c0:a9:e7:51:46:a2:
e6:c4:55:4e:0e:46:b8:44:6d:57:aa:41:c6:fc:59:fc:88:40:
d7:72:27:5c:b6:25:98:fa:ce:fb:b2:1a:ba:36:a5:fe:34:e1:
24:ae:e0:9a:e0:a5:fb:6d:bf:52:0e:8a:c7:32:81:29:8b:fb:
91:c4:d2:30:14:97:98:d2:d4:e7:54:ae:d3:a8:48:cb:1e:72:
18:d5:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org