Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/gOFDl-v9Nr4E5qfDO3fnLG7jqns.roa
File: gOFDl-v9Nr4E5qfDO3fnLG7jqns.roa (raw, json)
Hash identifier: bAmZoEfUW/a0osuKsp6Z0EqD10wV3O4Whu8J7iyXcUk=
Subject key identifier: 80:E1:43:97:EB:FD:36:BE:04:E6:A7:C3:3B:77:E7:2C:6E:E3:AA:7B
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1115
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/gOFDl-v9Nr4E5qfDO3fnLG7jqns.roa
Signing time: Tue 04 Oct 2022 14:35:45 +0000
ROA not before: Tue 04 Oct 2022 14:35:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 14618
IP address blocks: 103.123.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4373 (0x1115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Oct 4 14:35:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=80E14397EBFD36BE04E6A7C33B77E72C6EE3AA7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:03:72:b3:e4:43:6b:90:89:88:0e:ee:f0:
f9:47:06:4a:4f:f1:bc:89:8e:fe:e1:bd:f2:a6:6b:
72:1d:9b:2c:19:a7:e7:24:67:43:90:a2:c3:4c:a5:
90:4f:82:d7:16:5a:78:35:ea:9a:5f:6b:64:d9:16:
8a:b2:70:ea:fe:5c:8d:cc:06:04:c7:8d:94:c5:12:
c5:f0:f5:f7:76:e7:5f:b9:60:78:e8:30:14:31:ab:
9c:14:3d:c9:7d:9e:d4:52:7a:94:24:d0:dd:95:61:
65:84:cf:ec:d7:42:9e:c8:f1:ef:21:93:e1:65:40:
f4:c2:21:cd:81:98:f9:01:59:b1:92:28:4d:45:6e:
ce:38:50:b2:5c:23:98:01:84:28:55:3d:7a:f4:b3:
29:26:1c:ad:07:c4:aa:ca:ac:40:1c:3d:dc:4b:7b:
4b:2b:c2:29:3e:63:8f:a3:8c:53:5e:1a:1a:2d:ee:
db:5b:e0:e3:98:94:77:eb:56:07:87:50:e2:58:35:
5a:6e:d3:36:a3:bf:1d:8c:79:8a:ea:92:74:15:fb:
04:35:11:36:dc:6a:77:be:ad:69:84:74:d9:07:68:
e2:8b:d3:25:97:9a:7a:4b:cc:ab:05:f5:e2:b7:80:
0f:88:64:94:56:11:fc:f4:6a:ad:41:e3:dd:e7:d2:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E1:43:97:EB:FD:36:BE:04:E6:A7:C3:3B:77:E7:2C:6E:E3:AA:7B
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/gOFDl-v9Nr4E5qfDO3fnLG7jqns.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.218.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6e:3a:3f:59:7c:2e:39:83:92:46:2f:2d:1c:8b:f8:6a:5c:
74:c8:85:7b:fc:3d:c2:20:9c:45:16:8c:99:f1:33:45:39:50:
f3:cc:d1:7f:b3:7e:04:51:1f:cd:6f:d0:91:8e:cd:97:c1:d4:
99:f9:f4:6f:65:93:12:f3:2b:d6:15:3f:a7:1d:3d:54:fe:83:
85:bc:59:db:a3:a3:50:e3:26:9f:ad:06:23:aa:50:58:57:0d:
ea:6a:c4:63:e2:0f:63:0c:9c:03:ea:2c:c6:28:a9:48:93:6f:
9d:87:4e:a6:9f:c8:cc:dd:39:55:4f:71:d6:3b:70:bc:c8:b2:
76:8f:f1:ba:f2:bb:26:a2:0e:97:16:58:c7:86:06:cf:31:fd:
6f:bf:a6:4e:01:99:c0:f0:65:da:b8:61:f9:34:25:c1:c1:6e:
6d:d3:d6:f7:0c:35:0c:d3:64:51:da:70:84:69:df:dc:8d:10:
6f:cd:af:00:4a:42:6c:9d:ad:b3:ae:12:62:16:6d:d8:79:d0:
ea:4d:7f:a7:df:70:5e:27:1c:9c:5a:a7:c4:00:04:73:d9:1f:
e1:90:a8:d2:c0:de:b6:8c:b2:18:46:30:3e:a3:37:c4:47:7b:
d1:ed:16:6e:c8:8b:7c:8b:a7:3e:ff:da:84:e8:45:b1:2f:63:
2a:91:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org