Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/PHSOsBLSxOJbczc0Zd-OEcYwyOY.roa
File: PHSOsBLSxOJbczc0Zd-OEcYwyOY.roa (raw, json)
Hash identifier: EDwoR/Ap5xQGHYtYynWHaPV24K4PGl/Tb/mJ5ss/TdI=
Subject key identifier: 3C:74:8E:B0:12:D2:C4:E2:5B:73:37:34:65:DF:8E:11:C6:30:C8:E6
Certificate issuer: /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial: 04C5
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/PHSOsBLSxOJbczc0Zd-OEcYwyOY.roa
Signing time: Fri 24 Feb 2023 05:54:40 +0000
ROA not before: Fri 24 Feb 2023 05:54:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9678
IP address blocks: 103.152.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Validity
Not Before: Feb 24 05:54:40 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3C748EB012D2C4E25B73373465DF8E11C630C8E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:dd:c3:f9:24:bd:dc:35:df:e0:84:20:12:
6f:5f:72:e6:5a:33:50:cd:44:50:91:04:ea:12:12:
03:76:0a:fd:bd:04:1a:a0:4c:59:c5:f0:e6:07:27:
66:7c:e7:fc:f8:1c:88:7b:e6:09:53:60:f0:b2:24:
a9:da:cc:49:f3:98:ec:62:55:5a:d0:c1:e2:f2:ce:
51:40:f8:b3:b2:c1:cb:70:6c:9e:a3:0b:77:69:65:
11:f4:65:30:ff:51:78:bd:65:b8:bf:b0:e5:d4:1d:
f7:7e:4a:31:2c:24:f4:7e:eb:19:e5:cd:a2:15:09:
ca:d5:54:2b:12:84:35:71:19:11:8b:2a:20:cb:da:
71:60:c8:c2:d2:25:03:26:80:15:2e:35:f3:8f:8c:
09:8a:32:1b:90:20:e3:14:36:6d:b7:5f:fe:cc:b2:
0e:39:a8:03:7e:53:25:03:78:fa:63:23:0d:5a:97:
de:34:2c:f1:1d:38:e0:c7:4a:00:96:47:0f:a3:d4:
19:27:47:fd:a9:af:42:2c:dc:e9:e3:68:69:83:3d:
89:7b:23:01:a8:d9:68:ac:e7:11:f5:0a:30:d3:ca:
ba:c6:a8:21:54:b3:94:78:ea:7d:ea:d6:ed:f7:d3:
04:4a:3a:c5:02:35:86:1b:72:e8:ac:94:88:62:1e:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:8E:B0:12:D2:C4:E2:5B:73:37:34:65:DF:8E:11:C6:30:C8:E6
X509v3 Authority Key Identifier:
keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/PHSOsBLSxOJbczc0Zd-OEcYwyOY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.150.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b3:9a:f0:bc:8f:2e:8b:27:3b:93:50:66:81:0d:77:19:94:
a4:58:b5:30:23:fa:f8:5e:ff:bf:9c:97:a6:47:9f:03:4e:d0:
81:fd:27:64:f9:92:7f:d9:49:37:8f:57:2d:d9:0b:d8:65:e2:
dd:bf:98:97:b2:c9:ef:01:ed:6e:50:d0:26:cc:31:5f:be:3c:
59:06:c7:41:22:45:31:da:54:3b:87:63:fb:2c:98:cf:fa:91:
d3:a2:34:dc:e7:0e:11:a2:d7:59:17:35:6a:f0:af:21:af:a4:
3b:dd:a0:c3:a0:bf:91:61:7b:f2:82:fc:69:21:47:22:06:ca:
e6:81:be:35:35:f5:c4:08:d4:3a:01:f7:e3:08:d4:ca:0e:1d:
ed:1b:b3:f2:51:ce:68:03:af:b6:83:23:0d:a1:6d:63:d0:68:
ca:93:6d:4c:37:c0:91:90:b0:75:80:51:24:e7:51:ac:fc:93:
73:72:e1:38:e9:90:00:d6:aa:97:a8:d8:4f:b9:62:61:1f:04:
4f:e8:f1:40:59:24:25:10:32:ca:42:50:24:5c:04:ae:7f:e6:
35:a6:73:18:87:e3:69:e9:26:f5:4b:d0:c1:e4:66:c8:00:2e:
b8:2c:6d:77:97:ed:31:85:a3:a7:67:fc:aa:86:eb:f0:75:03:
3b:2b:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:51 2023 by rpki-client on console-ams.rpki-client.org