Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/eLT6ZUO3EnBPQBy7PmOKsQ4F5ok.roa
File: eLT6ZUO3EnBPQBy7PmOKsQ4F5ok.roa (raw, json)
Hash identifier: 0nYpNhA8wgFPRjkAJWv26BjJhIqFnLw+yfnLtdcKf0g=
Subject key identifier: 78:B4:FA:65:43:B7:12:70:4F:40:1C:BB:3E:63:8A:B1:0E:05:E6:89
Certificate issuer: /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Certificate serial: 10FF
Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/eLT6ZUO3EnBPQBy7PmOKsQ4F5ok.roa
Signing time: Wed 01 Feb 2023 05:32:39 +0000
ROA not before: Wed 01 Feb 2023 05:32:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 23675
IP address blocks: 103.132.156.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4351 (0x10ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Validity
Not Before: Feb 1 05:32:39 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=78B4FA6543B712704F401CBB3E638AB10E05E689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:b1:cc:9c:1a:41:38:4b:c9:ac:55:d3:e1:
c3:00:f1:66:0d:f3:b9:84:30:ec:43:c5:4f:85:8b:
fa:52:18:0f:20:2f:1b:94:01:89:6d:f9:f4:49:eb:
9d:09:b0:40:d9:ee:f2:9f:4f:ee:64:e1:91:a0:c1:
15:01:60:a7:c8:e7:db:c4:bd:af:c5:48:b8:70:72:
be:25:53:26:2a:71:f7:55:63:b8:05:5f:f7:05:39:
59:7b:5c:7c:3e:84:76:1c:09:b1:f9:e3:15:9c:73:
0a:c0:7c:00:de:54:41:c1:79:9d:da:d8:61:fc:72:
a6:8b:d2:a9:b7:20:c9:6e:ad:e3:b3:f9:60:93:2c:
4e:07:22:4d:e7:84:66:40:c2:d5:a6:9f:29:a6:4c:
1c:3e:2b:90:b5:05:bb:95:2a:09:45:ef:b1:a3:d3:
e9:c8:9a:aa:af:e3:51:05:4e:04:e7:2a:44:5a:08:
f9:7a:fd:d8:8d:10:8c:c6:f6:7f:1b:d4:7e:56:e4:
f5:d3:c3:cb:dc:74:ff:39:1a:f2:dd:ee:bc:db:9e:
df:f8:99:b6:22:6e:22:f0:cb:19:37:9e:b3:6d:f1:
c7:65:4f:7c:82:15:c4:1a:4d:6d:04:6a:59:6d:a9:
8f:7e:b9:f9:d2:03:ee:78:0f:84:31:34:46:80:5b:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B4:FA:65:43:B7:12:70:4F:40:1C:BB:3E:63:8A:B1:0E:05:E6:89
X509v3 Authority Key Identifier:
keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/eLT6ZUO3EnBPQBy7PmOKsQ4F5ok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.156.0/22
Signature Algorithm: sha256WithRSAEncryption
41:e1:da:54:17:7d:e1:b8:1a:9a:6c:a8:f0:05:b1:7d:e9:61:
82:16:21:d8:c4:dc:71:d9:ca:0a:89:81:f3:bc:b4:03:ac:72:
8a:0c:cc:93:36:77:76:31:73:0c:28:ae:b0:01:7b:01:da:d9:
0c:8d:4a:0f:6b:3b:20:1f:52:0a:81:f8:cc:cf:b7:44:62:c0:
7d:e2:90:3e:65:e0:7b:6b:ed:f5:76:70:68:1d:4c:9d:71:87:
52:36:a1:9c:49:e0:26:30:61:58:b2:58:07:94:f6:75:c1:75:
6f:49:7a:3e:fb:eb:d6:1e:1a:fb:48:41:5c:d2:3d:13:a7:4f:
4d:bb:f5:b5:a6:38:0b:33:7c:74:22:33:fb:45:94:03:b5:f0:
72:62:81:42:f6:36:29:d5:56:99:89:88:53:1b:6a:57:54:f3:
1c:1e:a8:45:46:73:22:a9:df:ea:bf:db:78:e4:09:15:00:55:
b9:53:14:f6:38:ec:fd:86:9b:fd:0d:93:eb:95:66:19:b6:f3:
25:24:a6:c6:ae:e7:de:96:17:d1:71:39:e1:17:61:45:1e:b0:
87:fb:e0:74:60:0f:5f:20:64:84:f1:42:eb:c0:c4:87:9d:e4:
2f:fe:9e:f8:81:89:c9:af:39:1f:26:27:b0:4a:f6:89:e1:4d:
0a:8c:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:58 2023 by rpki-client on console-fra.rpki-client.org