Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/9_3XSTkJMLhEl77JUpL6z0GFl2w.roa
File: 9_3XSTkJMLhEl77JUpL6z0GFl2w.roa (raw, json)
Hash identifier: fX2I+HCVs/huYVCU6AU+3SZxsPbQyP9s9KrygkE6754=
Subject key identifier: F7:FD:D7:49:39:09:30:B8:44:97:BE:C9:52:92:FA:CF:41:85:97:6C
Certificate issuer: /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
Certificate serial: 0A44
Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/9_3XSTkJMLhEl77JUpL6z0GFl2w.roa
Signing time: Thu 15 Sep 2022 02:34:51 +0000
ROA not before: Thu 15 Sep 2022 02:34:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131618
IP address blocks: 103.122.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2628 (0xa44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
Validity
Not Before: Sep 15 02:34:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F7FDD749390930B84497BEC95292FACF4185976C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:13:0f:01:f3:8c:89:5d:80:49:af:a3:2b:
d9:83:33:49:56:71:fb:68:80:a9:81:13:ba:28:16:
b9:be:8e:05:a3:c2:1a:8d:20:5a:c8:76:5a:27:2b:
15:b6:66:79:fa:3a:e3:c0:42:1c:77:fa:d8:f8:4a:
5c:07:0e:df:d3:e0:b1:0f:14:4b:62:ef:eb:f0:27:
bb:02:b2:8d:a2:13:9f:39:c4:44:f3:df:01:d9:7d:
2d:b7:d9:f6:e3:88:93:a5:e6:e7:1c:33:7f:aa:68:
ba:e6:a8:68:c7:77:a0:6c:dd:c6:10:89:f5:49:ce:
a6:e1:c1:a8:a9:f5:49:87:47:19:f3:fd:72:b4:52:
8d:dd:6b:a2:44:b0:78:c5:1f:20:9a:c1:db:7c:61:
82:71:5b:a8:97:41:3e:b1:de:be:51:89:83:37:c3:
f0:3a:ad:b3:ab:82:d1:15:e3:54:3d:4b:d0:f8:00:
18:5e:b5:61:6f:d4:3a:ac:f9:a6:4e:8c:3c:5f:3d:
ff:f1:1b:17:81:a8:ff:70:9f:37:de:64:5c:49:1a:
c9:99:99:d4:4b:73:81:4f:4d:3d:c2:3a:49:52:4b:
b6:c3:d2:3d:42:06:e3:30:8c:1e:c9:8d:29:49:63:
2e:0f:3a:cf:6b:47:e1:4b:af:4d:0d:05:3d:b3:c1:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:D7:49:39:09:30:B8:44:97:BE:C9:52:92:FA:CF:41:85:97:6C
X509v3 Authority Key Identifier:
keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/9_3XSTkJMLhEl77JUpL6z0GFl2w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8b:66:90:aa:a6:c3:6b:19:53:0c:cc:24:8b:5c:52:f9:cf:
5a:41:b1:04:8a:2d:cf:83:83:0d:d8:5e:44:a8:37:30:de:a8:
d7:89:b1:30:8a:e2:e1:a8:85:af:9e:c5:f3:c5:3d:76:42:6c:
b2:b8:32:a5:12:36:b7:fe:ed:d3:07:0b:a7:3a:44:a3:53:16:
f8:ba:81:d4:93:0e:f3:c3:e6:62:71:88:97:77:25:50:67:df:
08:c6:58:7b:06:97:be:da:48:ba:4a:3d:73:7a:9b:61:0c:ff:
2e:03:95:40:d4:60:7f:e9:df:32:a6:05:40:9a:39:02:cd:47:
24:f7:59:cb:14:35:4f:6a:a2:a6:d3:8e:2c:d3:8e:3e:97:a4:
56:14:9f:0a:5a:6b:e6:f1:db:6b:43:fb:d1:fa:23:75:97:94:
15:27:24:41:b1:9d:fa:e8:bd:c9:38:59:5a:e6:fa:0e:33:55:
d8:74:1f:19:0b:ac:20:d6:c9:f6:c2:43:b4:85:86:d5:df:f0:
f4:70:16:31:c8:bc:18:eb:5f:58:11:54:91:6b:d6:2a:5c:eb:
f3:12:82:5e:26:14:43:f8:1e:4b:34:d1:12:30:c6:ac:29:f3:
3f:35:4f:9e:52:7d:0e:2d:24:8c:bf:02:29:46:54:d7:7f:8e:
00:d5:18:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org