Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/Xq-ZLew0aFim5DiABtSnfkERFjo.roa
File: Xq-ZLew0aFim5DiABtSnfkERFjo.roa (raw, json)
Hash identifier: 64x4ZeJmGHn+S1HXqjgh0a7PV+v50HE2onIfHVYkFas=
Subject key identifier: 5E:AF:99:2D:EC:34:68:58:A6:E4:38:80:06:D4:A7:7E:41:11:16:3A
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 10AD
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/Xq-ZLew0aFim5DiABtSnfkERFjo.roa
Signing time: Thu 15 Sep 2022 02:49:16 +0000
ROA not before: Thu 15 Sep 2022 02:49:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131636
IP address blocks: 103.130.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4269 (0x10ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Sep 15 02:49:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5EAF992DEC346858A6E4388006D4A77E4111163A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:be:8d:d4:51:06:2c:92:f5:df:0c:f0:ea:
fb:0a:99:c1:94:b7:7d:36:f7:f6:13:38:60:10:75:
6a:84:8c:53:18:20:4f:e8:8c:c2:61:f5:74:f5:10:
e2:8a:0b:60:ac:ad:2d:0a:ec:2e:11:60:bc:9c:d5:
25:a2:90:22:d0:9e:23:28:2c:7c:de:d0:65:a0:d4:
b0:91:c4:20:3d:b8:07:02:4c:70:02:3c:aa:4f:5c:
d8:25:f1:66:1f:f3:61:a5:90:9f:77:da:fc:5b:b2:
be:b7:e5:62:ad:2d:ee:63:26:8b:d2:8a:c9:43:95:
7c:30:c7:52:4e:ca:5c:63:45:1c:66:fd:1e:1b:24:
84:8b:78:d8:18:38:68:f0:c8:17:68:f8:3a:06:7d:
0d:f4:5b:b5:c3:8d:67:0f:e1:66:63:1d:4e:af:da:
d2:9d:8c:2c:a3:49:2d:aa:f9:fb:ff:7d:ce:7f:c2:
b0:2f:ad:8c:49:19:35:12:1d:dd:b5:93:7c:ba:4f:
9f:4e:7e:94:95:84:c0:90:6c:8c:98:03:52:67:22:
9c:82:08:de:97:6c:96:2f:e9:f5:34:60:81:ef:07:
1c:37:12:8a:b4:1f:9a:7e:cd:2b:33:de:9a:95:cd:
21:05:02:a3:ee:4f:7d:4c:65:7f:90:4f:bf:38:32:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:99:2D:EC:34:68:58:A6:E4:38:80:06:D4:A7:7E:41:11:16:3A
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/Xq-ZLew0aFim5DiABtSnfkERFjo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.127.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2d:47:a1:74:0f:f8:48:b3:a0:71:6b:21:05:43:ef:d3:05:
c4:24:3b:bd:fa:f1:5d:57:6e:c5:41:1a:01:54:02:15:53:fe:
19:e2:79:7d:95:e0:99:4d:9c:f5:b8:bd:49:cf:31:de:8d:46:
be:b8:41:b4:49:eb:f4:99:ea:fb:47:aa:7f:70:50:78:39:81:
f0:b8:ba:ea:1f:82:ba:49:30:58:44:83:70:b8:29:da:00:6b:
a7:8f:bc:f2:07:91:69:f8:9c:35:45:f4:eb:c6:ce:6c:f0:c1:
46:3e:4a:66:43:57:60:06:4c:ad:ee:3e:13:94:e3:6f:83:ad:
47:35:2a:27:60:1b:b6:45:89:8f:61:76:51:f0:e2:db:fb:d9:
ed:b5:23:c9:51:ec:8c:97:56:8a:6b:b0:13:5d:6d:e9:e9:c4:
2d:7c:6d:61:5f:cf:c4:f5:8d:1f:ae:1d:1b:74:6d:8c:c6:08:
c9:02:d0:39:47:a6:0e:2f:b7:35:6f:82:db:04:11:43:02:8f:
7c:3c:9a:f1:ad:90:d1:f7:d0:0b:db:61:8a:84:f9:91:fb:b3:
1b:38:16:83:ec:fb:d9:55:8d:1b:08:34:45:7b:ab:1c:6a:e4:
3e:29:7e:24:54:87:d6:4c:4b:df:8b:70:38:d6:a7:fb:44:3a:
99:fe:9c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org