Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/xbEm9Otz98PmktdqLNanWaL55jY.roa
File: xbEm9Otz98PmktdqLNanWaL55jY.roa (raw, json)
Hash identifier: j7ai2bBHa4wpzu1bKNQbGA479aNpt8r+KrCPb8AGiBc=
Subject key identifier: C5:B1:26:F4:EB:73:F7:C3:E6:92:D7:6A:2C:D6:A7:59:A2:F9:E6:36
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0BBD
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/xbEm9Otz98PmktdqLNanWaL55jY.roa
Signing time: Mon 27 Mar 2023 20:38:38 +0000
ROA not before: Mon 27 Mar 2023 20:38:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18424
IP address blocks: 103.30.46.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3005 (0xbbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Mar 27 20:38:38 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C5B126F4EB73F7C3E692D76A2CD6A759A2F9E636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:6a:e8:80:a1:30:d1:5e:cc:a8:44:3e:85:
0d:93:a8:92:92:3c:f4:d3:61:05:0d:8b:4c:b4:b9:
00:ad:9c:db:16:78:3d:cb:f0:54:16:86:46:2d:e4:
46:a9:8e:71:3b:a8:23:72:74:8f:1a:df:cf:4e:25:
07:aa:09:e4:b9:f6:f9:18:32:7d:e3:a4:2d:2f:25:
42:3f:5a:e5:c9:6d:aa:b9:a6:74:64:76:f3:3d:10:
bb:44:19:b2:de:7f:51:03:64:62:4d:0e:1e:3e:53:
2a:57:8c:e6:1f:d5:cb:44:c1:c1:e3:f5:d2:02:06:
b0:5d:77:60:d5:76:2a:9e:97:d3:b7:33:a6:e4:24:
31:78:a3:15:3b:c7:a4:66:76:c0:22:60:39:bb:c1:
e4:a1:6b:d7:f0:bf:88:d9:6c:3b:23:02:45:a8:43:
ab:ea:99:eb:9d:b4:25:d5:ca:a5:ee:38:63:88:df:
3d:b0:72:72:26:ab:b3:20:f0:e5:3c:6c:d3:d4:75:
50:fb:57:eb:bf:0c:3e:5e:81:ac:5b:f7:9c:a0:1c:
3d:d6:0b:17:47:60:20:92:b3:42:de:72:2b:54:24:
7e:28:33:82:76:5b:d1:7c:2d:83:f8:f2:2e:3c:3f:
3d:68:01:78:ad:cf:53:c8:52:5a:05:7e:53:07:33:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:26:F4:EB:73:F7:C3:E6:92:D7:6A:2C:D6:A7:59:A2:F9:E6:36
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/xbEm9Otz98PmktdqLNanWaL55jY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.46.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:4c:69:59:18:00:36:7a:90:70:08:34:cc:c5:76:98:cf:b4:
01:bc:6f:0d:ca:fa:2f:29:e1:64:a5:a9:aa:f6:94:db:50:60:
49:19:5f:c0:54:91:72:09:02:6e:79:ac:e6:c9:f4:b2:c6:aa:
5a:e9:7f:51:b2:55:0a:9e:0e:6b:84:cd:95:7b:43:31:46:11:
c8:88:92:7c:63:a6:8b:48:9d:df:99:02:eb:f0:fd:1d:b5:2c:
11:7d:a0:8e:56:18:ff:23:94:5b:25:12:d7:06:8b:39:11:cd:
f8:41:65:cd:b0:5d:2f:0a:4c:8e:f2:7e:4e:e6:bf:1c:ed:e6:
6a:38:57:08:3f:80:f1:8a:11:15:e3:f6:65:65:59:4d:20:e2:
fd:d6:a7:b6:8b:bb:77:0c:60:da:95:48:b2:6a:b2:1c:47:59:
50:5e:7d:79:fa:8d:d3:08:1c:ac:6c:48:b9:3f:0b:90:67:bb:
24:bf:48:bd:c6:82:2a:da:ac:55:e1:61:bb:c0:0a:8f:12:a3:
63:1b:4b:f5:c0:2e:54:a1:43:2b:7a:c0:d4:a3:a8:c1:47:05:
4c:8c:52:61:91:7d:34:4a:bc:59:73:9d:4d:40:81:60:44:b1:
c7:46:f3:7e:bf:e4:ff:ee:c8:8c:e4:9a:13:84:99:fa:09:a4:
77:ed:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:43 2023 by rpki-client on console-ams.rpki-client.org