Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/EJ1t49kNKNmJ_jpazQykinFzEhI.roa
File: EJ1t49kNKNmJ_jpazQykinFzEhI.roa (raw, json)
Hash identifier: ZZLq+hqLHGDlu5zDqmA4wUhY4EfCD5PDFHRdgoZ+dos=
Subject key identifier: 10:9D:6D:E3:D9:0D:28:D9:89:FE:3A:5A:CD:0C:A4:8A:71:73:12:12
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0DA4
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/EJ1t49kNKNmJ_jpazQykinFzEhI.roa
Signing time: Thu 15 Sep 2022 02:41:40 +0000
ROA not before: Thu 15 Sep 2022 02:41:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38047
IP address blocks: 103.133.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 15 02:41:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=109D6DE3D90D28D989FE3A5ACD0CA48A71731212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:01:b8:ce:7c:90:17:40:30:49:43:db:c1:
2d:e2:26:89:b8:e9:bf:0c:af:0c:05:19:b9:9a:f5:
9e:64:27:f8:d1:21:c4:8c:f1:90:d2:86:72:3d:c1:
ac:71:9f:68:af:9e:b0:d3:a5:83:22:89:47:59:b0:
98:08:db:fc:be:ae:fb:c3:3b:25:f4:f5:ef:53:97:
bd:8f:6f:f1:99:be:8d:f4:e9:17:5b:65:f9:2b:6b:
10:99:f2:c2:6a:b5:5c:22:87:04:3b:1a:8f:b7:07:
50:d8:34:f0:0a:47:98:3e:96:20:f7:0f:d5:00:31:
26:38:5a:56:c3:eb:b8:88:42:79:30:fe:2a:8c:bb:
c6:b0:e4:fb:60:b5:a1:c7:ec:b1:df:e9:b6:da:c6:
d0:f5:31:18:fd:dc:67:45:26:dc:d1:26:6f:e3:09:
c5:2c:f8:84:a3:52:f9:51:a0:85:58:27:b3:ce:f0:
a5:65:35:5f:33:5e:c0:fe:32:71:8b:23:0f:df:5d:
b2:c7:49:81:a1:a4:08:90:3b:aa:92:46:64:25:f8:
13:44:b0:aa:84:cf:e2:e5:84:6f:95:a7:2e:ad:e2:
d1:a3:39:46:d8:71:ad:d3:6d:03:15:41:f8:47:d5:
90:01:4c:dc:c6:30:86:b7:21:20:31:42:2c:bd:47:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9D:6D:E3:D9:0D:28:D9:89:FE:3A:5A:CD:0C:A4:8A:71:73:12:12
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/EJ1t49kNKNmJ_jpazQykinFzEhI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.153.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9c:85:d5:54:37:41:fe:29:04:61:b3:f9:54:2c:8c:cf:5b:
be:08:98:a0:8f:08:77:72:2f:11:16:74:ce:cc:5d:de:4c:a4:
9b:d2:18:72:61:0f:8c:a4:86:8a:a5:1d:c9:09:0f:ec:9c:f7:
17:6b:6c:92:bb:ef:f4:6c:52:1f:f7:7c:5a:01:1b:6c:c6:8a:
50:7f:09:e9:bb:82:88:9d:42:89:02:b9:94:5d:4d:64:b2:40:
92:a2:14:76:f3:d2:03:f4:60:4d:7f:29:ef:24:e2:c4:09:64:
a2:db:8a:73:09:7e:e6:98:ed:d2:ce:9a:43:54:46:9c:18:3e:
d8:18:b8:3e:0f:14:dc:c0:38:48:23:59:86:3f:ec:f6:86:79:
03:68:c3:cb:9d:8b:23:14:3f:09:b1:20:ff:38:48:62:b0:e3:
1d:2a:85:f4:62:20:b7:bc:64:d3:03:68:91:28:ac:66:96:ce:
f8:a2:f2:9a:41:30:c1:20:68:85:19:fa:c8:5c:d8:ae:2b:bd:
75:5c:60:fd:d3:fc:12:4f:1c:60:63:7e:27:be:cd:65:1e:c0:
d6:82:e4:a2:db:dd:a6:b1:1f:d1:54:df:a7:23:c8:fd:41:77:
df:8b:06:38:f6:ec:4a:99:db:25:6b:ec:51:9d:d9:89:20:ad:
97:41:f3:73
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG
ODUwQzA2NTFCNjk5RTE5MERDOUQ5N0NEMURFMzI2QzE2NEVDNTAeFw0yMjA5MTUw
MjQxNDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDEwOUQ2REUzRDkwRDI4
RDk4OUZFM0E1QUNEMENBNDhBNzE3MzEyMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXsgG4znyQF0AwSUPbwS3iJom46b8MrwwFGbma9Z5kJ/jRIcSM
8ZDShnI9waxxn2ivnrDTpYMiiUdZsJgI2/y+rvvDOyX09e9Tl72Pb/GZvo306Rdb
ZfkraxCZ8sJqtVwihwQ7Go+3B1DYNPAKR5g+liD3D9UAMSY4WlbD67iIQnkw/iqM
u8aw5PtgtaHH7LHf6bbaxtD1MRj93GdFJtzRJm/jCcUs+ISjUvlRoIVYJ7PO8KVl
NV8zXsD+MnGLIw/fXbLHSYGhpAiQO6qSRmQl+BNEsKqEz+LlhG+Vpy6t4tGjOUbY
ca3TbQMVQfhH1ZABTNzGMIa3ISAxQiy9R6H7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEJ1t49kNKNmJ/jpazQykinFzEhIwHwYDVR0jBBgwFoAUhPhQwGUbaZ4ZDcnZ
fNHeMmwWTsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOWVVO
L2hQaFF3R1ViYVo0WkRjblpmTkhlTW13V1RzVS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvaFBoUXdHVWJhWjRaRGNuWmZOSGVNbXdXVHNVLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOWVVOL0VKMXQ0OWtOS05tSl9qcGF6
UXlraW5GekVoSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
hZkwDQYJKoZIhvcNAQELBQADggEBAFOchdVUN0H+KQRhs/lULIzPW74ImKCPCHdy
LxEWdM7MXd5MpJvSGHJhD4ykhoqlHckJD+yc9xdrbJK77/RsUh/3fFoBG2zGilB/
Cem7goidQokCuZRdTWSyQJKiFHbz0gP0YE1/Ke8k4sQJZKLbinMJfuaY7dLOmkNU
RpwYPtgYuD4PFNzAOEgjWYY/7PaGeQNow8udiyMUPwmxIP84SGKw4x0qhfRiILe8
ZNMDaJEorGaWzvii8ppBMMEgaIUZ+shc2K4rvXVcYP3T/BJPHGBjfie+zWUewNaC
5KLb3aaxH9FU36cjyP1Bd9+LBjj27EqZ2yVr7FGd2YkgrZdB83M=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org