Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/XCacX_PsraGP-oJuxka3RSnKWkw.roa
File: XCacX_PsraGP-oJuxka3RSnKWkw.roa (raw, json)
Hash identifier: kpXvEFOrtmttnFaTVKf7sO91KTpnEtSRAuwSFDJzQnI=
Subject key identifier: 5C:26:9C:5F:F3:EC:AD:A1:8F:FA:82:6E:C6:46:B7:45:29:CA:5A:4C
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0DA4
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/XCacX_PsraGP-oJuxka3RSnKWkw.roa
Signing time: Thu 15 Sep 2022 02:41:39 +0000
ROA not before: Thu 15 Sep 2022 02:41:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38047
IP address blocks: 103.133.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 15 02:41:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5C269C5FF3ECADA18FFA826EC646B74529CA5A4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:6c:61:cf:ae:2d:da:d1:d8:d9:bf:7e:27:
88:b7:24:25:25:2b:65:3a:83:2a:89:55:52:e4:5d:
c1:95:45:26:4a:5e:5e:af:d9:56:bd:85:d1:99:f9:
49:75:47:65:fa:5f:ce:51:48:5b:43:f7:61:76:d9:
1e:c1:4a:a1:26:a4:09:83:89:59:ba:f8:27:8a:c4:
02:f7:81:a5:67:a9:94:ba:fc:39:a2:66:48:d7:08:
ea:e7:f9:bb:17:d4:8c:be:b7:cf:c0:d6:1a:31:54:
11:15:df:de:08:c1:c7:49:d4:c9:25:bd:19:c8:06:
a0:4c:40:01:c3:c2:9a:b6:a3:63:80:d1:5f:6b:11:
8d:58:da:ab:3d:a0:a7:71:1f:ff:25:d8:50:14:0b:
ed:44:de:0c:c6:4c:a2:25:9d:ef:23:be:d7:e9:e5:
0d:1f:2d:5e:6d:a6:2d:87:4c:2f:4f:e0:ed:01:ac:
58:bf:dd:6c:54:68:af:43:3a:95:79:09:46:06:64:
f1:1d:5f:db:a2:4c:df:20:19:73:1f:43:9b:c9:ed:
e4:9c:e5:cb:15:fb:86:9e:e9:d6:b4:f9:05:df:01:
f6:ad:a2:84:8e:fc:46:e7:d1:a6:5f:bd:21:d8:04:
19:e7:40:e5:23:1e:7a:16:9f:0c:c3:74:74:16:28:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:9C:5F:F3:EC:AD:A1:8F:FA:82:6E:C6:46:B7:45:29:CA:5A:4C
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/XCacX_PsraGP-oJuxka3RSnKWkw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.154.0/24
Signature Algorithm: sha256WithRSAEncryption
14:72:c7:6f:b6:f8:a9:3f:66:ca:52:9c:e9:ff:8d:67:17:86:
87:36:f1:0f:57:10:e9:1f:10:99:6a:ab:29:3a:9c:af:a4:a0:
1d:8a:86:a2:f3:01:7c:74:c1:a4:b7:94:31:23:f0:79:12:a2:
7a:73:1a:ac:7a:ef:bf:34:09:21:2c:03:a7:49:b3:f5:65:5c:
22:ba:ab:9e:59:85:45:ef:5e:85:11:12:3f:97:f9:2d:26:90:
21:32:50:c4:72:45:09:8c:6c:4f:91:1d:66:7e:82:99:df:d9:
31:db:ae:e5:17:c9:e1:a2:05:2d:d0:6a:8f:22:cc:f3:78:f2:
e0:5b:0a:9d:ed:f8:76:c4:8b:82:64:c1:b5:a7:97:d5:cb:c5:
a2:f2:5e:65:c2:82:22:8e:bc:b5:18:f8:21:8a:37:b8:57:8b:
11:b3:0c:3c:4c:bb:d6:fc:d2:2e:d3:61:cf:00:07:3a:46:12:
b2:74:6d:1b:ee:f6:c5:bc:06:8f:c2:04:8e:57:15:b5:c1:42:
ab:95:05:c3:30:78:d8:55:18:0c:6b:74:1d:1c:f4:24:a8:dd:
5a:4b:93:fb:a4:63:06:26:dd:a2:3a:0f:9e:f1:72:b8:80:af:
45:82:df:c2:35:5e:da:74:04:01:dc:f7:b5:25:e7:00:89:a9:
e8:0e:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org