Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/f9SPZkyTrS45IAOSk4rIkBxe5EM.roa
File: f9SPZkyTrS45IAOSk4rIkBxe5EM.roa (raw, json)
Hash identifier: bqf+JwkUbA+nc/9b5JCCIq/Hy4xH9AA/j7jrTnJ2Cbc=
Subject key identifier: 7F:D4:8F:66:4C:93:AD:2E:39:20:03:92:93:8A:C8:90:1C:5E:E4:43
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0DA4
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/f9SPZkyTrS45IAOSk4rIkBxe5EM.roa
Signing time: Thu 15 Sep 2022 02:41:41 +0000
ROA not before: Thu 15 Sep 2022 02:41:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38047
IP address blocks: 103.133.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 15 02:41:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7FD48F664C93AD2E39200392938AC8901C5EE443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:c5:a8:70:36:9a:5d:6f:ff:7e:a1:ab:ac:
54:56:0e:60:7a:e8:bf:e1:b0:5f:63:4e:91:71:24:
11:69:d7:1f:24:90:3a:d7:92:47:69:2c:06:53:30:
35:22:f9:55:cd:fd:37:d5:10:ea:80:8b:9b:ab:c0:
79:7d:d8:50:25:dd:6e:ea:c3:ea:8f:f6:0f:8e:75:
d5:45:ff:24:ac:59:b9:5e:53:73:3d:72:6d:dd:7a:
fb:9b:08:62:72:64:c1:9f:72:de:43:bc:85:2e:97:
d2:e9:2f:6e:da:1d:46:16:96:20:83:40:fb:0b:b4:
9b:16:fa:17:88:5c:d6:b4:a4:0f:32:5b:73:13:47:
d0:1b:de:69:cb:6f:46:e5:92:d9:91:b1:96:1d:43:
bc:f1:b0:1d:9a:69:12:e2:90:68:70:d9:bf:79:e0:
65:98:c9:b0:9c:b1:93:7d:e8:12:7b:35:a2:c4:2a:
19:51:d9:14:85:61:cf:23:03:38:fb:cc:a0:01:a0:
2d:02:d4:8b:23:4b:08:25:8a:14:ad:0b:0d:52:4d:
78:bd:a5:2b:54:b4:97:3f:f0:4c:87:d6:43:6c:f5:
73:4e:2a:79:d0:40:6f:48:66:3b:ae:4a:f4:db:00:
18:fe:13:a2:c0:43:c3:a2:d5:42:b4:1c:a0:db:3b:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D4:8F:66:4C:93:AD:2E:39:20:03:92:93:8A:C8:90:1C:5E:E4:43
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/f9SPZkyTrS45IAOSk4rIkBxe5EM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.155.0/24
Signature Algorithm: sha256WithRSAEncryption
95:46:ef:58:39:7d:1e:a5:bd:71:7c:73:bf:21:28:d0:cf:8c:
f8:9e:bc:46:28:3c:15:a2:f8:1c:2e:5a:58:37:5a:a4:d2:41:
69:2c:58:1e:b1:2e:7b:68:8b:12:32:77:14:d3:88:06:c9:10:
80:ee:fb:8d:de:cc:59:34:9c:8d:aa:9e:9d:ec:32:21:96:f0:
41:82:6d:b1:d9:a3:bd:75:76:ba:90:c8:0b:37:60:a8:dd:dd:
21:31:8a:cc:d2:03:5a:6b:46:ef:b9:8f:76:28:b2:a2:55:16:
76:1a:f4:45:80:dd:10:1f:f3:fd:e6:ae:fd:35:02:a4:ed:7b:
9d:a9:3b:ee:6a:e4:91:f2:24:0e:22:b2:1b:50:61:50:01:80:
51:af:3d:dd:b1:91:97:f1:eb:db:49:de:5f:9e:07:be:3f:8f:
6b:9c:f8:83:4a:cf:da:98:69:9c:e2:23:ed:2d:b1:d6:5d:69:
e8:7f:5d:ef:74:9b:52:25:79:2b:9f:e5:a4:09:52:ef:77:67:
a8:d2:96:88:ce:2a:e9:06:4a:81:13:45:d8:1a:aa:af:8a:ba:
90:d5:b4:63:1f:f1:ca:1c:79:1a:0c:9a:70:84:1d:8c:7f:dd:
52:64:bc:4f:3c:9c:7d:d3:f3:ff:db:62:00:59:ef:d0:63:05:
52:8b:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org