Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/-7VE6mWWsIroYxNPL-ufunJGoR0.roa
File: -7VE6mWWsIroYxNPL-ufunJGoR0.roa (raw, json)
Hash identifier: wSX0Klku0Fp7nOOWpxw80gZraVTrabbIVJkyDreWlzA=
Subject key identifier: FB:B5:44:EA:65:96:B0:8A:E8:63:13:4F:2F:EB:9F:BA:72:46:A1:1D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10CE
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-7VE6mWWsIroYxNPL-ufunJGoR0.roa
Signing time: Tue 16 May 2023 08:36:39 +0000
ROA not before: Tue 16 May 2023 08:36:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.202.128.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4302 (0x10ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:39 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FBB544EA6596B08AE863134F2FEB9FBA7246A11D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:fb:5f:ff:f1:3d:21:de:82:01:d5:c4:e8:
b4:05:1f:82:e1:7d:a0:3e:77:0c:2a:de:b3:50:29:
9c:1d:81:71:9f:b7:22:e9:25:d3:0b:dd:85:5e:ab:
00:c3:ab:e0:95:3b:88:e2:13:2e:6b:22:94:b9:b6:
51:05:7a:a9:55:16:9e:c5:85:1c:91:90:73:87:0b:
d9:4a:d8:52:66:02:8d:1a:b8:13:08:3e:bf:69:f4:
66:2e:a4:28:ff:a3:e7:0d:7e:2e:74:7b:b1:12:05:
b4:f8:c7:b2:72:fc:21:41:d7:da:03:84:32:fc:41:
8f:c0:d7:91:6b:b3:8b:82:fd:89:c9:af:dd:ce:b3:
df:2f:5d:e5:26:4b:51:b7:0b:f3:c0:93:b9:45:6b:
58:c9:0e:8f:d6:00:9f:1d:5b:86:6e:29:5b:d2:6c:
81:de:af:0f:19:be:83:87:6b:5d:b8:99:ed:21:53:
4c:22:97:a9:79:ff:c4:85:9f:58:ac:aa:81:7b:f5:
be:aa:ea:13:9a:10:3e:32:f0:df:56:07:0d:34:94:
11:64:36:e7:c7:c2:25:ca:44:43:70:0a:41:26:64:
c1:11:e2:c9:e0:51:fd:ab:2c:60:ae:31:ca:5c:4a:
4f:7c:55:79:b8:d4:41:ef:f3:a7:f7:a5:20:07:e5:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:44:EA:65:96:B0:8A:E8:63:13:4F:2F:EB:9F:BA:72:46:A1:1D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-7VE6mWWsIroYxNPL-ufunJGoR0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:60:a1:0e:49:14:17:ad:37:18:6c:06:0f:ea:0d:7f:c4:f5:
46:16:1c:80:b4:6e:73:55:63:a0:1c:f2:cd:2b:d0:a3:21:d0:
ee:35:03:1b:37:10:44:25:da:e3:1a:46:14:a3:f4:51:f3:93:
0c:da:26:0a:73:44:c0:3b:b3:e1:6b:4f:76:d9:06:be:72:63:
6e:e2:12:ad:86:a9:eb:70:64:68:13:c8:0c:22:8e:cf:0b:dd:
78:a0:28:13:75:11:51:7c:8d:6b:c4:58:dc:2d:97:ce:7c:fe:
b5:f0:78:c9:d0:b7:51:10:24:32:6f:42:24:95:88:6f:bf:66:
d8:52:79:59:2d:12:04:1c:5b:bd:06:17:01:e9:04:42:20:d3:
c8:a2:b8:66:67:67:a5:27:ec:7f:90:eb:ad:0e:d3:f5:bb:5c:
3f:2d:03:13:de:50:fd:78:a9:d7:3c:69:cd:31:df:e2:23:ce:
fd:bc:c6:84:f7:5c:b6:92:2e:e7:c4:bc:09:ef:61:f0:e8:a5:
a6:75:35:98:9d:08:95:f3:8a:72:f8:de:f8:b3:46:c6:1a:c5:
ef:c0:be:2f:d8:9d:3d:9a:b5:04:5e:93:44:77:44:0e:71:dc:
21:3f:88:a7:c4:8e:06:c7:13:88:26:94:d4:74:15:8e:ee:c7:
6a:ef:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:44 2023 by rpki-client on console-fra.rpki-client.org