Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/-vFLpd_HnVK0gB3NohUemIHiUFU.roa
File: -vFLpd_HnVK0gB3NohUemIHiUFU.roa (raw, json)
Hash identifier: rNc6kBV8CkGphCABn/hzbO2RmBaLzPeQRwg2M0Jq2Ic=
Subject key identifier: FA:F1:4B:A5:DF:C7:9D:52:B4:80:1D:CD:A2:15:1E:98:81:E2:50:55
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-vFLpd_HnVK0gB3NohUemIHiUFU.roa
Signing time: Thu 15 Sep 2022 02:40:36 +0000
ROA not before: Thu 15 Sep 2022 02:40:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FAF14BA5DFC79D52B4801DCDA2151E9881E25055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:51:76:76:a2:1a:e4:ff:25:99:75:4b:4f:
99:4b:2c:37:70:23:cd:6b:2d:c6:d8:56:1b:99:72:
fc:a3:93:0f:78:fd:6d:3b:a9:98:25:e1:9b:d7:a1:
4a:4a:1e:1c:ac:2b:84:32:de:39:a6:65:fc:87:7d:
f6:a8:1e:6b:93:69:86:8d:e9:dc:1b:4d:40:4e:a4:
19:33:12:7a:bb:8d:c7:b0:28:61:da:3f:07:6f:77:
7b:a3:e3:69:fd:e5:0d:93:67:a6:ab:3a:60:4a:9d:
b6:18:00:82:0e:66:4a:a9:86:c3:87:48:35:4b:1f:
0b:40:f2:41:17:9f:78:52:42:4b:ca:fc:32:49:f9:
d2:0e:f6:a7:2c:05:3a:27:49:e8:4c:2d:cd:5f:c4:
ec:a8:2f:40:96:83:87:a9:b2:4c:06:af:50:ae:22:
6b:f6:d1:b1:f4:65:41:46:27:42:37:69:0b:80:3e:
e1:6a:72:0a:a1:61:7d:8c:58:91:d0:2d:01:f2:03:
40:6f:93:32:1e:42:6c:e5:7a:e6:89:da:e4:33:5f:
12:ff:61:24:41:e8:0c:56:ef:07:73:a0:9c:2c:77:
3b:00:8b:7f:2a:ec:dd:39:57:20:f6:2d:48:58:48:
f2:6d:2e:c6:ef:95:ba:78:cd:7c:ba:05:ee:74:b8:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F1:4B:A5:DF:C7:9D:52:B4:80:1D:CD:A2:15:1E:98:81:E2:50:55
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-vFLpd_HnVK0gB3NohUemIHiUFU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.224.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:49:c2:0b:c1:10:30:a8:45:36:28:a9:00:e1:7b:72:f1:0a:
68:4d:94:de:bb:e5:21:0e:d1:57:8c:24:59:2f:c0:41:1f:7b:
bf:6d:8a:c5:6e:07:06:6e:ac:7a:d3:d3:e1:50:d7:a4:eb:d5:
f8:68:3d:30:74:01:b1:a1:cb:cd:9d:96:88:a8:a0:b2:95:74:
d8:c4:5a:39:80:47:3f:19:4a:68:25:d1:63:ab:7d:e0:45:5c:
3e:ac:1b:1a:ab:8b:d3:87:48:a6:fe:df:ea:fb:57:56:0d:89:
a8:46:91:02:cf:d2:32:0c:8d:cd:da:cb:2a:44:93:48:6e:80:
be:2e:3e:c9:db:a9:a0:7c:13:16:b3:07:98:75:34:a8:e8:37:
d5:2b:e4:b4:07:7f:14:21:b1:8e:db:5c:da:a0:af:58:37:5c:
5c:29:3c:d3:8b:64:a4:94:3a:26:fa:ce:ce:19:38:11:29:d1:
95:70:28:d7:57:03:71:23:56:c1:41:1f:43:d0:e0:a4:44:6f:
95:02:7f:a8:cc:59:44:22:46:84:c0:a5:62:d9:f5:fb:11:5c:
f9:4f:c1:94:1e:01:51:6c:c8:28:d6:f7:13:df:8f:63:be:21:
d8:c2:24:8f:2a:b3:3a:20:e7:6d:8d:36:8c:09:fa:03:da:ad:
d7:d9:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:43 2023 by rpki-client on console-ams.rpki-client.org