Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/1Geg-7t54C4ISaqXc-uk9YdnRrM.roa
File: 1Geg-7t54C4ISaqXc-uk9YdnRrM.roa (raw, json)
Hash identifier: z6Bg01ASjQwyRgByiRMlIn+ULUYQwVf9eaERWlzBhfM=
Subject key identifier: D4:67:A0:FB:BB:79:E0:2E:08:49:AA:97:73:EB:A4:F5:87:67:46:B3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1Geg-7t54C4ISaqXc-uk9YdnRrM.roa
Signing time: Thu 15 Sep 2022 02:39:56 +0000
ROA not before: Thu 15 Sep 2022 02:39:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131597
IP address blocks: 218.35.64.0/19 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D467A0FBBB79E02E0849AA9773EBA4F5876746B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:ed:2e:c0:bd:14:19:dd:ca:9c:24:54:4f:
c3:12:4e:10:8f:98:81:9d:e4:3f:c7:4d:63:2e:08:
a9:c1:67:a3:19:6b:b4:fd:c9:33:cf:cf:80:b3:17:
b3:aa:3f:94:05:3a:d4:4b:31:e5:88:a3:82:e7:3e:
58:e7:24:55:49:17:4f:0e:b4:23:40:2c:6c:5b:e6:
ca:17:6f:54:f9:27:2c:c6:58:03:71:10:cc:3e:f5:
98:93:e8:45:73:c4:74:ee:f7:ae:df:d2:74:7b:91:
f0:40:d0:a2:4e:e2:9e:a5:18:dc:b3:48:25:77:d2:
c0:75:9a:fe:d3:ca:a2:54:56:8a:6b:e3:01:d5:d8:
6c:15:92:c0:6d:d1:73:6c:eb:08:4a:bc:1d:fa:e3:
56:ca:24:02:5f:39:51:2c:b0:60:49:19:a6:da:02:
33:b1:71:e2:77:5a:cc:1a:9e:65:4f:25:7f:c6:47:
06:73:d1:a1:4a:17:6a:4f:28:6e:10:0e:dd:40:6c:
f5:42:9f:5a:4c:27:82:d8:cf:e9:f9:e4:a6:a9:9e:
2f:a7:49:3a:54:49:4f:c8:45:f8:db:f6:2f:07:f8:
81:1f:8d:69:c4:c7:63:92:5c:2f:8b:76:83:ce:cb:
a2:b6:07:e5:20:db:80:4a:c1:65:d7:95:83:b0:5d:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:A0:FB:BB:79:E0:2E:08:49:AA:97:73:EB:A4:F5:87:67:46:B3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1Geg-7t54C4ISaqXc-uk9YdnRrM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.64.0/19
Signature Algorithm: sha256WithRSAEncryption
be:d8:2b:92:6b:47:1b:30:92:a4:79:51:a0:df:b9:87:02:0c:
32:19:69:47:7c:ec:41:08:23:09:db:00:b7:d1:55:ba:ab:79:
2b:bb:ad:c5:7b:6c:5d:a1:81:01:8c:ba:83:f5:34:a6:3c:a8:
bc:35:6b:68:88:95:7a:bd:8b:2c:03:eb:7c:03:1e:a0:1f:01:
38:ce:48:32:40:39:f6:75:ad:ca:92:5e:3f:8f:ab:32:74:ab:
da:58:a1:0e:fc:52:5d:b3:fb:57:74:bc:3d:2b:f6:f2:30:3f:
1b:89:53:02:13:87:01:72:d6:23:86:06:f1:dd:f5:ab:d0:aa:
c0:c1:58:f6:12:17:b4:1a:f9:a1:c1:6c:8a:4a:56:75:9a:f0:
ec:a8:eb:c4:46:75:b2:ff:47:de:7e:6f:4c:79:c9:28:6b:a8:
6d:72:43:ee:78:6c:ee:03:dc:15:9e:96:31:1c:ec:99:0d:82:
44:aa:4b:4b:d2:cd:5d:ce:4d:5c:64:0b:03:3b:87:53:be:d2:
26:88:8b:b7:be:0e:6b:d1:c1:cb:d5:79:d6:d3:de:ea:66:6f:
f7:98:64:2e:9f:a5:cb:27:e3:7a:6e:ed:08:96:1c:fd:df:b8:
fe:70:fd:fd:9d:87:0c:cf:a0:aa:9d:0d:36:7f:3a:7f:3b:0f:
fa:64:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-fra.rpki-client.org