Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/1X7LpV1w-yY0XnR8mq5bldw4AMU.roa
File: 1X7LpV1w-yY0XnR8mq5bldw4AMU.roa (raw, json)
Hash identifier: Hj7t7xxkK/deQpDtFNViQdPeWbptO5/AhM0O48sRbTk=
Subject key identifier: D5:7E:CB:A5:5D:70:FB:26:34:5E:74:7C:9A:AE:5B:95:DC:38:00:C5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10E7
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1X7LpV1w-yY0XnR8mq5bldw4AMU.roa
Signing time: Tue 16 May 2023 08:36:47 +0000
ROA not before: Tue 16 May 2023 08:36:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 210.200.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4327 (0x10e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:47 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D57ECBA55D70FB26345E747C9AAE5B95DC3800C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:f4:76:c3:ac:c5:ce:c4:f6:52:87:b2:40:
95:6e:e4:dc:3a:4a:db:21:c7:24:55:4a:1c:83:09:
c8:51:fe:7b:1c:3e:81:6d:f3:d3:45:15:21:cb:72:
7d:49:9b:b3:39:cc:03:84:86:37:27:b3:b6:d5:17:
f1:5f:22:b1:91:e4:1b:32:cc:1a:3c:a2:78:8f:b6:
d1:d7:3d:fc:84:bd:b1:0a:29:bf:c7:2d:d1:78:eb:
55:bf:ba:39:17:7d:63:18:50:34:f0:e5:94:c8:35:
6d:ce:c8:1a:98:6c:72:45:0f:26:89:b6:3d:15:4c:
aa:0a:15:ae:f2:d9:52:65:82:db:84:47:85:53:5e:
f1:a3:95:4f:0b:71:0c:e1:09:46:c9:c7:c7:a0:b5:
f0:0f:c9:db:b3:47:31:bc:1a:fc:77:65:5e:32:b7:
63:99:9e:40:c1:05:62:21:d4:25:ee:76:e8:81:e8:
ff:2f:18:ea:45:a2:c2:df:3f:6e:69:25:2c:af:b3:
6f:14:0e:6e:ae:05:84:8f:5d:dc:a8:e1:7c:91:52:
63:3e:fe:44:21:52:9b:e9:e0:8c:2a:14:2a:ca:d2:
23:d4:c1:31:28:6f:12:bd:52:93:27:e9:ec:65:1e:
8d:19:d9:d0:59:04:b6:38:8b:b5:3c:98:52:cc:05:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7E:CB:A5:5D:70:FB:26:34:5E:74:7C:9A:AE:5B:95:DC:38:00:C5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1X7LpV1w-yY0XnR8mq5bldw4AMU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:ec:12:94:f7:8c:30:00:1e:00:65:26:7a:8d:27:98:6d:87:
98:c4:ef:e4:03:16:95:1e:bd:54:0b:0f:d3:7b:62:82:0b:27:
17:cf:62:5d:96:2f:ff:ef:59:e0:36:ee:11:b9:8f:74:65:3c:
51:f0:44:95:eb:05:de:3b:69:31:97:31:e2:39:7a:09:4d:34:
50:e2:43:02:b1:8f:52:a4:31:89:78:22:60:27:c2:fa:23:e6:
b4:1a:46:d3:3d:0f:db:71:a9:11:ca:64:16:cf:0f:7d:bc:0f:
5b:79:93:dc:cb:0e:90:94:d5:b5:b1:bb:aa:df:a9:04:70:36:
ea:fd:85:f6:e7:77:f5:80:d7:a0:ff:b0:e6:97:1c:af:82:05:
f2:37:c5:42:8d:40:98:73:26:a3:f4:78:3b:6c:13:93:a7:49:
30:9e:63:83:41:a4:8f:a1:25:3c:d1:7f:d2:3c:54:53:a6:44:
42:99:e0:10:0e:f6:50:20:9b:5a:9b:75:7a:61:0a:50:ff:d5:
39:3c:4b:49:01:fa:0b:7e:ed:42:72:32:b5:5c:74:16:45:b9:
32:d9:c7:5e:83:a1:3c:42:c5:4a:ae:ba:55:c4:db:97:0d:c9:
52:b6:b2:9d:f3:49:9a:3b:b4:e6:50:15:cf:37:b4:d0:6e:81:
73:9b:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:17 2023 by rpki-client on console-ams.rpki-client.org