Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/1uBY50E3Q3AnUqv96xmZziJXpkA.roa
File: 1uBY50E3Q3AnUqv96xmZziJXpkA.roa (raw, json)
Hash identifier: LGby5PmIsYw5sl0zsdaWFfqtP5dHg+ufEMJfMapnXg0=
Subject key identifier: D6:E0:58:E7:41:37:43:70:27:52:AB:FD:EB:19:99:CE:22:57:A6:40
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 109F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1uBY50E3Q3AnUqv96xmZziJXpkA.roa
Signing time: Tue 16 May 2023 08:36:25 +0000
ROA not before: Tue 16 May 2023 08:36:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.192.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4255 (0x109f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:25 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D6E058E7413743702752ABFDEB1999CE2257A640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a5:43:97:f5:79:d1:e9:95:0e:06:e4:0c:cf:
cc:10:f9:dd:05:1a:cc:60:28:3e:df:fc:de:c5:cd:
80:ec:8d:2b:b3:ef:44:59:22:fc:1d:e9:b9:bd:66:
0c:18:6d:74:66:c3:c6:d0:60:ba:da:1d:b4:e2:d6:
b9:70:31:cb:ec:ca:47:ec:fe:79:9c:20:2e:84:be:
06:84:5e:59:f8:fb:2c:b1:f0:a5:10:aa:48:18:fb:
f6:2c:ee:86:de:60:f4:f2:b7:76:be:52:4c:b1:37:
c3:64:c0:b7:b3:8b:71:55:4b:46:99:d6:94:11:af:
76:12:40:51:99:2a:c2:c7:f2:f1:1d:10:d9:ee:18:
e5:83:f5:d4:56:3b:79:72:63:9e:37:e5:20:d1:44:
ce:8c:df:31:ca:9d:ee:ca:e7:9c:8f:3d:16:3a:cd:
7f:4d:2e:8d:1b:a3:20:9c:ad:23:59:38:f8:26:76:
6e:44:24:43:5e:35:50:c6:86:d7:cf:28:4d:df:46:
92:c6:bd:fc:ee:67:3c:2d:1b:32:5e:4c:21:4c:ff:
25:d3:04:e9:3f:96:57:7b:f3:fc:d2:0b:82:07:2a:
52:3a:d2:8b:fb:30:45:03:2c:b2:e0:79:f7:93:4f:
42:16:b6:ae:4b:87:45:10:1c:69:d4:4b:01:eb:0d:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E0:58:E7:41:37:43:70:27:52:AB:FD:EB:19:99:CE:22:57:A6:40
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1uBY50E3Q3AnUqv96xmZziJXpkA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:74:0c:fe:55:2d:5f:07:26:96:b0:ff:a1:45:b5:aa:4d:b5:
dd:b8:d0:db:16:2c:6c:f2:d3:8f:b2:ce:16:4a:24:d0:4a:e8:
ff:05:74:cb:ef:c9:e7:c5:75:79:64:6d:9b:ca:e3:91:70:02:
7f:f8:d5:8e:ef:5c:8e:ba:b0:2c:c7:0c:23:19:50:3f:52:a7:
3b:b6:d5:b7:96:6d:33:00:a6:bc:f5:6a:cd:7c:32:95:92:61:
9a:b4:b4:f4:40:89:44:54:7d:c5:82:0e:17:73:49:f6:71:10:
8b:76:0b:d8:a3:6e:88:89:a9:48:84:6a:b7:c4:5e:21:16:db:
05:eb:f9:c3:5a:4e:9c:42:aa:ee:2a:0a:2e:bc:51:eb:1e:87:
dd:ab:45:15:28:c3:67:04:9c:83:ac:2c:f4:db:4c:a0:c9:38:
6a:a8:f7:e1:60:6f:69:25:13:3f:67:8c:8b:53:11:38:52:dc:
52:0f:30:c0:ec:72:9a:05:a0:ea:c5:60:17:3f:c2:04:e1:c0:
71:69:72:fc:23:db:64:27:a6:69:f2:c5:bb:38:a2:1d:9f:70:
fc:6a:64:db:e6:6a:5c:28:5b:9b:ad:4e:8b:3c:cf:39:02:12:
12:ac:61:4b:46:8a:d5:4e:23:fe:d2:2c:ce:e1:ef:ca:b3:cd:
03:56:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:17 2023 by rpki-client on console-ams.rpki-client.org