Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7x3W7u1JzXAhNv3zuyjtFJgNEQ0.roa
File: 7x3W7u1JzXAhNv3zuyjtFJgNEQ0.roa (raw, json)
Hash identifier: OiCI6t0QwelEtjNhxkX3ClPJE+X49hGfhSFynteaBKE=
Subject key identifier: EF:1D:D6:EE:ED:49:CD:70:21:36:FD:F3:BB:28:ED:14:98:0D:11:0D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 106D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7x3W7u1JzXAhNv3zuyjtFJgNEQ0.roa
Signing time: Tue 16 May 2023 08:36:11 +0000
ROA not before: Tue 16 May 2023 08:36:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 210.200.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4205 (0x106d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:11 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EF1DD6EEED49CD702136FDF3BB28ED14980D110D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:c9:53:7c:5d:49:bf:37:00:1a:a5:30:19:
14:c8:65:cd:1a:66:c5:a4:96:00:67:a1:38:58:cc:
10:44:c2:2d:96:87:8f:af:87:5e:c1:9f:ab:dd:8b:
97:91:e0:4a:2b:c2:94:ff:c1:f6:10:ba:6a:69:e3:
3d:95:67:81:c4:2c:25:70:5e:3a:3c:c4:31:8d:66:
14:1d:bc:ff:f9:8e:12:fe:f9:a3:8e:36:54:ca:9f:
a3:a5:39:84:b6:b8:e4:01:f9:48:a3:07:97:7c:aa:
e8:98:53:d7:b3:03:9d:f6:1b:bd:3a:d2:e4:c8:3b:
22:a0:40:81:68:e7:7d:0b:5e:59:21:16:ff:5f:c7:
7b:b5:6f:14:f5:5e:7f:89:57:f5:7f:45:b1:c0:2b:
63:3a:90:b9:18:6a:11:c4:9a:c5:7e:16:ea:04:9d:
03:d7:0f:21:eb:45:a6:11:b9:da:02:33:ac:f0:2a:
85:74:11:fc:8f:8d:f5:a7:1d:e8:2f:5a:c0:8c:da:
6b:81:2a:5b:57:d8:28:9b:07:91:62:af:b3:d2:79:
1b:eb:1e:ea:38:61:6c:ce:56:63:67:e3:e9:ba:ec:
50:d9:e0:9a:38:44:6f:5f:7b:3a:8f:cd:4a:f8:3b:
5b:65:ec:57:9a:53:44:88:1e:ec:f0:13:b8:35:c4:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:D6:EE:ED:49:CD:70:21:36:FD:F3:BB:28:ED:14:98:0D:11:0D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7x3W7u1JzXAhNv3zuyjtFJgNEQ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.16.0/20
Signature Algorithm: sha256WithRSAEncryption
26:c5:59:a0:c7:ef:74:e4:60:06:34:cb:82:66:5b:34:e8:6b:
31:42:0b:8d:28:79:09:ca:c0:c4:a7:99:07:55:5c:4c:3e:43:
c2:33:c4:05:c0:99:49:fc:7f:17:ba:47:8e:c2:89:8c:7b:0d:
81:b7:6e:25:39:7c:2e:da:18:87:1e:15:cb:ad:b9:cf:fe:2f:
1e:7d:ea:dd:2d:79:0b:e3:c2:00:e4:ed:c8:40:37:e8:cf:05:
8f:b1:bb:26:12:e6:e2:be:0f:d3:af:e1:bd:2a:f0:6f:db:01:
af:27:f2:d9:47:50:4d:22:76:bc:1d:6d:0c:0a:2b:09:41:02:
eb:34:1b:1c:a9:4c:b9:10:cd:e3:42:69:48:ff:c7:ac:ce:b0:
f8:44:70:d5:12:be:13:f2:d5:9a:97:ce:41:a0:e3:a1:59:c8:
53:1c:03:75:8c:44:d9:53:d9:4a:62:66:32:77:75:d2:58:8f:
5e:29:b5:41:18:57:99:d9:24:79:47:b5:b5:d2:1f:a5:b9:7f:
5d:68:00:ae:55:90:f9:13:bd:b7:ed:4a:2f:f7:40:27:51:30:
b5:54:00:12:76:57:58:80:2e:36:2e:ee:d5:46:8c:6b:45:cc:
d9:ce:53:d6:20:8d:08:72:34:a7:86:ca:2d:86:c0:88:fe:b9:
67:df:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org