Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/9-p3u9V3aoMNUohAqdaNq7DdEDA.roa
File: 9-p3u9V3aoMNUohAqdaNq7DdEDA.roa (raw, json)
Hash identifier: PzPlaZwaA8H1c0X7o77QnJKHEV0HFdJFtIukj2YEHIU=
Subject key identifier: F7:EA:77:BB:D5:77:6A:83:0D:52:88:40:A9:D6:8D:AB:B0:DD:10:30
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10AE
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9-p3u9V3aoMNUohAqdaNq7DdEDA.roa
Signing time: Tue 16 May 2023 08:36:30 +0000
ROA not before: Tue 16 May 2023 08:36:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.232.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4270 (0x10ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:30 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F7EA77BBD5776A830D528840A9D68DABB0DD1030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:db:a3:86:3c:64:84:ea:53:f1:8f:f9:5c:
32:95:29:a0:97:38:7c:cf:95:4a:e9:bb:bd:3b:7d:
2c:02:69:17:dc:fe:ab:2e:f9:38:13:67:0d:89:55:
c6:f2:24:07:df:6c:06:5d:d5:e0:61:77:c1:e9:ea:
89:46:e8:27:fc:25:1f:ba:b3:d9:03:f0:89:d7:72:
8e:de:72:06:0d:27:40:30:c5:c0:13:0b:ca:35:36:
b6:30:fe:1b:9c:2b:69:82:27:e6:6f:5d:ab:49:c0:
18:d3:91:e3:dd:52:73:dc:06:29:1c:da:94:2f:df:
db:e0:ed:df:a2:7e:8d:33:f5:0c:a3:7c:4f:60:6a:
69:c2:08:7d:f1:18:95:1c:27:46:d4:41:c9:ee:2a:
5c:e2:c6:55:55:af:9e:7a:da:86:0e:6a:8d:9a:98:
fb:05:8a:0b:94:e3:54:b3:0d:1a:99:cd:ff:23:48:
81:8d:71:22:36:d1:18:29:4b:f2:68:3e:90:9f:dd:
bc:a1:6c:40:2b:91:c8:fa:d3:6a:c2:01:b5:10:77:
83:50:3e:b2:ce:9c:27:27:9b:93:93:12:49:ef:c6:
95:bd:41:d0:42:fc:98:cb:3a:fe:d5:9b:ff:62:bc:
bb:ae:aa:dc:19:b7:54:7c:57:8c:1f:89:a1:e5:45:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:77:BB:D5:77:6A:83:0D:52:88:40:A9:D6:8D:AB:B0:DD:10:30
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9-p3u9V3aoMNUohAqdaNq7DdEDA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:98:aa:bd:cb:9f:bb:9e:ae:0b:50:f2:f8:bc:3b:f3:b4:f5:
cd:d7:ac:92:bb:7c:03:b2:ea:c0:37:f3:dc:47:30:56:46:70:
fc:54:bd:0f:b5:be:cc:2b:ac:3f:7a:c9:c1:f5:39:10:19:9b:
5b:3d:a9:41:b3:a2:0a:f4:90:ec:d2:06:28:e6:bb:3d:56:d6:
60:6a:7f:72:c7:8b:ae:4c:5d:06:76:1a:65:eb:9e:2b:7f:c8:
00:e2:d0:a3:47:fe:1b:2b:64:c8:f2:ac:12:90:72:35:93:95:
5e:04:67:dc:f9:fc:d8:51:27:99:6d:42:fb:68:56:0e:18:b3:
7e:84:b8:d4:16:52:55:28:60:15:9d:26:4d:93:af:c2:0c:05:
e3:60:8b:46:13:13:e2:74:da:ac:3d:4c:f4:b2:ec:3c:6a:18:
23:20:8b:81:da:a3:41:8e:5f:70:47:a2:f9:18:84:2a:ca:63:
3b:5f:cd:ea:29:d7:76:78:5e:ac:6d:d0:ca:15:4b:2e:99:e4:
69:79:cf:4b:85:31:16:a3:60:af:e1:29:ab:c7:31:a8:68:58:
55:a9:23:66:e6:2c:e6:30:01:92:08:55:37:dd:b8:03:82:42:
a9:2a:dd:01:44:dc:54:4f:b8:65:da:59:0c:55:17:fa:b6:49:
b5:c0:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:44 2023 by rpki-client on console-fra.rpki-client.org