Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/94jVrSTTQ-h7FnKOLP7PyOKw1fM.roa
File: 94jVrSTTQ-h7FnKOLP7PyOKw1fM.roa (raw, json)
Hash identifier: 712m2R/RkL9gvdQgkHIzk99/IYln2X3I9VrBuTgFqIU=
Subject key identifier: F7:88:D5:AD:24:D3:43:E8:7B:16:72:8E:2C:FE:CF:C8:E2:B0:D5:F3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/94jVrSTTQ-h7FnKOLP7PyOKw1fM.roa
Signing time: Thu 15 Sep 2022 02:39:57 +0000
ROA not before: Thu 15 Sep 2022 02:39:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.58.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F788D5AD24D343E87B16728E2CFECFC8E2B0D5F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:74:0c:0d:07:d4:25:f6:95:03:bc:f6:5d:
f0:21:95:62:c5:27:b5:fe:8e:2a:75:62:4e:e0:d5:
36:e9:39:d5:96:24:86:7d:9f:43:d6:fa:7e:1a:02:
bf:57:f9:65:23:50:68:6f:ef:a7:f3:ee:30:ce:1e:
64:58:71:f3:ae:a4:52:4f:db:92:e1:d2:c1:5c:4d:
2b:4e:5e:f3:88:a5:86:fa:18:44:1d:dd:28:f1:1a:
7d:ec:39:61:8a:c6:65:b8:0a:be:b3:94:78:11:df:
9a:68:79:eb:bb:ae:9b:45:f4:b7:50:55:8a:c1:96:
36:16:81:87:f3:c8:33:45:16:f8:29:ee:a0:f1:c0:
2b:69:4b:bf:19:3d:db:8c:56:4c:37:18:01:ad:10:
58:c6:89:bc:e7:7c:87:68:bc:86:05:96:dd:55:6f:
72:87:1a:09:39:5e:68:15:41:f2:19:cb:ab:86:d2:
0f:d6:7c:5a:48:8a:e3:3f:c6:dc:08:d6:e6:e9:6b:
28:2b:ba:8c:e7:1b:3c:7e:9f:ec:09:09:70:34:67:
d7:8d:60:8a:cd:1b:3d:4d:0c:8c:0a:23:48:63:3f:
34:16:c2:4b:d6:0a:12:b1:e3:de:df:4a:7b:4b:b6:
9d:1b:b2:3c:bb:77:33:c4:97:ca:32:a3:f3:7c:13:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:88:D5:AD:24:D3:43:E8:7B:16:72:8E:2C:FE:CF:C8:E2:B0:D5:F3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/94jVrSTTQ-h7FnKOLP7PyOKw1fM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.104.0/22
Signature Algorithm: sha256WithRSAEncryption
06:d8:ee:f3:b7:2d:ed:4f:4b:f7:d9:b4:96:9e:e2:53:f5:4c:
64:8b:83:6f:2c:0c:e5:a3:ff:91:83:2e:aa:fd:0a:28:d3:63:
93:75:33:95:d7:ac:8e:0d:b1:c9:d5:f5:61:bc:20:ba:b4:51:
11:8e:e2:ee:7b:ac:1a:5f:d3:fe:61:78:e1:6f:79:48:be:12:
1c:b6:2b:13:c2:9d:58:fb:0b:d6:b6:1c:05:9e:fd:44:a3:7c:
75:f7:3e:97:6d:20:14:35:58:b3:fb:a1:63:80:24:ee:7b:05:
4e:b6:e0:09:89:b8:6e:df:d8:97:96:5f:fb:94:64:0c:1b:77:
c9:5d:e6:ec:70:45:19:03:5e:af:95:74:9d:c8:9a:10:f4:fd:
1d:a4:e3:b8:50:a1:bc:b4:93:13:c3:d6:39:7b:0b:26:07:3f:
5b:7f:35:55:75:ae:3e:c7:5e:ee:4f:61:7d:31:2e:ae:ad:55:
a1:f9:91:b0:8d:ef:b5:6c:99:a6:56:10:33:85:15:4f:9d:11:
05:e4:0e:16:9c:76:0a:30:51:8a:61:08:5e:40:d1:58:59:a4:
22:ef:4c:bf:a7:51:ba:04:9e:d3:49:b9:d7:54:9a:33:de:00:
bd:dd:2f:96:09:37:61:8f:b5:78:43:a2:3d:3b:0a:dc:bf:6b:
3e:a7:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org