Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/C3hyO5HRQkTfIECaVaAlYKPZZAg.roa
File: C3hyO5HRQkTfIECaVaAlYKPZZAg.roa (raw, json)
Hash identifier: D2z6b15K5QNkI16YMrZeHu+2hSb+LutFb/Peth9pr1Y=
Subject key identifier: 0B:78:72:3B:91:D1:42:44:DF:20:40:9A:55:A0:25:60:A3:D9:64:08
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/C3hyO5HRQkTfIECaVaAlYKPZZAg.roa
Signing time: Thu 15 Sep 2022 02:39:44 +0000
ROA not before: Thu 15 Sep 2022 02:39:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.203.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0B78723B91D14244DF20409A55A02560A3D96408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:32:04:72:ad:24:1a:35:67:c5:f7:16:50:5c:
b4:46:48:3c:09:5b:d2:a7:f6:28:ef:2e:b0:0a:67:
b4:2a:ee:39:e5:c1:33:7f:15:5a:60:2c:bb:ee:c1:
f2:4f:9b:d4:61:60:0f:94:55:05:c9:64:96:2b:ec:
3c:be:2a:54:c8:46:b9:d5:ad:54:76:d6:e7:a2:9d:
75:f4:71:99:72:7d:7b:16:5f:77:b4:ad:d4:21:a0:
89:d4:be:6c:fb:e5:df:24:27:db:b5:f1:6a:bf:b3:
55:d2:cc:cd:3d:bd:81:94:dd:6a:94:3a:5f:08:e2:
65:9c:c9:fc:6f:66:2e:07:d6:67:85:f6:be:ec:20:
c7:79:1f:b8:0b:78:ad:6b:ec:d0:c5:e9:1e:b3:68:
dd:b7:8a:49:be:24:36:d1:1d:45:f0:72:1f:2d:2f:
5c:06:c7:8c:2b:48:27:6f:a4:e4:99:de:35:f8:95:
31:40:ea:53:02:59:16:b1:79:41:ee:bf:7d:99:a0:
2e:98:18:74:1f:2c:f3:c2:d3:ec:3a:e2:6f:f8:3f:
bd:d4:cc:39:6c:2a:cb:48:de:96:d8:87:e3:aa:01:
d7:6a:99:9f:b5:fd:fa:51:1e:3c:95:e8:67:56:85:
a0:4a:10:85:dd:af:bb:16:1d:4f:f0:c8:85:28:53:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:78:72:3B:91:D1:42:44:DF:20:40:9A:55:A0:25:60:A3:D9:64:08
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/C3hyO5HRQkTfIECaVaAlYKPZZAg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/24
Signature Algorithm: sha256WithRSAEncryption
84:04:0d:06:95:fe:ff:17:f7:a3:d8:26:77:2a:2a:77:01:cd:
fd:d3:56:b8:40:7b:44:5d:8b:50:6c:be:48:c6:fa:4d:db:f4:
11:f8:3e:bb:56:d8:96:94:d7:9e:01:e1:46:cf:66:57:2c:7d:
fe:79:99:e0:27:36:70:02:0c:5f:88:d7:5e:63:5e:60:73:e3:
47:2d:9c:7b:42:f0:30:a7:3b:1a:33:95:bf:17:6f:e1:63:bf:
94:dd:f6:1f:04:16:76:66:76:70:dd:23:73:fb:69:5d:66:94:
94:a0:52:ad:b6:b9:8f:f2:66:e8:52:6e:a3:29:0b:a4:e6:9d:
0f:f7:5b:bd:f1:10:39:2a:fd:c6:b9:7f:a1:e5:02:18:6c:b3:
72:2c:d7:88:53:7a:44:44:f5:13:97:f1:32:8d:e5:78:3e:a9:
f5:22:59:9e:b8:9d:49:b3:87:1b:ad:64:32:21:a9:1a:2a:44:
ad:7d:2a:0f:a1:cd:3c:23:31:19:2a:b5:0c:1c:36:26:eb:4a:
b2:33:fc:ba:88:93:c9:9e:d1:5b:45:cf:37:cf:f6:0a:1c:2d:
29:62:11:88:88:f5:6d:06:93:87:66:d6:97:1d:58:28:8c:a6:
2e:d3:03:09:0a:4b:37:04:49:92:60:25:0d:ab:dc:1f:c1:3c:
e9:fa:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org