Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/E7erfnkZoEBtePpy1-5BLqLiDwE.roa
File: E7erfnkZoEBtePpy1-5BLqLiDwE.roa (raw, json)
Hash identifier: KHhjs+E2FvR3HriFNOHn4e116Sm+a/8Y+XWpwy1/sfA=
Subject key identifier: 13:B7:AB:7E:79:19:A0:40:6D:78:FA:72:D7:EE:41:2E:A2:E2:0F:01
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/E7erfnkZoEBtePpy1-5BLqLiDwE.roa
Signing time: Thu 15 Sep 2022 02:40:26 +0000
ROA not before: Thu 15 Sep 2022 02:40:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.200.128.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=13B7AB7E7919A0406D78FA72D7EE412EA2E20F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:0a:84:c0:25:40:55:ec:cc:a9:25:19:d3:
c0:1a:fd:b0:48:9b:f5:eb:db:08:8f:37:f6:81:d6:
fa:00:1a:68:0f:dd:5d:c1:e0:51:1a:c1:45:cb:c1:
9a:1a:d6:94:c2:6b:1b:8a:19:7b:94:32:2f:2e:c2:
f1:e1:18:45:16:2f:0a:b7:54:2d:bf:a1:e0:23:fa:
14:c5:25:2f:75:7b:fd:9d:f3:3e:2e:53:fe:cd:15:
8e:c5:67:a1:d9:13:9a:49:e1:91:df:fd:a2:98:bb:
8c:59:c9:1b:3d:89:5f:57:9f:3c:9d:18:18:16:3a:
c6:ba:b5:84:60:65:0b:59:15:aa:b5:50:f8:54:5f:
d2:c0:cc:7c:e8:2e:8b:65:be:50:44:eb:85:97:84:
cd:c6:93:8a:06:2a:2a:ea:32:77:32:5a:da:98:0b:
6a:1a:8e:22:96:c6:ad:8f:6a:f2:ef:b8:56:66:e9:
56:78:d0:48:9e:ba:85:d2:c8:8c:7d:2a:c5:15:27:
13:a7:6c:b3:39:b6:c4:d7:12:6e:ad:77:cd:45:7c:
04:7d:a1:da:8a:45:18:d6:4b:96:a7:05:16:a2:b3:
a9:10:00:b0:75:f5:4c:e2:80:e9:23:f7:0f:6d:a9:
4a:38:2b:cd:05:92:57:08:a9:85:0f:85:c7:82:c6:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:AB:7E:79:19:A0:40:6D:78:FA:72:D7:EE:41:2E:A2:E2:0F:01
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/E7erfnkZoEBtePpy1-5BLqLiDwE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.128.0/18
Signature Algorithm: sha256WithRSAEncryption
69:26:2a:a3:a5:c5:d7:fb:45:7a:80:20:68:71:6c:5f:56:8d:
a3:7b:19:83:04:85:71:d0:72:4c:78:a6:ca:de:b2:96:f9:42:
29:c1:ea:6c:74:86:b1:cb:19:af:a2:f9:b1:43:59:88:47:81:
ac:be:dc:4f:bd:2a:fe:5b:f7:ce:31:6a:68:7b:04:1e:a4:da:
9c:26:0a:22:82:7b:1a:fe:1a:5e:b2:19:08:b3:4a:f7:ad:0d:
45:f3:2d:85:d2:7c:2e:4c:29:d7:e9:19:69:ce:2e:2b:ce:52:
c1:89:4a:36:c3:c5:78:fb:b6:b9:97:c1:df:ad:4b:03:e5:89:
98:83:ca:6d:2d:54:2c:16:af:38:37:82:74:8b:0f:74:2c:69:
af:ee:17:b2:32:c2:bd:64:77:e4:a6:61:1e:30:71:66:72:2b:
ed:02:04:f8:09:91:d5:b3:b4:20:ad:4f:dd:6c:9f:06:aa:35:
42:04:5e:1c:2f:e9:ea:3a:6c:ac:7f:9c:36:19:5c:75:e5:47:
30:f4:39:6c:db:13:e7:a3:94:5a:c2:dd:ed:53:71:bb:d1:03:
d7:38:d1:1f:9a:fa:cf:24:35:d4:97:e0:aa:c8:bd:9c:69:f5:
9d:8c:3e:3e:1e:8d:bf:ce:e8:cd:8a:1b:02:6b:99:81:02:04:
30:04:85:56
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDEzQjdBQjdFNzkxOUEw
NDA2RDc4RkE3MkQ3RUU0MTJFQTJFMjBGMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC92wqEwCVAVezMqSUZ08Aa/bBIm/Xr2wiPN/aB1voAGmgP3V3B
4FEawUXLwZoa1pTCaxuKGXuUMi8uwvHhGEUWLwq3VC2/oeAj+hTFJS91e/2d8z4u
U/7NFY7FZ6HZE5pJ4ZHf/aKYu4xZyRs9iV9XnzydGBgWOsa6tYRgZQtZFaq1UPhU
X9LAzHzoLotlvlBE64WXhM3Gk4oGKirqMncyWtqYC2oajiKWxq2PavLvuFZm6VZ4
0EieuoXSyIx9KsUVJxOnbLM5tsTXEm6td81FfAR9odqKRRjWS5anBRais6kQALB1
9UzigOkj9w9tqUo4K80FklcIqYUPhceCxrGHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUE7erfnkZoEBtePpy1+5BLqLiDwEwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvRTdlcmZua1pvRUJ0ZVBweTEtNUJM
cUxpRHdFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLIgDAN
BgkqhkiG9w0BAQsFAAOCAQEAaSYqo6XF1/tFeoAgaHFsX1aNo3sZgwSFcdByTHim
yt6ylvlCKcHqbHSGscsZr6L5sUNZiEeBrL7cT70q/lv3zjFqaHsEHqTanCYKIoJ7
Gv4aXrIZCLNK960NRfMthdJ8Lkwp1+kZac4uK85SwYlKNsPFePu2uZfB361LA+WJ
mIPKbS1ULBavODeCdIsPdCxpr+4XsjLCvWR35KZhHjBxZnIr7QIE+AmR1bO0IK1P
3WyfBqo1QgReHC/p6jpsrH+cNhlcdeVHMPQ5bNsT56OUWsLd7VNxu9ED1zjRH5r6
zyQ11Jfgqsi9nGn1nYw+Ph6Nv87ozYobAmuZgQIEMASFVg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org