Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/GA3mmThSx8aIwTSxiU2oufF0iJE.roa
File: GA3mmThSx8aIwTSxiU2oufF0iJE.roa (raw, json)
Hash identifier: AvzAJBC815YbNFz/VtFPe6FBIFxlvqPmoedaWvBq8l8=
Subject key identifier: 18:0D:E6:99:38:52:C7:C6:88:C1:34:B1:89:4D:A8:B9:F1:74:88:91
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 107A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GA3mmThSx8aIwTSxiU2oufF0iJE.roa
Signing time: Tue 16 May 2023 08:36:15 +0000
ROA not before: Tue 16 May 2023 08:36:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 60.244.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4218 (0x107a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:15 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=180DE6993852C7C688C134B1894DA8B9F1748891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:f7:cd:c3:4c:44:5e:4b:bd:1a:c2:0a:52:
6d:1e:46:2a:29:a4:3a:6e:64:69:7e:18:d9:6b:43:
4e:62:39:56:6c:d9:e7:36:3e:92:2e:3f:25:3d:40:
c6:a7:ab:bc:5c:92:8a:1d:e7:51:a1:17:4b:56:4b:
e8:2d:46:5b:7e:e1:80:4d:f8:ca:0e:37:e7:ad:24:
6c:e8:cc:ea:09:d7:49:35:73:4f:ef:5f:a7:e0:1c:
b7:0c:18:1b:56:db:59:3b:5d:23:20:28:e0:fd:eb:
73:a8:9a:48:46:23:1c:38:b8:16:9a:a4:82:4b:32:
1f:a1:a1:ce:03:cb:f8:54:03:c8:9f:60:0e:64:e0:
93:1a:c3:ba:6d:93:56:7f:e5:a4:ed:e0:58:15:d0:
47:7f:d7:dc:9a:32:b1:28:b4:f8:78:49:fa:b7:7f:
10:59:0f:f1:d4:4a:70:a1:b0:37:53:b8:06:fd:7d:
3d:b2:c0:92:0b:a2:98:89:9b:58:31:71:1c:ae:38:
25:a9:10:1d:83:5b:64:d4:5a:c1:63:82:2c:27:61:
4a:ac:76:93:f0:66:f6:33:18:2a:79:bb:e4:f4:b8:
83:96:52:c1:39:f6:ee:9a:73:a1:79:1d:e1:88:80:
9b:45:ce:a0:e2:52:e0:15:26:59:f6:66:3c:51:99:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:E6:99:38:52:C7:C6:88:C1:34:B1:89:4D:A8:B9:F1:74:88:91
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GA3mmThSx8aIwTSxiU2oufF0iJE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
84:d5:df:08:96:4f:f4:0f:45:21:ce:f3:fa:bc:9a:9b:f0:ec:
89:ce:7e:47:44:03:5b:30:03:83:0b:59:76:a7:b7:33:dc:33:
ee:47:a2:67:f3:0e:e6:ab:41:7e:ef:3e:c0:1c:f6:03:58:89:
d1:07:c9:4e:a1:a3:fc:90:bb:d0:ec:ff:2d:f9:61:60:ba:12:
05:b0:75:46:a3:cb:13:74:5a:b8:c1:b1:62:87:e3:4a:be:f5:
27:be:e8:83:ae:a1:92:cc:37:f5:10:4d:1d:99:1a:83:7e:bf:
08:9d:69:3e:91:3c:4c:77:a8:6f:91:ec:6a:19:f6:bd:2a:58:
31:ad:5b:e0:99:5e:27:15:54:49:6f:19:ae:8b:27:b2:00:49:
86:50:7b:d5:bb:c0:23:0c:70:36:57:e8:a4:c9:10:03:d9:7a:
12:59:b9:30:4a:45:09:95:a8:aa:1a:87:16:56:17:64:d7:27:
69:76:71:e4:f7:ba:c3:2f:f7:d8:36:d5:a4:ca:51:d1:a4:34:
55:f9:0f:be:ba:8f:65:81:91:52:9b:0b:21:54:91:d2:52:f1:
87:e6:80:b7:df:5f:0c:e1:36:e5:b1:ce:4d:19:15:fb:9d:ba:
8c:7b:eb:d5:f1:14:0b:1a:ee:ed:57:53:8e:ef:9d:39:0d:d5:
e4:b3:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:44 2023 by rpki-client on console-fra.rpki-client.org