Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/GRx4SE1c7tDdQvq5cJN75CWpf0w.roa
File: GRx4SE1c7tDdQvq5cJN75CWpf0w.roa (raw, json)
Hash identifier: Fq/cTXkZulsiXimzCFcs012fZPSiAgyUE7r8aLRJdJM=
Subject key identifier: 19:1C:78:48:4D:5C:EE:D0:DD:42:FA:B9:70:93:7B:E4:25:A9:7F:4C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GRx4SE1c7tDdQvq5cJN75CWpf0w.roa
Signing time: Thu 15 Sep 2022 02:40:02 +0000
ROA not before: Thu 15 Sep 2022 02:40:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.201.74.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=191C78484D5CEED0DD42FAB970937BE425A97F4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:cd:68:ce:ef:a4:42:d2:7a:68:dc:e6:01:
63:88:79:bf:a1:ad:79:c9:5f:a7:43:36:3c:bc:02:
8d:0b:7e:c9:b3:1b:eb:41:0f:69:9b:59:5d:3e:17:
85:2d:67:86:58:5a:1f:d7:a1:f9:65:d1:de:b6:d5:
9f:22:97:b4:4f:b6:a4:3d:96:1f:0b:c6:91:53:7d:
17:8a:8d:7f:26:65:3c:46:1a:4c:02:1a:9c:fd:13:
0c:07:ce:e6:d6:02:0d:46:41:a5:dd:07:59:6c:09:
04:46:b1:54:77:a9:f5:1e:df:d0:1b:a6:2d:a2:14:
25:2e:64:cf:5a:9a:79:8b:98:a9:0d:5b:e9:0b:d1:
96:b1:c8:d8:b1:15:8d:24:de:64:96:f2:ef:3e:09:
af:9e:ee:53:3e:1b:fb:c1:10:9a:3d:06:d7:b9:a9:
32:c9:da:f8:60:ea:f9:dd:37:b8:60:1c:99:d8:7c:
7f:a3:db:e3:58:90:de:22:58:a7:31:4c:35:b7:34:
ea:9d:81:96:3c:61:c9:a4:37:1a:05:b2:9e:d0:c6:
23:30:e1:1e:16:26:ad:37:98:ef:ff:1f:e3:3f:53:
b2:6f:e1:12:d2:fd:6c:5d:70:80:91:56:8b:c0:a3:
93:37:e9:e8:9a:b5:2c:7a:ae:a0:8d:30:17:fd:b3:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1C:78:48:4D:5C:EE:D0:DD:42:FA:B9:70:93:7B:E4:25:A9:7F:4C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GRx4SE1c7tDdQvq5cJN75CWpf0w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.74.0/23
Signature Algorithm: sha256WithRSAEncryption
61:38:0f:29:ae:d8:08:4d:12:85:40:7e:da:8e:30:c2:7b:a9:
05:2a:f6:02:8f:6f:8b:c1:35:83:1f:30:12:d1:84:36:10:73:
7d:aa:de:31:bb:da:d6:c0:7a:73:7b:32:57:d9:5c:2b:30:35:
2e:3f:0f:af:c2:93:5e:ad:a5:6c:67:f6:e6:d9:d0:4f:46:49:
e4:99:24:44:ae:5c:a9:ce:a9:18:fc:09:5c:8a:11:d3:93:3d:
1b:82:a2:86:66:50:f2:e6:a6:b4:74:e1:61:e3:08:3b:d9:4a:
9f:c2:9b:68:06:b7:3c:81:e5:3e:32:2b:5e:16:87:4e:08:2e:
79:9a:a0:f3:c1:bf:8a:11:4e:1b:86:a5:ce:59:e1:a4:1e:a0:
0d:3f:36:32:e9:19:fe:34:b6:be:c6:34:95:6e:0f:37:9d:07:
0b:d1:85:22:82:34:d1:03:3b:68:71:32:9d:da:94:1e:93:bd:
6a:a0:82:39:5c:63:ab:4b:5d:0a:2a:af:38:a9:a4:47:0c:39:
33:f4:51:c8:a0:63:60:b1:1b:4f:29:81:56:d0:dc:f0:6c:4f:
a1:3d:8c:e6:fc:12:3d:58:d1:65:05:fd:13:ee:dd:26:7f:48:
10:59:11:b3:c4:5c:04:d8:d6:f0:65:7e:b1:29:40:91:ee:08:
1e:97:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org