Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/JKyYOPVr4LQHpS5Ygow6sd2SncE.roa
File: JKyYOPVr4LQHpS5Ygow6sd2SncE.roa (raw, json)
Hash identifier: mE6RAUZ2QPCvnu6U48e9nSBRz+7QQPUncIC+xB1pP3w=
Subject key identifier: 24:AC:98:38:F5:6B:E0:B4:07:A5:2E:58:82:8C:3A:B1:DD:92:9D:C1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JKyYOPVr4LQHpS5Ygow6sd2SncE.roa
Signing time: Thu 15 Sep 2022 02:39:45 +0000
ROA not before: Thu 15 Sep 2022 02:39:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.202.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=24AC9838F56BE0B407A52E58828C3AB1DD929DC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:3e:af:c3:ec:23:06:27:1c:ce:d4:91:8e:
ec:49:db:ce:c5:3d:6c:ea:d6:cb:19:5c:04:8c:45:
a3:a9:56:96:59:1d:3c:15:a2:24:df:e8:7f:76:aa:
c7:eb:0c:b9:bf:f9:8a:e5:e7:00:f9:bc:fa:62:84:
ab:6e:e6:7f:4e:ad:e4:62:e2:2f:af:aa:9f:16:84:
1d:1a:b5:ec:f4:7a:c3:25:a4:e4:54:2d:14:40:9c:
d8:d1:cd:b0:b9:19:ea:50:aa:28:5b:78:b1:40:d9:
32:72:50:94:f0:b1:ab:73:13:7d:93:71:08:f9:35:
51:dc:1b:80:85:45:f5:e0:45:62:c9:32:3a:ec:c3:
d2:89:02:02:75:fc:cd:c8:9e:f5:05:aa:49:e7:6d:
5b:aa:bd:bd:1a:12:04:d8:99:34:95:8e:95:f3:20:
f1:ec:da:79:dc:dc:ac:6a:40:f8:22:cf:13:95:e1:
7e:b6:11:12:32:11:bd:28:f1:e5:0b:aa:65:a7:29:
f8:1a:5d:44:9b:f0:b0:ae:7a:1a:6d:56:a6:42:82:
cc:2d:b4:71:8d:7b:28:0c:1e:16:e0:da:ef:35:f9:
df:e6:42:29:84:18:d6:cf:d0:bd:2f:0c:f0:13:5b:
b5:3d:3f:4a:3d:31:28:aa:0d:7b:12:ec:ec:fd:45:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AC:98:38:F5:6B:E0:B4:07:A5:2E:58:82:8C:3A:B1:DD:92:9D:C1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JKyYOPVr4LQHpS5Ygow6sd2SncE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b2:58:89:e4:15:aa:7b:1c:45:73:af:ed:53:21:70:dd:38:31:
23:e9:57:3e:83:b1:d6:a6:d1:e7:2d:0c:df:be:4e:43:d3:2f:
24:1d:c3:20:a0:6f:f9:c5:c7:11:48:db:f2:52:bc:b0:71:8e:
7f:92:4c:e8:bc:cf:20:aa:21:23:15:95:dc:c2:2b:06:08:00:
65:4b:67:d4:d2:b3:a7:61:10:6b:14:59:20:fd:f0:a9:3d:81:
ab:9b:41:84:a1:8f:e9:dd:66:65:62:c8:55:41:0e:58:d2:65:
d1:c7:db:49:8d:c8:bf:55:e0:b3:0e:5f:c0:8d:e5:8c:8d:77:
19:6f:f6:3e:71:de:1d:f6:37:41:bc:c4:16:e4:b9:1e:2f:d3:
6a:36:4e:4d:88:90:fa:b3:a6:19:bb:0f:45:a8:58:4a:5a:44:
0b:3d:a3:97:28:44:71:59:e9:46:b2:b6:cb:db:2e:82:7a:0d:
8d:3a:68:3e:4d:64:50:e1:ac:d8:3e:cd:97:60:5c:4a:91:cb:
a8:ed:94:ad:41:9d:30:4c:47:85:c6:c0:f6:b2:b4:0c:a9:f7:
86:fb:06:f6:0d:2c:26:e4:9d:2a:9d:cd:be:85:29:a6:3f:b1:
a5:fd:8a:55:e0:42:92:dc:91:79:ad:e4:71:ee:b5:3f:9c:44:
9e:17:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:54 2023 by rpki-client on console-fra.rpki-client.org