Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/MgS8jgcXxDexLzyl11ZfICRsRd0.roa
File: MgS8jgcXxDexLzyl11ZfICRsRd0.roa (raw, json)
Hash identifier: vIsk3/elTlp2V8zo0hFabkfxxPlKoAkGdmhzjalmGfQ=
Subject key identifier: 32:04:BC:8E:07:17:C4:37:B1:2F:3C:A5:D7:56:5F:20:24:6C:45:DD
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1042
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/MgS8jgcXxDexLzyl11ZfICRsRd0.roa
Signing time: Tue 16 May 2023 08:35:57 +0000
ROA not before: Tue 16 May 2023 08:35:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 103.36.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4162 (0x1042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:35:57 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3204BC8E0717C437B12F3CA5D7565F20246C45DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:57:9b:25:58:5d:71:04:7a:cd:a6:f1:8d:
16:5a:4c:4c:5f:d4:02:bc:0f:96:d7:9f:56:9c:43:
e6:02:3f:81:41:d3:d6:7c:a7:a4:c6:e4:e1:18:62:
2a:c0:ad:8b:1d:c3:80:5c:f0:9e:22:db:66:6a:67:
76:85:39:a4:31:89:ca:74:26:64:6e:63:eb:0e:01:
b6:83:db:54:56:e6:18:09:40:13:3a:c7:a9:32:fa:
f1:21:10:4a:df:13:24:b1:94:1a:2f:4e:8f:01:da:
5d:02:79:a5:cb:47:47:50:ee:c2:60:fd:88:13:49:
70:ee:60:4b:41:83:88:be:c2:f1:e5:bd:c8:89:38:
72:2c:22:08:b8:73:b8:42:25:9f:8c:7f:04:8d:16:
ea:f8:4d:37:44:0b:ae:59:e3:8a:5a:46:eb:94:a6:
7b:0d:4f:81:20:53:86:08:95:eb:47:21:ef:d5:41:
2f:e4:4c:b6:97:6a:f5:b9:1e:14:46:96:e2:4a:c1:
ff:8f:90:3c:c6:12:43:d3:a3:05:ed:be:5f:aa:c9:
6c:04:5b:2f:a6:27:7b:2c:d6:5e:13:c6:65:14:21:
fe:b0:29:4b:31:34:c8:f5:41:56:5a:ce:3c:18:7e:
78:3f:53:5d:00:fa:5a:52:17:23:cd:2e:0f:07:84:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:BC:8E:07:17:C4:37:B1:2F:3C:A5:D7:56:5F:20:24:6C:45:DD
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/MgS8jgcXxDexLzyl11ZfICRsRd0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.116.0/22
Signature Algorithm: sha256WithRSAEncryption
91:6d:85:9e:11:55:6b:5a:11:c6:c6:97:8f:b9:0e:ff:3b:c0:
0b:9d:f9:70:a1:82:82:f3:f3:a7:a8:bc:d7:01:7b:40:0e:e0:
23:05:d8:3e:9f:85:21:14:83:cd:df:b1:f9:98:29:5b:a3:05:
49:be:84:f9:f4:db:a6:7f:7d:a3:3b:5c:e0:86:27:c8:e1:b8:
04:9f:51:60:a3:d7:64:eb:11:f6:9e:8a:9d:52:ee:78:d9:e8:
54:00:11:e5:84:81:8b:7e:47:03:24:85:53:e8:40:aa:bc:f4:
7f:a0:f8:33:56:03:ef:7b:1a:67:ee:0a:da:b0:fe:df:cf:4a:
cb:a9:fe:1b:e7:ef:97:bd:8f:a4:d9:9a:a1:30:ec:7e:2e:9f:
fe:b3:bf:7d:e9:e7:b9:6f:ca:20:25:e8:1b:f8:08:5c:71:d5:
5e:83:3c:17:a6:78:f7:3f:f5:86:59:0f:dd:af:ca:f4:cb:92:
ad:6a:53:a9:12:76:f4:5a:b2:70:d8:b0:22:f8:23:c3:cf:71:
11:06:43:09:15:99:3a:1b:86:fb:c2:eb:d8:ad:a0:8d:55:0b:
e4:22:7b:c8:78:2b:4e:c2:ab:2f:90:1b:61:6f:bd:a8:52:ce:
cf:fa:92:f3:d6:26:b4:91:fd:d0:78:e3:e2:72:95:d3:1a:e0:
ca:66:18:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:45 2023 by rpki-client on console-fra.rpki-client.org