Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/P5C4xswfZCgJDXhJcNUTBCDBTJo.roa
File: P5C4xswfZCgJDXhJcNUTBCDBTJo.roa (raw, json)
Hash identifier: 9m//JyBDWlcqPJEh6zZGc2YY9/056X7l4GYRpVoWK8U=
Subject key identifier: 3F:90:B8:C6:CC:1F:64:28:09:0D:78:49:70:D5:13:04:20:C1:4C:9A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/P5C4xswfZCgJDXhJcNUTBCDBTJo.roa
Signing time: Thu 15 Sep 2022 02:40:28 +0000
ROA not before: Thu 15 Sep 2022 02:40:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.58.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3F90B8C6CC1F6428090D784970D5130420C14C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:89:30:61:9d:03:08:7d:aa:5a:04:bd:e0:
71:82:18:ae:85:cb:8d:a4:75:fe:c1:5e:02:d4:f7:
95:83:ac:fc:79:73:ff:7f:ca:ca:36:40:ad:14:57:
82:83:46:d4:84:48:e9:e2:22:51:6e:b6:40:d7:9d:
3a:da:79:f7:54:0b:86:06:98:f2:35:41:af:f9:6f:
3a:95:bc:ef:cd:dc:88:ba:9a:e6:35:eb:f2:f6:1b:
af:25:dc:29:76:09:16:76:a6:0e:2b:2c:9a:26:40:
46:9c:1e:38:62:63:7a:21:b7:c4:ac:73:94:f9:4f:
90:de:91:5b:bb:c6:e2:1d:25:fe:5c:13:54:43:e6:
c3:ef:18:7d:c5:02:e0:5d:08:93:43:c8:9b:2e:49:
a1:75:af:e0:16:18:6d:ed:d9:f1:28:f7:33:42:63:
97:19:09:0f:d8:58:10:f4:38:09:57:47:a6:39:00:
dc:6e:77:28:20:16:f0:ea:0a:1c:c3:26:f3:a8:94:
ee:44:7e:c2:37:11:ca:97:bb:44:57:67:22:ae:85:
5a:af:1f:50:f5:23:91:db:a2:e9:72:c1:c2:4d:3f:
6e:a8:f3:38:17:89:b5:d5:44:7b:77:4a:78:16:72:
55:27:d7:3f:28:97:56:a5:07:4a:2b:88:b7:7f:31:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:90:B8:C6:CC:1F:64:28:09:0D:78:49:70:D5:13:04:20:C1:4C:9A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/P5C4xswfZCgJDXhJcNUTBCDBTJo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:a1:79:2f:0d:30:02:06:08:d1:5b:2f:b0:7f:14:7c:86:21:
1b:ca:fb:3d:37:18:c8:48:1f:aa:51:f0:11:33:ee:ed:06:e6:
3c:d0:9d:1d:a9:c7:5f:1b:e7:74:51:2d:55:aa:e0:d8:40:d3:
ab:54:38:05:6c:94:04:6e:f9:f6:e9:7a:99:c6:57:23:aa:e9:
a7:59:59:ea:78:66:d7:17:9a:44:22:0a:ff:12:78:18:a0:fc:
ad:b9:ff:6f:67:0b:b2:43:19:b5:31:ca:10:43:99:b9:4b:eb:
cd:76:02:09:c9:39:32:90:c4:3b:08:40:fb:f1:43:1d:36:cd:
67:d5:c9:39:22:2a:14:f4:d2:12:36:48:0a:0b:4f:9e:b7:f9:
41:c2:68:c6:c0:ac:a2:e9:ef:27:8f:f7:3b:2a:b5:e5:80:1a:
d4:b8:a9:54:42:fd:06:a2:9b:0b:01:37:a5:c8:f7:db:26:52:
66:96:83:b5:28:c9:06:89:2c:a9:c3:f0:a5:75:b9:fd:bd:ea:
09:ea:f1:9a:aa:2a:22:2b:10:ba:dd:29:4f:ca:28:b0:f7:ea:
e4:d5:54:fb:09:33:72:af:07:84:a7:0f:13:6a:9c:43:70:2d:
52:65:f5:46:67:ee:e0:1f:66:6d:60:73:87:b7:7b:7d:f1:fa:
1a:4d:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org