Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Q19J9arAu8FvnLjxDcbZ7IFXJwI.roa
File: Q19J9arAu8FvnLjxDcbZ7IFXJwI.roa (raw, json)
Hash identifier: rJGgu34FbbSp3mm9DCTEI2Z0qu0xy5dqfLcSK9cw814=
Subject key identifier: 43:5F:49:F5:AA:C0:BB:C1:6F:9C:B8:F1:0D:C6:D9:EC:81:57:27:02
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Q19J9arAu8FvnLjxDcbZ7IFXJwI.roa
Signing time: Thu 15 Sep 2022 02:39:42 +0000
ROA not before: Thu 15 Sep 2022 02:39:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.201.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=435F49F5AAC0BBC16F9CB8F10DC6D9EC81572702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:a4:30:0b:18:89:22:7d:44:2e:92:5e:93:
da:58:b7:c6:54:8f:c5:a2:db:84:e8:06:11:95:3a:
94:08:5c:27:43:d9:92:e2:33:b3:dc:c5:91:98:36:
cd:ec:e4:3a:99:f0:bb:72:00:c2:14:b6:83:34:5e:
90:74:ff:9a:d0:18:e7:05:2f:a9:60:90:0d:7c:e7:
8c:9d:78:ed:06:62:62:ff:7c:7a:4a:31:c0:b6:2e:
52:ce:ce:c7:a7:f7:57:38:b8:c0:c6:49:e8:7c:f7:
e0:9a:ff:ad:de:8b:1e:0b:21:bb:09:d8:84:4d:a2:
60:f0:e3:37:4d:41:2d:0a:91:1f:d8:43:15:17:c3:
58:14:66:d0:e3:73:7c:d2:24:1a:d5:a8:2a:f0:d3:
2c:d7:61:42:d8:b2:8a:49:52:31:be:19:ba:61:12:
57:e8:47:c7:0f:74:43:3f:78:64:3e:79:93:e3:f7:
cd:9f:75:8c:59:42:a0:a0:48:cc:3c:08:56:30:26:
59:ab:66:6d:53:f8:2b:95:eb:2e:4d:b8:45:8f:1d:
93:bf:22:49:5b:a5:02:75:de:d8:11:00:2d:c4:63:
7d:4f:b5:dd:94:ee:1d:c8:44:b6:b6:4d:db:66:38:
77:86:93:29:42:e7:e4:5b:7c:0a:4d:3b:e1:32:68:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:49:F5:AA:C0:BB:C1:6F:9C:B8:F1:0D:C6:D9:EC:81:57:27:02
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Q19J9arAu8FvnLjxDcbZ7IFXJwI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.0.0/18
Signature Algorithm: sha256WithRSAEncryption
26:56:0d:99:3a:4d:23:91:f0:ae:ee:c8:d1:34:0b:4f:86:5f:
de:11:83:c9:fa:b7:f2:ce:6e:47:c9:d6:9c:bc:ee:a3:42:83:
e0:6b:77:7b:a2:85:b1:c8:4b:81:79:9b:49:39:0d:2a:f6:f5:
79:cb:80:b9:cb:fb:46:41:de:55:11:b2:51:14:ab:33:fe:85:
40:cb:e4:32:9a:9d:f1:82:10:b8:53:5b:5e:9b:3f:e3:6c:75:
57:be:6a:3e:da:20:21:d1:dc:af:5b:b8:b5:44:ed:fd:0b:2d:
fc:10:e6:89:76:c8:ea:17:c6:40:e7:79:76:f4:6b:f2:9a:fb:
6f:63:b5:87:74:16:b8:db:b4:5f:75:13:c4:a4:37:49:cb:8d:
26:d8:16:5e:2e:b2:a9:48:68:ef:07:f3:81:76:97:25:92:86:
54:00:93:f6:13:a9:23:e0:05:17:b5:4b:be:85:e2:1e:75:bc:
78:52:6b:75:78:6c:ee:37:b7:8f:8e:90:d5:bb:e7:fb:a3:25:
78:06:db:e8:46:44:cd:88:87:97:ed:3f:cd:43:b6:35:4e:e2:
56:0b:64:8a:0f:66:20:88:95:5b:0d:29:15:71:54:bb:23:61:
60:31:74:d6:96:1f:a0:63:48:9d:d5:6b:88:46:f4:84:23:1e:
aa:cb:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-fra.rpki-client.org