Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Qo434tqj70VlPWlMQM-m6ZgJKEg.roa
File: Qo434tqj70VlPWlMQM-m6ZgJKEg.roa (raw, json)
Hash identifier: 9kIErClin0JdgduI1q6gOf58r0CLQRyf+lANdd4Qg/8=
Subject key identifier: 42:8E:37:E2:DA:A3:EF:45:65:3D:69:4C:40:CF:A6:E9:98:09:28:48
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10D0
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Qo434tqj70VlPWlMQM-m6ZgJKEg.roa
Signing time: Tue 16 May 2023 08:36:40 +0000
ROA not before: Tue 16 May 2023 08:36:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 210.63.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4304 (0x10d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:40 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=428E37E2DAA3EF45653D694C40CFA6E998092848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:35:5f:c3:b3:4a:3f:45:ae:36:7e:50:78:
a1:fa:78:8b:6e:a9:cd:ac:18:b7:25:3a:87:ee:de:
3a:3c:4c:2d:a7:a0:ca:02:42:7b:b5:df:0a:b7:2b:
89:43:12:d9:e0:18:15:5c:cd:02:98:ba:94:0d:d0:
a3:42:03:cb:53:70:42:3b:78:66:bf:35:1e:07:1d:
66:05:d2:e1:dc:e4:1d:cd:84:ee:80:a6:90:02:21:
c7:dc:28:d4:d0:bf:bf:60:78:63:4f:2f:5d:35:1a:
19:fe:71:72:90:be:0f:ec:7f:de:b4:5d:ff:4c:a2:
26:8d:ca:b2:e6:1d:ae:62:49:4c:cf:fc:76:ee:f7:
c8:03:fb:a6:b8:be:f8:ad:ac:25:d9:12:ca:e0:f3:
be:e6:05:6c:92:aa:65:fe:fc:7b:ca:fb:6c:4e:fd:
0b:a4:b1:68:37:33:37:0d:04:09:08:0d:10:16:53:
21:3d:db:cb:d1:32:32:b2:7d:dd:20:b3:12:47:64:
89:9b:3b:a2:98:6b:67:a0:a5:00:91:b5:e5:53:d9:
88:b0:81:48:ae:18:09:28:90:ad:d9:9a:65:29:c3:
1e:7e:ca:8f:ad:3c:67:28:d5:23:3f:3b:64:00:3f:
2e:68:47:5d:83:07:51:0b:59:2f:73:50:f7:31:eb:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:37:E2:DA:A3:EF:45:65:3D:69:4C:40:CF:A6:E9:98:09:28:48
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Qo434tqj70VlPWlMQM-m6ZgJKEg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.236.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5e:c7:e8:83:3c:03:ca:6d:f3:77:d7:45:95:be:4b:32:1e:
5f:19:35:a0:fc:46:76:93:e3:31:73:79:4d:36:41:7d:ae:17:
1b:6f:0a:33:1c:58:33:34:61:7c:c5:00:bd:cf:87:0f:67:0a:
5f:60:a9:ed:f9:36:01:7b:03:58:97:db:9e:dc:3d:4e:a6:95:
91:b1:a6:33:10:73:e5:d7:88:ac:f9:23:50:3e:98:9c:e2:00:
1a:df:dc:53:90:ac:f9:f5:1c:af:7c:26:bc:b4:55:ca:00:97:
48:3d:93:c3:02:ab:5c:1a:65:c0:35:3a:a3:ae:c8:6c:83:a8:
b0:4f:a5:85:9f:a4:02:56:e9:f4:b1:b5:50:31:e1:cd:2c:10:
db:e7:30:c7:e9:ac:6e:73:8f:5f:7a:b8:14:47:e0:89:39:bf:
2f:dc:62:da:dc:97:19:b3:b1:7e:1d:26:6f:4b:cf:01:c1:fa:
88:04:64:42:25:47:49:40:77:69:fb:1f:eb:94:09:0e:e6:78:
3f:25:cb:4c:d5:9d:ea:71:d8:fa:e6:3e:34:ba:9a:30:5b:4d:
d3:d1:30:59:f8:05:78:d3:da:c2:43:65:c1:08:66:d2:88:01:
9a:bf:5e:3c:d3:ec:90:9e:03:70:28:e1:dc:90:0e:6b:cc:ff:
2c:d9:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org