Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/UQX1swvN2Yhh25IHsY-TF5v-BfM.roa
File: UQX1swvN2Yhh25IHsY-TF5v-BfM.roa (raw, json)
Hash identifier: wHWJNwmvxuzH7inRLNf9hQ3z1SeAw6yKTrlTuyHMIFE=
Subject key identifier: 51:05:F5:B3:0B:CD:D9:88:61:DB:92:07:B1:8F:93:17:9B:FE:05:F3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1151
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UQX1swvN2Yhh25IHsY-TF5v-BfM.roa
Signing time: Fri 11 Aug 2023 09:10:52 +0000
ROA not before: Fri 11 Aug 2023 09:10:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 222.250.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4433 (0x1151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Aug 11 09:10:52 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5105F5B30BCDD98861DB9207B18F93179BFE05F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:03:e1:cf:46:f5:c5:fd:6f:b4:74:ee:eb:
5d:e9:8a:17:69:8a:2b:a0:cb:37:29:3c:15:4e:15:
17:90:90:a4:1d:15:ea:52:24:f8:70:01:f1:8d:85:
04:20:2c:5f:0c:44:78:3f:65:73:c6:4e:a2:52:69:
9b:31:1b:59:37:de:36:2e:17:8b:ea:44:b3:12:dd:
c8:bf:fa:c9:a7:fd:20:10:93:76:45:fb:f0:b0:ce:
8a:fc:d1:4f:c3:68:a5:bf:e5:da:e8:f8:dd:44:b6:
9f:ec:42:c5:02:1c:05:72:71:d3:6b:ab:20:5a:b3:
40:3f:c2:2a:23:18:c1:f6:00:87:24:00:90:01:02:
35:a5:ed:6b:40:2d:5c:8a:96:ac:97:ef:c7:63:ff:
a4:f3:3c:ca:7c:f5:dc:50:8a:42:68:fb:9c:0b:71:
c0:78:8c:c8:21:18:55:5e:d8:59:52:51:9b:44:d4:
4f:7c:33:16:44:e5:ba:1c:c8:ea:3c:e8:d7:a9:a7:
6e:1e:4f:7f:b0:26:f2:84:18:34:06:40:39:49:c7:
70:74:2e:ae:bb:b5:c6:95:c9:1f:3e:6d:f4:b2:e7:
ca:c6:01:5c:b8:78:9d:1f:d3:64:25:02:0d:d5:cf:
ed:38:d8:94:90:d8:a3:43:f3:7b:55:ba:7f:16:8f:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:F5:B3:0B:CD:D9:88:61:DB:92:07:B1:8F:93:17:9B:FE:05:F3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UQX1swvN2Yhh25IHsY-TF5v-BfM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
82:68:bb:1e:e0:23:e9:84:90:8f:d4:e7:91:a2:e8:d0:1f:04:
b9:45:0e:63:4d:60:a6:64:81:86:64:5f:68:99:96:74:29:c3:
fa:1c:77:b7:41:10:4c:38:c2:88:f8:2d:75:bc:6e:3c:b3:37:
09:1e:9c:63:46:9a:5e:3d:4a:68:10:d9:be:e8:59:f0:91:3e:
79:78:b9:cf:cc:20:5a:61:9b:0c:5d:27:37:cf:63:0f:88:9a:
1a:4e:1a:e0:bb:c7:50:17:b8:e0:16:62:3d:f6:c7:36:43:44:
12:74:c8:a0:4e:a9:7a:69:99:d6:08:ca:48:1d:9a:46:66:b5:
68:1f:8d:4a:be:37:43:d0:ab:8f:8e:6a:23:76:b9:b4:70:f9:
a5:de:49:1c:cd:52:7c:b2:51:ec:b3:7b:a0:eb:6e:12:05:60:
cd:a5:91:8c:f9:57:a6:39:0b:e1:01:a0:9d:b1:51:74:88:d3:
2b:09:67:1f:9c:7e:14:f9:ae:81:f8:a6:f8:8f:b0:52:13:6e:
b5:c9:6f:66:80:4f:65:37:d8:72:d5:f3:cb:f0:89:99:48:85:
49:2a:94:2c:10:f0:c7:16:bc:34:d9:30:cd:5b:fb:de:89:24:
dc:28:00:fe:f8:21:7f:06:d4:40:74:c6:35:63:0f:81:2c:b0:
19:53:52:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org