Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/UxgJ7gYGCOoCNoFPtRBKIcCBgDU.roa
File: UxgJ7gYGCOoCNoFPtRBKIcCBgDU.roa (raw, json)
Hash identifier: 0TMNAnk2asDpTTU9m1T3/ylS4Ln3nppuV9wmlZI6vTE=
Subject key identifier: 53:18:09:EE:06:06:08:EA:02:36:81:4F:B5:10:4A:21:C0:81:80:35
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UxgJ7gYGCOoCNoFPtRBKIcCBgDU.roa
Signing time: Thu 15 Sep 2022 02:39:57 +0000
ROA not before: Thu 15 Sep 2022 02:39:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.201.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=531809EE060608EA0236814FB5104A21C0818035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:db:2f:58:f0:b8:2a:4d:04:d4:76:96:d5:
cf:d9:c3:e9:cf:5f:a0:e6:e3:b0:d7:fa:69:5d:df:
e1:87:8c:48:ea:66:22:ca:5b:44:9d:d9:24:0f:cd:
05:05:c7:23:02:20:fa:57:38:fe:cb:76:bc:96:42:
4b:5d:72:3a:91:95:c5:d9:07:5f:95:a3:c0:d5:81:
70:47:97:d0:15:63:6a:f2:4a:af:a9:01:72:7c:3a:
ee:89:0f:78:2f:07:20:76:5f:6a:78:46:51:8b:7f:
b7:52:d5:94:47:79:97:27:b2:72:e8:d8:e8:aa:76:
ed:94:2c:1f:97:78:53:a3:3c:d3:28:47:d7:ba:5a:
78:4a:ad:fb:0a:d0:4c:d9:df:43:08:77:4d:1b:f7:
b6:c4:53:9a:e8:e3:85:82:aa:d4:41:df:f9:bd:80:
0c:a7:dd:b1:da:8b:58:2f:77:16:27:c6:71:53:38:
64:1a:23:11:e0:81:fc:92:a4:9a:02:0d:69:6b:bb:
c9:b9:93:99:6f:a2:fe:25:5d:ba:0d:5d:4f:eb:1c:
35:99:b2:f5:93:d2:bf:4c:2e:77:8f:1c:b9:f7:ed:
5b:80:dc:70:83:e9:f2:1b:8e:3a:f5:89:d6:ee:b2:
af:de:14:75:d6:12:ba:f1:45:02:40:a7:9d:d0:86:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:18:09:EE:06:06:08:EA:02:36:81:4F:B5:10:4A:21:C0:81:80:35
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UxgJ7gYGCOoCNoFPtRBKIcCBgDU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.52.0/22
Signature Algorithm: sha256WithRSAEncryption
55:12:d5:0f:8b:b6:19:c6:25:75:81:aa:8f:41:be:41:4e:3f:
f8:bb:af:cb:1d:33:21:bd:ef:10:0a:4d:cc:1b:bc:94:de:3c:
7c:74:43:f0:60:1b:29:96:d0:6e:25:9f:77:08:32:91:c6:30:
8d:1f:f1:90:5b:7e:ef:db:cc:01:ce:8d:9e:cf:a4:79:b1:ab:
26:c5:e4:94:20:69:31:21:9c:c9:cc:ae:75:f9:c5:7e:68:14:
23:0d:6a:5a:88:ae:42:e4:34:45:55:13:0c:7c:1c:fd:7f:79:
86:c1:3c:77:48:b4:b9:5b:b7:9c:c7:ae:82:40:2d:0e:ad:ac:
ee:55:f0:e9:69:31:a7:03:7b:fb:9a:ca:20:98:04:55:d1:2d:
0c:6c:1c:5b:40:67:cc:fb:9e:61:9a:1b:8e:1d:7b:4d:4d:0d:
a4:40:46:f9:1c:34:cf:35:e8:22:ec:d2:34:70:7a:88:0c:4e:
2d:8f:0d:d0:ec:8c:62:53:00:b0:be:13:8e:fd:c9:86:52:04:
9e:1f:2e:06:7a:92:0f:d9:b2:86:20:f2:7f:6a:47:17:31:f4:
20:fc:41:d1:ea:bc:b9:35:5e:c1:68:e0:8c:12:f1:cf:99:01:
5d:4d:3c:3c:62:18:a0:36:4e:95:62:5b:7e:70:4d:5c:72:02:
11:24:1b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-fra.rpki-client.org