Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/VZ9JeZaQ_VNavH-3b-l2GA7GNBs.roa
File: VZ9JeZaQ_VNavH-3b-l2GA7GNBs.roa (raw, json)
Hash identifier: NSjEyHeOCrT2/WeNkLDYCvbBCuSby+1daX3W8x+BxGA=
Subject key identifier: 55:9F:49:79:96:90:FD:53:5A:BC:7F:B7:6F:E9:76:18:0E:C6:34:1B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/VZ9JeZaQ_VNavH-3b-l2GA7GNBs.roa
Signing time: Thu 15 Sep 2022 02:39:50 +0000
ROA not before: Thu 15 Sep 2022 02:39:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 223.22.0.0/15 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=559F49799690FD535ABC7FB76FE976180EC6341B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:53:0a:bb:10:04:e4:d6:fc:73:00:38:53:
95:f3:ff:a8:19:48:35:67:9a:f5:24:00:db:a8:dd:
f9:e5:f1:8b:37:63:9b:b1:d4:e1:65:29:e3:89:b8:
fa:03:0c:26:30:14:be:2d:a7:e9:74:3d:0a:f0:c0:
3c:fc:9c:aa:9a:44:9e:95:6d:ab:8c:56:7c:6b:55:
2b:e3:22:b7:10:a9:a1:8c:ab:61:c0:5f:bd:89:73:
1a:00:08:92:a1:cd:1d:ec:86:e2:d7:fb:6c:e4:5a:
ba:6b:d1:88:21:71:32:67:ea:59:13:68:b2:5a:b1:
52:4d:02:9a:97:46:25:05:42:a9:89:f0:c3:b4:45:
75:17:fd:2c:41:61:8b:b3:1c:26:ec:42:e1:ff:a9:
83:23:ef:27:8c:0a:d1:74:8f:9e:13:70:23:ca:b1:
b9:1a:35:e1:4d:ab:3b:f2:84:eb:77:31:2a:52:6a:
e8:03:bd:0f:d8:26:80:ba:06:c7:9d:ec:43:8b:02:
86:48:08:38:6b:c7:ce:09:0c:6e:13:8c:f8:44:a2:
f2:2c:5b:47:2d:83:98:f1:df:0b:45:fd:04:84:ee:
ec:2d:f2:01:60:a2:bf:70:24:38:95:f6:7a:f7:d2:
3e:53:a1:e9:a7:68:c0:d0:48:96:7b:53:4d:f3:bd:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:49:79:96:90:FD:53:5A:BC:7F:B7:6F:E9:76:18:0E:C6:34:1B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/VZ9JeZaQ_VNavH-3b-l2GA7GNBs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.0.0/15
Signature Algorithm: sha256WithRSAEncryption
12:61:5a:98:ec:b8:bc:85:89:cb:8c:ba:29:37:ea:dc:43:84:
aa:ad:ec:10:81:3a:98:9e:d9:8d:78:d0:df:d5:a5:92:71:21:
55:5c:d4:d7:ef:c1:58:79:15:12:55:fe:ff:77:f5:78:c5:1c:
01:5c:76:00:3b:de:31:aa:dd:f7:9e:5b:fe:51:63:fc:fc:19:
5c:ba:9e:e3:19:43:44:f8:52:55:69:6d:ff:77:eb:2f:17:f4:
a6:c8:e1:f3:fc:a9:7c:40:de:c6:24:58:f4:64:d4:4d:23:5e:
be:8f:c1:a8:d4:62:74:b2:29:f4:9b:65:b1:bb:ba:54:fa:91:
b2:a8:32:17:e1:1e:d0:54:9f:9c:99:6a:fb:15:61:35:d9:00:
17:d2:c1:82:36:fb:d7:91:6b:ae:7a:cc:b1:72:4b:c2:64:45:
1b:29:6b:61:ec:0d:cf:88:ab:64:7f:d6:06:80:18:4b:1f:3c:
6b:54:e6:5a:e5:51:61:de:86:8c:f5:fb:77:13:5a:c7:82:3d:
34:7e:a6:c3:e3:5a:f6:7f:9e:6e:79:6e:c4:0d:45:ed:67:9d:
f1:fb:3d:b9:ab:a0:30:24:61:74:b9:48:58:15:74:c9:e9:d3:
eb:53:13:8d:b6:9d:ad:0d:67:43:19:a4:40:eb:0c:88:eb:7e:
72:73:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:45 2023 by rpki-client on console-ams.rpki-client.org