Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Vi-8UpwK_T-Oy-jmG3eA6WaNvAk.roa
File: Vi-8UpwK_T-Oy-jmG3eA6WaNvAk.roa (raw, json)
Hash identifier: IgivY05cznSnHtxaOTD8tO7M8Ve7dnx56EPamNa8jeg=
Subject key identifier: 56:2F:BC:52:9C:0A:FD:3F:8E:CB:E8:E6:1B:77:80:E9:66:8D:BC:09
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Vi-8UpwK_T-Oy-jmG3eA6WaNvAk.roa
Signing time: Thu 15 Sep 2022 02:40:15 +0000
ROA not before: Thu 15 Sep 2022 02:40:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131142
IP address blocks: 210.200.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=562FBC529C0AFD3F8ECBE8E61B7780E9668DBC09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:5d:d1:7f:3f:64:18:70:4e:89:8c:a6:91:
57:74:31:3c:88:67:2e:f0:70:0e:e7:e2:6b:9a:4e:
68:01:93:1d:fa:c5:13:1e:09:da:29:7b:82:15:8b:
5a:e9:73:3c:06:15:4d:7d:3d:59:bb:3e:13:b1:4d:
8b:ff:c7:78:64:7f:3e:45:60:d9:8f:bd:33:56:06:
e8:c8:b7:31:7b:c9:48:78:cd:60:3f:c5:b2:7d:34:
cb:4d:17:d4:3f:5e:eb:6f:c1:04:99:bd:81:e1:ff:
61:04:b9:25:26:61:80:97:e9:91:9f:17:de:46:8f:
94:5b:d9:74:e5:3c:88:57:c5:9f:a6:74:b2:09:10:
ca:f9:14:8b:73:5b:a0:40:a9:55:12:86:86:95:5c:
d8:91:7e:48:89:05:d1:45:20:a7:8c:03:ac:7b:02:
ca:cd:cb:00:a4:2e:7b:06:e1:bc:9d:39:37:f2:94:
74:d0:45:4f:ba:17:c8:b3:51:49:1b:2d:bf:03:8a:
88:7f:31:af:ea:d5:fb:1b:f5:a1:e6:0b:44:94:5a:
0e:da:e6:34:81:04:25:60:c0:10:dd:55:97:5d:12:
f4:e9:b8:7b:ba:2d:ee:ef:96:76:a4:1d:41:0b:39:
88:f7:b1:65:1d:af:a0:95:43:a9:8b:73:78:f9:95:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:BC:52:9C:0A:FD:3F:8E:CB:E8:E6:1B:77:80:E9:66:8D:BC:09
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Vi-8UpwK_T-Oy-jmG3eA6WaNvAk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:7e:91:67:1e:ca:77:fd:72:a3:6f:ca:7c:fc:87:bd:63:2b:
9e:58:77:b2:08:15:0f:65:3d:53:36:bb:1a:42:6e:d5:99:17:
20:9f:26:05:3c:8f:46:f5:3f:0d:e4:aa:74:d2:b0:10:45:a1:
07:b7:9e:12:43:05:30:90:55:ec:52:8a:7c:c6:fc:9c:f1:89:
fb:66:ff:bc:09:1f:68:a3:65:9e:80:b6:0d:74:48:4d:40:7d:
29:a6:43:16:01:4a:f7:26:ec:cd:20:b6:b0:b9:bb:34:9b:48:
83:a3:fc:3c:33:4b:0d:81:12:25:0a:f6:42:7b:74:1b:6b:c8:
4d:62:ea:c1:38:9b:84:17:87:8b:55:df:48:90:9f:2a:33:ca:
20:60:b6:50:68:70:0c:31:d1:d2:fd:2d:f0:b7:64:15:8c:46:
7f:89:5b:7f:ba:fb:1e:dd:fd:ce:91:d7:37:1b:44:51:89:fd:
be:6b:c7:53:23:f1:10:44:48:2e:4c:f4:16:80:34:cf:2d:d9:
ad:40:b0:6b:f4:10:dd:a9:55:ec:b8:a2:4c:7c:58:64:8d:a1:
6f:a7:7d:95:f6:d9:ff:57:1e:58:28:07:2f:6e:4a:c8:64:f6:
4b:de:31:87:f2:80:bf:95:c3:46:4e:89:89:dc:d5:be:68:82:
66:bc:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-fra.rpki-client.org