Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/WRf6atJ1Q26IeDJShdpzV6vUWVw.roa
File: WRf6atJ1Q26IeDJShdpzV6vUWVw.roa (raw, json)
Hash identifier: l9x6j2t0TvPIlqpo/nXT44gAF3LLiI1yJiLebN8Dp78=
Subject key identifier: 59:17:FA:6A:D2:75:43:6E:88:78:32:52:85:DA:73:57:AB:D4:59:5C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1094
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/WRf6atJ1Q26IeDJShdpzV6vUWVw.roa
Signing time: Tue 16 May 2023 08:36:22 +0000
ROA not before: Tue 16 May 2023 08:36:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.58.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4244 (0x1094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:22 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5917FA6AD275436E8878325285DA7357ABD4595C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:12:b5:65:cd:3c:a7:0e:e3:c6:f6:de:de:
c2:d1:06:4c:ba:cc:96:60:77:d0:93:16:96:0b:e6:
f2:5b:c0:0a:3a:b8:19:b1:90:ef:91:e1:ae:24:d7:
2e:ab:4a:3e:64:88:d4:ba:c0:7c:7b:02:6a:8a:bb:
86:3f:89:c2:c6:c1:d6:36:2b:6f:70:ce:53:36:74:
7f:dd:22:f1:be:b3:53:a2:ff:92:5c:ef:37:e1:19:
89:ff:4f:b6:02:91:72:6b:c3:6b:5b:b4:4f:94:b7:
f3:e7:1f:39:72:3a:f0:40:8d:ae:4d:55:c8:24:3e:
f7:dd:c0:e0:78:e8:8e:97:87:bf:31:e7:86:c3:c6:
0f:05:a5:3d:33:71:a8:92:36:a4:53:d8:ad:de:ec:
46:3a:18:d2:ff:82:f8:b8:bb:c0:49:33:4d:c0:4d:
ec:89:8f:ab:14:bc:26:4a:0d:fe:39:a2:7d:46:6f:
9c:60:40:9c:00:15:c7:9f:0e:52:64:dd:5b:50:92:
ec:1e:71:01:8e:03:85:6b:94:63:23:6d:91:4e:6c:
1f:76:41:30:74:cd:b6:61:af:ad:26:4f:2b:de:d2:
12:7a:8d:8b:f3:a7:e4:b8:8f:21:b0:7a:41:1f:55:
f3:60:90:a9:3c:83:30:0f:93:54:d9:26:37:b4:fd:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:17:FA:6A:D2:75:43:6E:88:78:32:52:85:DA:73:57:AB:D4:59:5C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/WRf6atJ1Q26IeDJShdpzV6vUWVw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:79:49:00:5f:38:c3:75:cf:1b:d8:62:19:24:48:7f:c7:2b:
6e:3f:3c:89:47:84:25:30:e3:2d:f2:fc:6d:de:bd:15:d4:96:
55:8e:b9:7c:14:c5:a5:4c:a1:4a:03:0f:0f:89:f2:6a:06:1a:
18:50:ae:95:74:b2:5b:81:06:62:b6:b8:40:36:f3:b9:c7:40:
6a:28:a8:e5:d6:e1:18:f9:7f:80:0f:17:3d:7a:06:35:bf:6c:
9a:b5:b5:0d:0e:8b:87:43:95:3e:73:b3:58:9c:8e:df:7f:0c:
5e:8c:e7:91:04:bc:bc:17:76:67:9b:92:49:15:c4:a0:bc:15:
df:50:23:07:40:c0:26:0f:8c:10:6a:26:30:cb:02:88:3b:6b:
ab:31:75:d2:23:4f:79:1f:1e:89:61:87:69:b6:be:e9:16:c0:
ac:5d:83:76:b7:67:89:1c:a2:ec:11:b3:5e:64:c7:69:6d:d6:
16:5a:99:d4:88:54:67:3a:3c:dd:f7:63:4e:6a:75:11:c8:b8:
52:e2:27:d0:ac:c7:81:46:07:0e:74:73:0c:f0:e4:a6:7f:ef:
2e:ce:f3:5d:72:0c:04:4d:59:8f:cb:c3:91:ab:24:c3:1f:1f:
60:05:5a:fe:61:86:3e:67:4e:2c:1b:d0:e8:c8:3d:18:b9:0e:
43:b5:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org