Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ZfWWCV6E7qeKEW6VievFuF4MBLE.roa
File: ZfWWCV6E7qeKEW6VievFuF4MBLE.roa (raw, json)
Hash identifier: SemaStSiHPLa4244ntinn9NVsrvcXI8NdCTjNRRDX+k=
Subject key identifier: 65:F5:96:09:5E:84:EE:A7:8A:11:6E:95:89:EB:C5:B8:5E:0C:04:B1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1084
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZfWWCV6E7qeKEW6VievFuF4MBLE.roa
Signing time: Tue 16 May 2023 08:36:18 +0000
ROA not before: Tue 16 May 2023 08:36:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 60.244.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4228 (0x1084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:18 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=65F596095E84EEA78A116E9589EBC5B85E0C04B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:2e:c5:03:d4:ac:22:81:c3:25:e8:0d:10:
59:bf:77:ca:fa:87:ed:fb:54:ab:84:87:3b:1f:a2:
50:55:fe:da:8e:f6:7d:e8:f3:e9:8f:4d:0b:51:c5:
38:97:d4:51:31:89:48:cd:f6:59:0c:50:f2:ed:91:
a7:0b:3f:15:44:89:0b:22:0c:e3:6a:4d:2f:22:b8:
5c:98:06:94:1c:c1:65:6f:4e:38:77:40:db:14:73:
b5:22:21:9b:8e:38:43:d6:ca:e6:b2:73:85:10:b9:
61:32:6f:0c:71:ed:14:32:52:4a:0b:07:42:7a:49:
e1:01:ce:99:9c:fd:31:67:86:16:59:e7:dd:e9:23:
ed:4f:e9:9c:47:8e:2d:6b:7f:80:e3:dd:c0:af:6b:
b1:a7:ab:2c:93:96:95:43:8d:7e:66:8e:4a:5f:9b:
ac:84:19:20:d4:c6:10:df:cd:a8:e8:b5:44:1b:35:
d1:d4:3f:2c:e6:38:ad:a2:de:0b:61:34:ae:09:54:
08:a3:1c:fb:7c:57:ec:cd:ad:08:96:49:d1:29:f4:
79:72:06:11:19:a2:b9:37:34:0a:41:0d:f8:04:51:
c6:7d:22:65:d9:ce:c6:70:0c:7b:2b:4b:95:48:12:
8e:b0:b7:37:b4:92:0a:3d:6e:2e:04:70:c3:86:5c:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:96:09:5E:84:EE:A7:8A:11:6E:95:89:EB:C5:B8:5E:0C:04:B1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZfWWCV6E7qeKEW6VievFuF4MBLE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:ae:b4:b3:28:ef:ed:3c:ff:ea:fa:d2:e6:9e:2f:e4:17:47:
cf:07:ec:80:95:f5:e6:37:f6:76:b5:d2:f4:6d:cb:d9:68:3c:
36:7a:da:54:9a:5e:86:a4:36:d4:c8:c6:05:66:8a:bc:26:6e:
a9:3e:e6:a1:ed:21:ee:f1:ea:9a:44:38:a1:4f:26:91:92:ec:
21:6b:8d:87:72:e9:e7:c1:fe:fc:a8:d3:52:ee:0b:83:90:e2:
b2:8f:f8:21:fb:5c:0f:2e:4c:af:8e:68:50:94:9b:e1:ee:16:
e4:75:53:ef:3a:28:82:85:6d:ac:5d:33:d0:ee:0d:5c:5a:59:
bb:0a:c6:20:ef:db:9f:ac:a3:f4:8b:10:ff:e7:c8:b3:31:70:
5b:1f:e9:9f:f9:88:27:97:9e:3a:15:0b:18:96:8f:26:b2:0c:
d6:bb:f5:82:c5:9a:fb:4d:a1:6e:6c:da:a9:e6:d6:20:dd:58:
a4:86:52:f4:89:93:de:52:2d:08:df:a5:cc:ad:64:15:a8:17:
ca:76:2a:e9:dd:ef:df:7f:b7:70:72:80:cc:4c:b0:84:17:9d:
77:ca:bb:06:e2:a0:6c:25:62:73:40:49:8d:14:ea:3d:c9:9f:
08:5a:63:5f:ec:07:0b:29:96:79:8c:fb:19:c5:cd:95:73:ca:
0f:9c:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:45 2023 by rpki-client on console-fra.rpki-client.org