Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/akKVlwqkPwQiQ5xKHQM9PLSNkuc.roa
File: akKVlwqkPwQiQ5xKHQM9PLSNkuc.roa (raw, json)
Hash identifier: Wf2EEwSlJpXC0nHLtPjbvdKndRuNDthGowc4zaLYXb8=
Subject key identifier: 6A:42:95:97:0A:A4:3F:04:22:43:9C:4A:1D:03:3D:3C:B4:8D:92:E7
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/akKVlwqkPwQiQ5xKHQM9PLSNkuc.roa
Signing time: Thu 15 Sep 2022 02:40:36 +0000
ROA not before: Thu 15 Sep 2022 02:40:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 222.157.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A4295970AA43F0422439C4A1D033D3CB48D92E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:19:06:2d:3e:e8:60:73:65:ba:62:1c:b6:
c6:c5:b2:ec:4f:01:93:a8:84:3f:e4:c4:b1:35:50:
50:f1:8b:9e:b3:ba:d4:ea:e3:1e:f9:49:a1:56:83:
6a:81:ff:75:72:f6:55:72:29:77:1e:d3:3f:dd:e8:
9e:19:35:aa:dc:0c:02:4c:b7:39:c3:b7:3c:be:8c:
a5:fd:c3:62:15:97:f9:38:9e:49:db:17:c2:7f:8d:
92:b6:5a:a3:0c:56:a0:27:a6:ee:de:fe:5f:95:b7:
24:b2:18:89:ab:e2:a4:2d:4c:66:a6:7c:cf:61:3b:
10:a8:97:e3:25:86:39:dd:91:28:b0:1a:41:48:97:
92:ab:c2:38:56:c8:77:f7:c3:6f:63:2a:1e:ac:3f:
92:fe:a6:73:f8:3e:98:20:c9:47:a9:fe:82:48:b7:
0f:b4:9f:43:27:21:86:11:64:18:aa:e0:da:81:41:
52:13:7e:98:01:7b:40:ee:98:ba:6d:bf:b9:48:43:
d5:ff:4f:64:b7:65:79:b3:f2:6f:14:dd:2c:cf:01:
ea:76:fa:86:6e:56:0f:72:9c:0c:d8:3e:37:8c:45:
f0:e1:cf:fd:49:9e:82:4f:67:5a:fe:48:96:80:38:
fb:0d:5e:00:23:d0:58:7a:b6:7f:c9:93:c3:49:a4:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:95:97:0A:A4:3F:04:22:43:9C:4A:1D:03:3D:3C:B4:8D:92:E7
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/akKVlwqkPwQiQ5xKHQM9PLSNkuc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:18:28:0d:2f:33:bc:49:52:2d:e8:24:03:eb:34:5a:02:74:
6a:eb:ac:af:fd:0a:fc:ed:de:78:32:bc:e3:93:7f:39:d2:f5:
f0:9e:3e:1e:5d:59:8d:f0:f1:15:a2:ae:a8:c1:a1:ae:62:13:
b6:79:4d:d4:db:20:e2:53:b7:93:23:71:b3:f0:13:d1:3d:c1:
af:e5:f5:30:19:8d:06:46:80:96:a6:6f:e0:e6:90:35:18:8d:
4c:bc:73:e0:b5:25:7e:f4:51:89:40:b7:40:41:b2:b8:ec:02:
5f:be:ca:be:38:e4:9e:d6:90:63:81:bf:1e:7e:58:87:66:33:
e1:ad:5d:c7:36:31:bf:78:10:3a:d8:4d:fd:85:31:6c:ee:af:
96:52:27:84:06:55:a9:02:d5:71:ce:6b:75:42:9a:2d:ee:fa:
86:53:64:c2:ad:07:dc:f7:64:7b:1d:8b:60:13:be:b7:cb:07:
d9:8f:ad:6c:a1:f9:22:27:83:a9:e2:ae:74:03:5d:4f:44:5a:
d9:cb:f2:34:9d:49:36:34:78:42:cf:40:4d:83:36:41:c7:41:
18:7b:a1:31:53:87:91:81:00:30:b0:6d:3d:78:24:aa:57:a4:
c6:c5:00:85:6b:8f:0d:39:37:86:28:f6:78:65:9f:4c:3a:e6:
5d:af:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-fra.rpki-client.org