Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/eoEV-MMpNrTRoooHZbL8aWNyQKw.roa
File: eoEV-MMpNrTRoooHZbL8aWNyQKw.roa (raw, json)
Hash identifier: yDZPK72PBdwyLb3tVBHQ/V9VwyUsJAu7Qcn1ISmasD8=
Subject key identifier: 7A:81:15:F8:C3:29:36:B4:D1:A2:8A:07:65:B2:FC:69:63:72:40:AC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10DC
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eoEV-MMpNrTRoooHZbL8aWNyQKw.roa
Signing time: Tue 16 May 2023 08:36:45 +0000
ROA not before: Tue 16 May 2023 08:36:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 60.244.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4316 (0x10dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7A8115F8C32936B4D1A28A0765B2FC69637240AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:3e:b1:78:30:22:7b:63:92:ee:0d:ec:48:
22:80:c2:a5:cf:06:35:d3:85:46:15:fb:8f:9f:60:
b7:65:2c:49:e6:8a:70:b3:c3:3c:a3:3b:aa:77:5a:
8a:44:c6:53:3e:11:6d:77:b2:9e:9e:2d:98:56:09:
03:9e:2a:84:6e:8d:92:e4:bf:60:93:32:7b:ae:f8:
01:96:da:e2:f9:74:90:78:29:71:5f:2b:52:1b:dc:
75:ea:fc:99:1f:bb:aa:38:2d:58:69:ae:82:45:75:
85:7c:37:c8:13:09:96:5c:65:96:e1:e3:db:65:02:
83:ac:e9:e2:f3:58:25:26:cc:61:85:f8:59:14:9c:
09:52:4a:a0:75:f4:57:c6:06:1f:29:01:d4:2f:17:
7b:30:b5:a4:53:6e:7d:a5:90:25:4e:c1:0b:d6:b3:
58:c6:63:8a:ce:8d:07:39:be:27:27:fc:56:8a:e2:
f7:95:82:3a:70:4d:02:7a:2b:8c:24:af:89:17:8a:
56:60:20:f7:b0:f4:c2:30:9c:ac:ea:e4:81:91:1f:
f0:c5:a7:99:39:87:f9:bc:6b:ee:6f:da:84:4f:c4:
ef:16:c4:8a:23:20:1e:a0:51:a6:82:d3:7e:38:ca:
81:3f:82:a3:89:15:23:5d:33:2b:ba:ad:14:a3:c4:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:15:F8:C3:29:36:B4:D1:A2:8A:07:65:B2:FC:69:63:72:40:AC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eoEV-MMpNrTRoooHZbL8aWNyQKw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:6c:30:ee:22:2b:28:76:c1:b9:a9:23:f3:37:77:a7:23:94:
95:cb:31:2f:69:44:a9:0f:f3:cc:7f:e2:87:37:ca:13:42:07:
1b:6e:d2:dc:ab:49:49:92:8f:40:1e:65:da:84:48:f0:62:b6:
ea:14:6a:72:2f:39:8e:38:78:fb:56:f2:b3:0e:da:11:43:c1:
f0:7c:e9:ba:8b:aa:a6:fe:7e:2d:69:98:aa:ef:a4:36:83:74:
cc:c6:b3:e8:c7:ee:36:d8:dd:54:e6:44:54:ac:5c:95:2b:27:
14:a0:dd:83:5b:25:db:15:06:89:f1:0d:d5:23:75:5b:94:14:
08:62:d5:e9:1b:7f:60:29:3f:ec:5b:65:11:03:44:64:cc:8f:
bd:64:0f:4e:79:a4:2d:f8:9d:0f:be:4f:99:c9:e8:23:78:f3:
cb:d3:e0:30:a7:4c:e8:27:88:95:32:47:e7:3d:59:b9:fb:ea:
3c:9d:0c:93:4d:4a:82:60:3a:09:f5:77:bd:b6:63:4a:23:43:
f8:e7:f0:8d:31:ba:86:94:ac:ba:6b:03:66:d9:d1:dd:98:55:
63:85:48:05:74:38:3c:75:6f:a2:df:13:f3:b2:da:85:97:2b:
c0:13:d6:16:08:ee:71:49:68:a6:ce:62:3e:a7:95:86:41:29:
ba:79:89:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org