Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/f86s7tPc0bLLWXFe5tysDI6sQOc.roa
File: f86s7tPc0bLLWXFe5tysDI6sQOc.roa (raw, json)
Hash identifier: oACgUWO+aymPrzqRbEbL0Nqzq274wl4WJl/Di5IsIi0=
Subject key identifier: 7F:CE:AC:EE:D3:DC:D1:B2:CB:59:71:5E:E6:DC:AC:0C:8E:AC:40:E7
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10F4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/f86s7tPc0bLLWXFe5tysDI6sQOc.roa
Signing time: Tue 16 May 2023 08:36:51 +0000
ROA not before: Tue 16 May 2023 08:36:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4340 (0x10f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:51 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7FCEACEED3DCD1B2CB59715EE6DCAC0C8EAC40E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:31:1d:04:8d:eb:87:83:78:a8:68:7b:8b:
09:ed:75:49:c2:23:27:25:9d:59:2c:2d:61:47:56:
be:63:9c:75:d2:bb:58:b3:aa:b9:0a:21:82:72:a6:
49:b7:94:92:e2:25:46:98:e3:29:4f:f1:dd:05:dc:
09:4a:b2:ef:5f:a2:0e:88:dd:cd:61:ff:fa:19:d9:
73:5e:99:e3:b7:14:8c:e3:7d:27:c9:86:a8:1f:6e:
6d:22:34:7d:ba:8f:f4:00:77:e5:18:42:60:61:83:
be:61:02:dc:63:5a:2b:5d:4f:4d:4a:13:91:17:c8:
40:d5:5d:98:d3:41:1e:43:5c:a4:eb:07:ea:a0:e0:
79:6d:b3:50:0f:a6:6e:45:0c:60:98:9c:57:97:94:
6e:aa:27:b1:fd:12:7d:6e:3e:cc:66:e0:77:58:df:
da:f7:85:8d:2a:56:21:7b:c3:db:e4:64:0b:46:6e:
82:85:ae:6d:31:15:ad:c5:b1:34:4b:5c:2f:54:da:
71:ad:6e:d6:f6:6c:56:83:d0:ec:7f:f9:a4:9c:40:
36:6b:ea:6d:5e:7e:d5:54:72:26:f1:47:6d:1d:90:
df:3c:a0:c1:00:5c:96:ac:5c:b7:5e:ed:d3:1a:8e:
97:9c:49:93:e4:ab:95:7a:51:80:33:5d:86:53:5a:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CE:AC:EE:D3:DC:D1:B2:CB:59:71:5E:E6:DC:AC:0C:8E:AC:40:E7
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/f86s7tPc0bLLWXFe5tysDI6sQOc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:67:3e:fe:f9:38:48:e5:94:20:b3:25:1c:27:14:3a:41:eb:
68:02:5b:43:fc:28:4c:fd:a3:78:73:e8:db:ce:cd:a7:2b:68:
64:65:dd:31:ec:39:84:81:5f:28:ff:b9:7c:92:56:33:eb:86:
4f:9c:a0:58:71:49:e3:af:67:09:42:30:18:39:ca:0a:8d:22:
e1:34:51:de:60:77:08:49:85:d7:d6:9b:ac:5b:43:44:46:5d:
23:22:85:f9:5c:23:84:84:f7:16:e7:51:dc:c7:c4:7d:49:fd:
06:64:7a:66:2d:84:a8:90:05:d8:7d:b2:9c:85:9a:21:03:08:
7f:e1:78:78:c2:5c:18:7e:69:20:0b:7c:08:fc:53:c8:f4:19:
16:17:00:43:a6:f4:70:0f:91:7b:99:d9:ea:fe:9a:85:ca:b6:
d4:79:0e:fd:21:d9:a2:af:80:2b:7c:6d:aa:45:90:cf:15:ed:
f5:14:6e:ab:a7:4e:18:1f:69:64:3d:6e:e0:ed:70:e4:3f:8b:
a6:32:ed:03:53:f4:1c:4b:23:35:e3:71:9c:a0:f9:eb:21:fb:
b4:4a:b0:97:0b:23:08:b4:ec:ab:47:05:4e:e1:fb:c9:bc:42:
6d:e3:b0:7a:a6:73:86:ee:67:53:3a:47:31:de:3a:ca:af:35:
0f:5b:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org