Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fq98CKPe-TE0L_KGBDRSclIiVeE.roa
File: fq98CKPe-TE0L_KGBDRSclIiVeE.roa (raw, json)
Hash identifier: DWn4z2wsAoNquT8e7oqAcFx0kignov0PH7DRooNloDU=
Subject key identifier: 7E:AF:7C:08:A3:DE:F9:31:34:2F:F2:86:04:34:52:72:52:22:55:E1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fq98CKPe-TE0L_KGBDRSclIiVeE.roa
Signing time: Thu 15 Sep 2022 02:39:55 +0000
ROA not before: Thu 15 Sep 2022 02:39:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.202.128.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7EAF7C08A3DEF931342FF28604345272522255E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:a2:45:bc:e9:b2:7b:e0:84:4d:10:66:a1:
55:2b:61:48:da:0e:9a:90:dc:a5:25:42:e8:c5:fb:
3e:7d:cb:07:d3:c8:7a:15:d4:ad:20:47:f4:a6:01:
80:57:73:ef:eb:8d:86:e0:22:d3:e1:98:b4:f4:ae:
f2:08:19:42:2b:b3:fb:33:1c:a6:ec:15:c8:58:cc:
9c:99:b0:bc:59:6b:55:82:73:3e:5f:e8:57:86:d9:
5b:84:7d:8a:c9:8b:c1:b4:5a:e4:4c:b9:bd:7b:0a:
5f:0a:8f:d7:3c:fc:7c:ec:a5:61:60:a2:64:8d:5d:
9c:98:14:41:0d:9d:f6:68:13:a7:07:26:83:42:33:
af:fa:6b:6d:9e:c6:17:6f:87:5f:92:c0:d2:84:e4:
5e:c2:c3:6b:96:ec:b7:66:a3:48:ba:bc:86:bb:3f:
8d:e3:8f:89:71:42:4b:be:a8:be:c0:2c:72:4d:c4:
11:49:91:f7:68:cc:e8:92:bc:90:e7:7d:30:0c:51:
98:58:c5:97:8c:46:dc:26:50:40:d7:f4:f1:f3:cb:
62:69:82:62:c9:26:aa:e6:dc:30:0f:74:8f:c6:d8:
18:e5:76:42:16:2c:a2:1e:8f:86:18:89:42:3e:e7:
04:07:af:c0:74:58:39:78:48:53:dd:0d:5d:ad:28:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AF:7C:08:A3:DE:F9:31:34:2F:F2:86:04:34:52:72:52:22:55:E1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fq98CKPe-TE0L_KGBDRSclIiVeE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:6b:e5:b6:a8:6e:99:c3:52:57:4e:78:1a:d4:80:d4:3f:c4:
79:24:27:14:19:4d:ed:59:42:25:fb:f9:27:ba:76:85:16:90:
1e:b2:21:e1:37:a9:61:47:93:dd:2a:26:ae:6b:03:04:23:89:
6e:34:9a:b6:0f:c8:fc:90:49:34:2e:b7:2d:76:75:38:27:7c:
82:7e:08:81:04:56:43:c7:7d:21:89:12:bc:c1:45:3f:99:8f:
da:06:10:e1:21:7a:1f:b7:dc:93:a5:78:5d:ab:da:a4:99:95:
8b:a5:79:3b:ca:84:6e:f7:9f:24:8d:77:ba:cf:b3:20:4f:df:
ec:d9:3f:31:a7:29:07:b7:fb:38:e5:0e:1b:b5:f8:f7:18:86:
b2:4a:8c:69:e2:62:db:2a:9f:5c:bc:f9:96:0b:27:59:4d:0a:
38:3f:5c:4e:85:62:23:a9:0f:87:30:7e:0e:51:ee:bf:e3:c2:
34:d0:41:96:0c:47:30:f8:60:d3:fa:64:ca:92:f6:ee:2d:e5:
9b:3a:9d:e2:67:48:3e:24:c0:ca:85:6d:5f:e8:3d:40:33:48:
be:a7:89:60:83:0e:f9:fd:a0:54:2d:d0:6e:80:fb:a8:f4:77:
a7:1b:04:97:1a:ca:b3:de:c1:e0:38:25:9e:fb:4b:44:ee:02:
f0:70:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org