Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fyvKG2B-IZdyxPll9DzUjgVV1rM.roa
File: fyvKG2B-IZdyxPll9DzUjgVV1rM.roa (raw, json)
Hash identifier: c4A7L1xTD4WvH5mRob4aXxJv/NexITwmGPR+cL+Xtns=
Subject key identifier: 7F:2B:CA:1B:60:7E:21:97:72:C4:F9:65:F4:3C:D4:8E:05:55:D6:B3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fyvKG2B-IZdyxPll9DzUjgVV1rM.roa
Signing time: Thu 15 Sep 2022 02:40:22 +0000
ROA not before: Thu 15 Sep 2022 02:40:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 124.218.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7F2BCA1B607E219772C4F965F43CD48E0555D6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:a6:41:59:be:50:2e:61:0e:b5:00:28:12:
f7:d6:68:f7:ba:91:31:aa:51:0b:a4:76:50:df:d8:
ee:02:cd:b5:eb:38:70:e0:54:df:27:c7:7c:7c:bf:
45:99:f5:03:87:b9:f0:d8:83:2b:66:98:32:97:94:
61:3a:31:f0:4d:e4:b0:fa:00:3b:bf:c5:4f:c7:2c:
af:cd:96:72:fa:ed:d7:8e:5b:14:f8:f1:96:61:86:
d9:7a:90:6f:50:23:d4:cd:08:37:49:fd:f7:8c:d4:
44:98:61:74:2e:93:5c:d4:9f:9e:70:2b:91:1a:cc:
a5:8e:0b:a8:37:40:b3:54:3c:5e:66:77:e8:87:fb:
72:ae:27:e8:03:6a:e1:c9:2c:c9:9f:e1:33:e2:96:
40:9c:6a:19:ba:e8:27:be:11:65:71:72:8d:36:d0:
6e:4b:b3:36:fd:3b:e2:7b:0e:b3:af:f6:20:e7:32:
5d:d4:f4:76:39:7c:c3:72:f2:a1:54:70:90:e7:32:
c2:29:22:c2:a8:ec:c4:e4:f3:36:b0:e7:52:fe:a5:
4e:0e:40:8a:bf:15:ce:ce:c4:b4:76:ea:ac:81:14:
13:37:32:89:f9:86:86:f6:39:18:67:3d:29:02:92:
91:30:b0:8c:89:10:8a:59:21:c9:fe:45:cd:9f:c6:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2B:CA:1B:60:7E:21:97:72:C4:F9:65:F4:3C:D4:8E:05:55:D6:B3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fyvKG2B-IZdyxPll9DzUjgVV1rM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:a3:0d:c1:19:ff:c6:8a:d9:5a:fa:e6:81:9b:2e:4b:d8:ad:
1c:47:e8:af:18:96:22:0c:91:f9:6d:1a:99:aa:04:38:6d:c6:
4a:6e:c1:a1:d6:49:32:20:96:42:e4:a1:6c:a0:02:bf:a3:a0:
f2:be:1a:d0:c7:37:3c:54:6e:65:a8:6b:a6:a9:e5:87:fe:6f:
74:9f:7a:d0:bc:9c:55:39:d8:ca:66:bc:aa:8b:14:53:fc:84:
d1:86:cb:cf:9b:22:96:a6:79:db:83:e9:a2:c3:89:9d:6f:f0:
2c:e8:bf:9a:70:82:9f:57:0c:3b:79:48:b3:bc:63:89:69:8c:
c1:a5:57:c0:27:79:c6:7c:e3:e9:8e:08:42:ca:6b:c9:cb:5f:
fd:a3:df:fc:c9:7f:ae:ab:28:17:ca:ae:92:c8:79:62:29:63:
ed:a7:3d:7e:af:ad:07:2a:8c:8e:95:6a:73:50:02:87:12:f5:
fa:3e:23:81:76:24:6c:58:23:2c:65:b9:6e:57:2b:fb:56:05:
b5:0d:14:3d:b6:8e:a8:d2:c0:91:53:02:5c:d5:67:65:10:53:
e2:55:a8:48:a4:f7:34:fc:f7:a1:67:72:d6:0f:55:05:40:bc:
78:3a:c6:e8:4c:8a:14:a2:22:29:4d:76:ba:0a:9d:e2:03:09:
8a:80:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org