Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/gk62yyb-0RY5VAI8A32f4zvF4RA.roa
File: gk62yyb-0RY5VAI8A32f4zvF4RA.roa (raw, json)
Hash identifier: isr0riQMzGpH53ddpazUovLRpVXdjOFufkZ+BwCiVgI=
Subject key identifier: 82:4E:B6:CB:26:FE:D1:16:39:54:02:3C:03:7D:9F:E3:3B:C5:E1:10
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gk62yyb-0RY5VAI8A32f4zvF4RA.roa
Signing time: Thu 15 Sep 2022 02:39:51 +0000
ROA not before: Thu 15 Sep 2022 02:39:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 60.244.0.0/17 maxlen: 17
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=824EB6CB26FED1163954023C037D9FE33BC5E110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:b2:23:1d:25:bc:5f:ed:f7:53:36:58:65:
fd:6f:85:41:62:ad:86:ac:a0:01:2c:16:f9:42:0e:
59:95:6f:0f:2b:f3:a3:35:91:1a:6f:ed:7b:73:c1:
ef:79:3a:68:39:b0:19:39:61:13:46:c0:6f:70:4e:
67:fd:55:4b:1d:44:69:03:4e:45:b4:92:b1:66:a0:
08:73:b3:9a:9a:26:04:5f:d6:86:df:0d:73:19:95:
da:ba:1f:e2:b8:09:75:73:d2:bc:68:15:ff:70:90:
50:ed:84:b0:e2:8c:17:9f:d9:9c:9a:18:15:fc:f4:
5c:39:57:71:38:f9:a0:4f:42:10:64:64:13:1c:e7:
64:ca:2c:d3:3c:fc:ab:61:e7:10:a2:96:ea:1a:51:
af:a3:90:82:61:f8:8a:b0:a0:4a:04:83:e1:bb:de:
63:75:39:39:36:af:f8:4d:d8:1f:55:9b:50:2b:2a:
9a:5b:9a:18:ac:ec:c1:90:27:25:bd:28:83:03:59:
db:c6:6c:d5:61:81:1e:91:d2:71:88:bd:39:62:6e:
a7:5b:fb:3c:43:70:0d:6e:af:24:8f:79:ee:65:b2:
ad:f1:cc:36:6b:03:7b:97:30:b5:2a:d6:b7:db:df:
f8:4b:cd:f9:92:96:08:89:24:9f:d7:65:c4:13:d0:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4E:B6:CB:26:FE:D1:16:39:54:02:3C:03:7D:9F:E3:3B:C5:E1:10
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gk62yyb-0RY5VAI8A32f4zvF4RA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
37:f7:79:ff:5f:af:b4:82:90:55:26:eb:11:62:ec:dd:11:5e:
ca:77:7a:46:67:32:5c:94:ec:98:30:47:bb:1a:61:ce:86:59:
a1:21:a6:13:89:f0:13:b4:6d:af:ca:cb:6f:8f:ed:06:11:df:
38:b9:ad:a6:d1:73:b6:2f:30:d4:3b:08:cd:e0:5d:31:87:76:
b1:f6:a9:48:75:af:0b:aa:ae:9d:e2:75:0d:32:36:f2:53:f1:
b3:63:17:99:f9:96:b8:e9:14:bb:ec:71:d9:8c:5a:f3:11:1d:
6c:49:74:aa:d8:53:45:fe:04:12:92:d2:e3:53:96:49:09:8d:
a3:24:17:72:73:d2:c5:fc:f3:8d:74:b4:bd:a2:ef:58:58:7b:
bd:7d:37:17:5b:4f:c7:35:e8:52:dd:d6:bb:a3:c9:0a:09:6c:
fd:be:7e:03:f1:41:9a:03:84:bc:b0:e0:e3:c4:d7:31:48:c9:
36:9f:7e:e8:7d:a5:75:4a:a2:ff:45:35:5b:ef:54:d3:4b:71:
8f:92:57:f4:84:87:af:63:3f:ea:e5:16:bf:eb:66:70:f9:64:
36:4f:95:eb:a9:18:a8:b5:d1:22:5d:61:d1:36:62:97:10:1f:
36:5e:43:af:fc:6c:b9:9a:0e:3a:41:79:55:04:49:02:f8:aa:
8a:50:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:45 2023 by rpki-client on console-ams.rpki-client.org