Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/hcHIDj1gaPS9wJZ_y9_WF6Raygk.roa
File: hcHIDj1gaPS9wJZ_y9_WF6Raygk.roa (raw, json)
Hash identifier: Ls0fY+TUkm8wgy/uFCOwBWeYZCBxDAto2w5+eyvz76E=
Subject key identifier: 85:C1:C8:0E:3D:60:68:F4:BD:C0:96:7F:CB:DF:D6:17:A4:5A:CA:09
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1029
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hcHIDj1gaPS9wJZ_y9_WF6Raygk.roa
Signing time: Tue 16 May 2023 08:35:49 +0000
ROA not before: Tue 16 May 2023 08:35:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.203.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4137 (0x1029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:35:49 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=85C1C80E3D6068F4BDC0967FCBDFD617A45ACA09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:db:43:79:dd:5c:64:72:73:33:49:45:c7:
e9:97:d7:a2:3f:3c:24:9c:d6:ea:4a:a1:83:d5:d8:
fc:15:65:c2:21:8f:05:27:cb:b4:b4:e6:dc:6c:b9:
2e:66:64:a2:a3:10:78:92:8a:e6:50:56:8f:dc:c2:
f8:82:ff:25:69:2a:6c:05:b8:44:31:cf:6e:f7:88:
ef:c6:03:2e:d1:a1:00:60:be:7f:8f:0c:2b:74:a2:
93:4d:a7:a8:a1:3d:df:ab:b5:84:a5:89:1e:96:08:
d2:63:2f:e2:ad:3a:9c:c3:83:9e:69:2f:f1:cf:ca:
f6:09:3a:ab:11:da:fb:89:49:c2:6e:fd:e5:5c:ce:
83:5f:19:d6:4a:ec:06:78:f0:d1:d6:9b:e5:da:eb:
e9:1d:07:c9:f6:1a:5b:76:d3:41:63:fa:2b:59:19:
80:8f:0b:76:6e:87:31:b4:7e:e0:96:f3:c6:d0:5c:
1e:02:d8:99:41:77:22:2b:4e:57:f2:c3:15:20:0a:
85:cd:75:74:5c:f5:5d:30:f0:75:28:9e:b1:ef:75:
ef:48:95:d3:c6:e1:d7:e6:1b:a2:7b:57:fd:fe:7e:
b2:2b:a3:21:6f:06:e3:da:f8:5d:0a:94:25:d7:0d:
81:99:02:d8:87:cf:2e:30:33:e5:8d:4a:37:19:3d:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:C8:0E:3D:60:68:F4:BD:C0:96:7F:CB:DF:D6:17:A4:5A:CA:09
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hcHIDj1gaPS9wJZ_y9_WF6Raygk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b0:c9:48:a3:c1:0d:9c:e2:0e:f1:5f:83:65:b1:64:4e:8b:11:
c4:05:9d:b9:a3:42:b8:0f:f6:30:c8:51:7e:4f:40:4c:6e:cd:
9d:66:00:7e:10:48:02:e7:bb:a6:3d:d9:9e:7c:ae:c2:ee:09:
92:2a:27:49:d8:af:62:7a:fc:55:60:31:87:d4:c1:4f:49:67:
23:ba:85:f4:1f:59:a6:5f:9d:b7:ee:d5:70:78:ca:1c:6e:c5:
6e:40:55:d0:07:49:1b:5d:8c:f2:f3:0c:ac:86:99:08:a0:af:
fc:23:76:93:33:b3:9b:29:78:56:18:b9:47:fe:44:67:c1:a7:
a5:f0:0b:5d:d1:af:af:33:eb:36:a9:1c:b1:08:da:91:9b:cc:
75:d3:e0:22:de:69:f6:2d:59:4c:3c:ba:57:23:a9:a1:65:f5:
5d:bd:ae:6f:80:dd:4a:4b:79:25:2c:9a:91:2e:50:1a:c3:8f:
55:f3:99:a1:5c:92:d1:cf:8f:9e:a7:37:11:43:2a:44:42:f0:
da:6e:62:0e:0b:a7:43:da:ed:e8:39:d0:39:3a:1d:1d:21:73:
0b:d2:51:11:ed:12:99:cb:fa:24:4e:35:2f:e7:b2:70:5e:53:
73:b3:7b:e9:54:70:91:98:8c:eb:44:d3:d6:41:4a:68:27:47:
ba:72:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:45 2023 by rpki-client on console-fra.rpki-client.org