Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/kuB5bJnrfUXNjR_g-E3d-lWpNlI.roa
File: kuB5bJnrfUXNjR_g-E3d-lWpNlI.roa (raw, json)
Hash identifier: FP5E3CebObyBDK7bZoui/S2UKKNGJt4h/+YliN/4bKE=
Subject key identifier: 92:E0:79:6C:99:EB:7D:45:CD:8D:1F:E0:F8:4D:DD:FA:55:A9:36:52
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1067
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kuB5bJnrfUXNjR_g-E3d-lWpNlI.roa
Signing time: Tue 16 May 2023 08:36:09 +0000
ROA not before: Tue 16 May 2023 08:36:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.201.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4199 (0x1067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:09 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=92E0796C99EB7D45CD8D1FE0F84DDDFA55A93652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:08:94:6b:61:34:75:a1:b0:f6:7a:c0:7e:
b1:25:32:db:99:68:fb:ed:97:9b:71:f2:7e:42:68:
37:ac:5c:06:1d:3e:7c:20:95:75:ba:39:bf:56:3e:
3d:09:a5:9a:d7:cf:4e:f8:19:a6:1d:71:79:8f:2d:
81:86:c2:9f:5b:a3:df:d0:ce:61:db:56:84:43:b9:
95:d7:78:ea:aa:5c:cb:1e:f1:05:05:05:ec:fd:16:
7e:15:ff:a3:2b:4a:da:6c:73:34:e8:30:7f:cc:20:
d9:86:50:c1:5c:31:e9:e7:41:f2:de:a5:d8:8d:8e:
b4:1f:11:24:ed:5f:7a:df:d5:08:49:9a:25:3c:68:
a9:2e:0b:5d:be:2f:c0:aa:34:ce:28:19:e8:9c:66:
82:6a:4a:1f:54:bf:98:8b:a1:96:83:7c:53:1a:d2:
28:f8:64:9e:ed:56:a3:29:57:ec:0a:eb:9a:4d:7e:
1e:8c:30:95:c3:bd:bd:f9:ce:09:cf:94:78:b9:1f:
c9:d4:d1:60:6d:35:e5:ac:51:1b:9b:ca:fb:43:cd:
af:de:fa:7f:8d:d3:88:24:01:2d:56:13:da:49:5d:
0e:75:5a:47:c8:dc:d5:10:c5:a6:3d:82:ec:e6:22:
ad:4c:e3:53:91:0c:f4:0b:36:72:57:7a:50:13:29:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:79:6C:99:EB:7D:45:CD:8D:1F:E0:F8:4D:DD:FA:55:A9:36:52
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kuB5bJnrfUXNjR_g-E3d-lWpNlI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:31:bf:ed:98:98:94:f0:8b:97:6a:26:51:47:2f:35:46:41:
df:c7:81:66:a0:e8:4f:73:4d:b7:1b:59:81:78:e9:28:db:83:
8c:bf:7b:aa:1b:24:11:f7:75:15:7c:e1:3a:c3:03:4f:d0:38:
dd:3f:ec:a4:83:ac:0c:36:f2:88:a3:f7:66:6c:97:3a:1d:ee:
a4:4d:60:eb:cb:9f:4e:65:c5:40:c3:92:30:1a:19:b3:f0:8d:
0e:d8:bd:b2:bf:b9:7d:56:01:8f:88:6a:a9:85:ef:ee:95:01:
ce:e3:a1:75:a7:09:81:49:89:cd:17:12:37:b7:ad:d1:51:ed:
ba:12:d0:ac:bf:ee:2e:62:c6:a5:8d:bc:d6:30:47:a4:a4:66:
ac:3f:40:43:b1:2a:6a:63:d0:88:f4:45:86:85:97:f4:65:16:
79:2f:19:d7:96:56:96:3f:93:9a:e4:74:04:78:d6:59:3d:ad:
b4:52:16:6a:08:1d:1a:93:67:20:e1:9b:7d:83:24:a9:ef:42:
4b:60:8a:93:d6:f0:1c:27:7b:3f:b3:3b:dc:00:c9:32:7a:23:
88:e2:2d:a4:cd:5b:88:6b:da:65:17:af:dd:9b:f3:04:dc:d9:
2a:ea:f7:09:75:69:06:a9:0c:6e:22:69:65:02:7a:75:a0:86:
14:97:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org