Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/kzL2q2axp-e0dL2p_uqDZJ8X4uY.roa
File: kzL2q2axp-e0dL2p_uqDZJ8X4uY.roa (raw, json)
Hash identifier: L50tkBvS/l5E2GKtPrpeenmm0DAxbLIg4UOHHWLgUZs=
Subject key identifier: 93:32:F6:AB:66:B1:A7:E7:B4:74:BD:A9:FE:EA:83:64:9F:17:E2:E6
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kzL2q2axp-e0dL2p_uqDZJ8X4uY.roa
Signing time: Thu 15 Sep 2022 02:40:05 +0000
ROA not before: Thu 15 Sep 2022 02:40:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.201.72.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9332F6AB66B1A7E7B474BDA9FEEA83649F17E2E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:ea:d1:86:c4:b1:f4:9b:75:8c:2b:5f:c8:
92:e7:68:1c:f7:ad:b7:b1:0b:3e:b2:af:c0:6a:59:
17:45:23:44:0a:f3:2c:5c:94:ef:70:31:fe:bc:4a:
01:fb:ba:ab:a4:f9:9e:00:7e:93:84:d4:0f:ff:95:
2f:3d:e5:8d:e4:49:b3:ca:dd:aa:25:5b:08:c0:5e:
1e:73:b3:64:e7:84:6b:90:26:38:58:93:d1:e6:f5:
20:46:c1:ad:b4:5a:59:b6:34:ba:2e:bf:27:c4:40:
19:1f:c9:f0:7c:5a:96:45:5e:2c:88:c7:37:85:0e:
03:bd:5a:66:86:bb:05:73:1f:4e:95:94:b4:1c:48:
03:35:a5:05:95:15:cf:07:d2:f4:75:30:eb:1e:1f:
aa:1b:1e:a9:dd:66:be:49:90:9e:c8:be:d8:95:38:
3d:e3:8c:9e:3a:1d:f3:6f:db:81:f4:e8:a6:2e:93:
63:64:da:f4:92:34:80:63:fc:21:51:a7:f3:6b:ed:
25:84:41:ff:7c:70:02:90:19:4d:f4:52:e6:73:c1:
ec:8f:92:08:0c:47:82:6e:43:d0:8b:2c:cc:a5:a0:
08:52:46:71:bc:83:fc:53:52:08:93:68:31:1e:6b:
87:6a:1c:56:30:c9:f1:7b:c8:4f:8d:14:7d:95:16:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:F6:AB:66:B1:A7:E7:B4:74:BD:A9:FE:EA:83:64:9F:17:E2:E6
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kzL2q2axp-e0dL2p_uqDZJ8X4uY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.72.0/23
Signature Algorithm: sha256WithRSAEncryption
65:ba:80:0e:f5:3d:64:a5:e6:11:6e:f8:95:7e:f7:85:36:39:
45:94:55:2c:06:be:b1:1c:91:2a:cf:16:80:f6:e5:d7:78:f7:
4d:05:ff:5c:f7:c7:11:8a:24:4a:42:5d:7c:4f:db:3c:72:36:
d4:20:ff:68:1f:b3:21:52:4b:00:cb:0e:68:3e:ed:1f:b3:0d:
a2:cc:e9:d9:69:a9:bd:6b:64:23:df:8a:40:23:f3:b9:6c:de:
3a:63:03:f0:82:80:d0:28:1d:92:a5:6c:3a:43:d4:ee:4d:0a:
28:6e:b0:14:c0:0c:fd:60:9b:2d:05:f7:d6:f8:1b:25:b9:3e:
96:28:08:28:21:3e:7a:aa:b7:1c:ac:9e:a8:87:75:35:b3:e5:
f8:91:7b:c1:76:62:65:4d:0a:63:e8:16:66:35:4a:a6:61:fd:
3b:ec:1d:58:2a:28:7f:62:90:b1:28:b2:d9:a8:04:5e:4f:a8:
ba:f8:8d:f0:16:74:3f:d0:b0:64:88:a8:d3:d9:fd:37:02:9b:
08:67:97:a9:82:d2:ea:d7:e2:f8:00:ee:a7:5f:b3:15:8e:8a:
01:27:bd:8a:85:d2:18:30:f9:8a:12:d6:cc:95:5c:cb:ac:35:
31:78:04:8f:81:3e:8a:cb:39:7f:ca:7a:99:54:57:65:e0:51:
a6:39:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org