Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/mQOn-IQT1f6xlkCXEnk2REyC1Dg.roa
File: mQOn-IQT1f6xlkCXEnk2REyC1Dg.roa (raw, json)
Hash identifier: zyWxvMaQ6rJMDEIn/QiapuhAJM38/TZNJffCccSPj3Q=
Subject key identifier: 99:03:A7:F8:84:13:D5:FE:B1:96:40:97:12:79:36:44:4C:82:D4:38
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mQOn-IQT1f6xlkCXEnk2REyC1Dg.roa
Signing time: Thu 15 Sep 2022 02:39:47 +0000
ROA not before: Thu 15 Sep 2022 02:39:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.200.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9903A7F88413D5FEB1964097127936444C82D438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:2b:e1:f3:01:63:b8:e6:1c:80:95:3b:be:
81:0f:94:04:17:54:13:c0:47:b0:58:6f:e9:59:d2:
e4:09:33:f0:83:47:77:72:fe:44:16:5f:da:f5:41:
c9:c2:ea:9e:7d:28:6a:7a:32:05:e5:fc:1b:23:95:
0b:9a:a6:66:a1:14:b7:6e:27:cc:5e:32:cd:42:54:
47:3a:36:b1:cf:93:78:4f:57:cd:2f:2e:60:5c:22:
1c:1a:86:4a:2b:ae:e4:88:39:ab:de:bb:cd:c2:5f:
2e:52:ec:50:1b:31:82:92:1b:7a:87:fb:90:e4:29:
bd:f5:2d:4a:55:fc:83:27:7b:65:b5:8e:23:85:52:
2b:ff:3e:af:70:ca:77:63:b5:c8:35:53:50:11:40:
d0:d8:b8:e2:99:63:61:b2:05:98:87:5a:ed:b5:74:
2b:22:5b:6f:22:a2:1b:04:8b:7b:5d:3c:19:c5:1f:
d4:a7:0e:39:87:c8:8c:c9:1b:c9:4b:8f:22:df:4d:
78:c4:be:27:57:64:05:d3:37:01:e7:a7:14:91:4b:
b8:e5:73:46:33:f9:3d:ce:9a:03:41:f3:9a:18:43:
af:0b:be:6b:89:4b:6c:9b:92:8a:5b:79:5a:84:6f:
4d:20:55:0e:04:24:28:fd:4f:3d:56:4a:fa:7d:dc:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:A7:F8:84:13:D5:FE:B1:96:40:97:12:79:36:44:4C:82:D4:38
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mQOn-IQT1f6xlkCXEnk2REyC1Dg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:47:1f:5f:22:35:67:12:cc:b0:bf:d3:65:9e:1c:90:0c:7c:
3a:95:a8:8b:44:87:b8:a4:1d:04:b5:74:d3:82:f1:46:36:69:
94:f6:d9:21:45:2e:c5:14:0b:63:9b:d4:fd:64:de:4e:6e:53:
a4:2b:b9:7a:52:eb:91:89:f8:e6:e3:ca:52:dc:08:a8:18:9c:
61:65:4a:27:30:06:0a:36:89:9c:5a:ba:2d:75:a4:ef:39:4d:
9b:72:10:94:0b:ef:5d:f6:af:2f:55:97:b1:90:a6:b0:18:85:
8f:c7:fd:44:fc:d8:50:12:9e:d0:05:7c:1a:5f:9e:e1:1e:a1:
66:7e:05:bb:6c:56:63:76:01:14:11:7d:85:5c:78:a9:4e:30:
df:41:e6:7c:4d:f5:d7:df:4c:c6:ad:e1:78:48:dd:9f:74:93:
85:0c:89:07:9f:29:64:92:9e:79:9a:12:f7:cd:3b:75:12:8d:
b2:7a:f5:7c:5b:69:ca:39:73:84:35:39:73:f6:0f:8b:56:e2:
01:1c:d8:75:71:65:25:2c:5b:fa:23:86:38:3d:e2:d2:0b:5e:
7b:71:58:23:fa:52:6f:16:fe:1b:52:19:f9:a2:48:31:38:e2:
9e:c4:20:cc:cb:14:4d:96:e1:3c:e8:22:dc:fd:b4:c0:33:5c:
62:e4:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org