Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/rk-RZbj5dcRopF9ckn_6GTYim2A.roa
File: rk-RZbj5dcRopF9ckn_6GTYim2A.roa (raw, json)
Hash identifier: M2nnML5SVc86tVFxxeSgkujS4+oQIjqOTeYzwoi0qV0=
Subject key identifier: AE:4F:91:65:B8:F9:75:C4:68:A4:5F:5C:92:7F:FA:19:36:22:9B:60
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rk-RZbj5dcRopF9ckn_6GTYim2A.roa
Signing time: Thu 15 Sep 2022 02:39:58 +0000
ROA not before: Thu 15 Sep 2022 02:39:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 124.218.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AE4F9165B8F975C468A45F5C927FFA1936229B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:d2:c4:18:78:02:e4:22:5f:94:32:de:72:
d7:86:39:a8:7c:2b:54:f4:7d:f5:3a:fd:58:94:99:
3f:84:ed:fd:7b:0a:74:37:c5:cb:8d:b2:4b:f0:06:
92:0c:1f:fb:d3:2e:11:9f:90:24:5e:a5:2c:d4:1d:
00:6e:68:36:d3:fd:3a:5e:73:f2:0d:5c:8e:a6:25:
17:ad:96:2b:bd:69:6b:65:14:0e:0d:b2:90:b2:70:
09:1d:a9:c6:e3:40:1a:09:5d:39:16:ef:95:72:64:
1c:90:b1:ad:1e:6b:4d:4f:48:cd:66:26:3c:22:b0:
6c:3b:35:7b:f2:4f:70:7c:4d:9f:0f:e8:78:80:7b:
88:27:1e:05:56:af:f1:ca:71:1f:ed:94:2f:25:d7:
14:0a:53:af:f9:0d:36:20:14:84:c4:a7:83:0e:cd:
0e:04:a0:1f:c9:b6:4b:d8:aa:98:b4:a8:19:50:cd:
7f:6c:75:2a:d8:16:cb:8a:67:b1:d7:10:f6:2b:d9:
dc:d2:2d:89:a0:65:30:93:b3:6b:c2:58:fe:f2:98:
ff:37:c5:18:23:4f:53:9a:2d:db:f7:47:52:fd:9d:
c9:74:fa:a1:5e:7c:8d:b4:f2:e8:0d:d2:ba:3b:27:
7f:e1:0c:94:2c:02:5b:f0:57:00:3f:27:ee:ed:14:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4F:91:65:B8:F9:75:C4:68:A4:5F:5C:92:7F:FA:19:36:22:9B:60
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rk-RZbj5dcRopF9ckn_6GTYim2A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:e4:eb:3e:10:cc:9b:8e:b0:b7:58:41:bc:f3:0f:58:a6:4a:
3d:ac:c2:83:49:e9:12:28:46:24:80:e3:a5:dd:9c:70:db:d1:
76:2d:33:0b:84:17:8d:37:40:4c:5a:9d:1f:20:cc:35:ac:d7:
20:99:b6:c3:67:07:48:75:a4:09:e8:f4:60:01:e9:25:02:34:
bc:c0:1f:af:e9:37:10:08:a6:ef:95:64:91:10:ae:0d:4f:7d:
41:1f:1a:dc:f9:3b:83:b5:ad:a9:e5:7a:07:18:0a:3e:da:fd:
e0:42:45:b0:3d:18:ec:92:62:f8:c8:25:82:ad:f9:01:29:a2:
32:da:4a:3d:bb:3c:d9:c0:2b:1b:7f:82:e4:30:05:af:54:ef:
46:38:78:03:4f:e2:c3:c3:d7:8b:95:76:79:85:7b:f7:3d:4a:
ab:60:5b:c7:c2:b5:b2:ff:88:dd:04:9b:7c:ee:60:1f:2f:03:
2e:36:16:b9:f7:70:a8:d8:ca:68:26:ec:e6:d0:be:4d:86:87:
6c:fd:99:c2:4f:4c:a5:86:82:5e:fd:45:f3:8b:88:e4:ae:5e:
1a:6d:0f:b1:7c:7a:24:63:ad:b0:84:4b:10:69:77:55:c0:61:
37:bd:39:bd:53:ad:97:26:0d:69:47:29:38:f1:93:4f:17:d8:
df:7a:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org