Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/rn0RvswbmoGCe4S0ZxpLvN4rcPo.roa
File: rn0RvswbmoGCe4S0ZxpLvN4rcPo.roa (raw, json)
Hash identifier: 4md00scNPzESeh5pw9uO82AjrFnmrqdrt8QeiY/FWTI=
Subject key identifier: AE:7D:11:BE:CC:1B:9A:81:82:7B:84:B4:67:1A:4B:BC:DE:2B:70:FA
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rn0RvswbmoGCe4S0ZxpLvN4rcPo.roa
Signing time: Thu 15 Sep 2022 02:39:50 +0000
ROA not before: Thu 15 Sep 2022 02:39:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.85.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AE7D11BECC1B9A81827B84B4671A4BBCDE2B70FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:25:f9:85:f2:78:d9:3a:07:a3:c3:78:8f:
a5:00:18:80:1e:6e:52:b7:e9:ff:02:e1:de:72:de:
0a:a2:f7:76:d5:bd:9e:b5:64:2d:c1:ba:f5:9d:90:
15:81:57:be:79:b7:87:d3:63:a2:37:c5:9e:2b:4d:
36:f2:fb:f6:c5:b1:36:a2:3d:d1:4f:64:e6:09:e0:
81:18:38:e1:46:7b:fa:78:ca:6c:a9:6e:37:9d:d4:
44:71:21:b5:ef:36:78:c6:71:d1:97:a2:d6:e6:af:
5a:8e:a2:b0:b9:4f:11:34:ba:21:d5:1c:fc:00:ed:
e8:d3:e5:73:4c:52:9b:6f:33:aa:2f:bd:74:14:ad:
a9:c7:3d:96:93:ee:0c:e3:3e:fc:be:41:e4:e2:50:
c6:45:72:fb:fb:6a:44:3a:91:45:bc:3b:38:f3:a1:
1c:70:ed:f2:0e:95:8e:db:4b:bf:89:e5:b9:fe:e3:
7d:fc:ab:22:c1:ed:ed:be:6e:64:18:57:d0:d9:b7:
b8:88:80:27:b0:3d:19:92:eb:f9:eb:c2:1e:ae:1c:
04:9b:c5:56:8b:2a:a8:10:f2:d0:0a:2c:fb:e9:bb:
a2:a2:6f:bb:e4:24:48:4a:46:6e:ea:23:4a:fa:77:
96:a9:7a:07:88:bb:59:25:48:87:fb:cf:23:27:c5:
6f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:11:BE:CC:1B:9A:81:82:7B:84:B4:67:1A:4B:BC:DE:2B:70:FA
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rn0RvswbmoGCe4S0ZxpLvN4rcPo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:f8:e1:f6:45:21:f0:33:21:0b:11:64:34:d3:76:1c:0c:c0:
4e:d4:c3:14:17:f0:c7:1a:12:5f:86:ae:be:d6:04:a4:f6:12:
39:a1:19:a9:f7:84:15:ff:40:bb:9c:86:09:54:ba:05:f3:ba:
a4:b8:07:83:d6:5e:57:cb:f6:14:68:80:3b:da:e0:70:7e:f5:
c2:60:56:72:4a:d5:80:89:42:c7:fd:6f:85:b2:56:00:aa:48:
0c:78:3a:32:22:c5:16:c4:78:ca:7d:cb:d5:4a:4d:e9:de:5e:
77:6e:7d:69:4e:d8:e4:8d:c4:97:82:47:a6:29:f1:1a:ab:7d:
7e:5a:30:73:31:0e:fc:99:c6:6a:99:18:96:37:b2:10:06:42:
08:cb:e2:81:2a:6a:bc:a4:5e:a2:c0:fd:a6:02:19:ba:35:19:
2e:3d:fc:6b:67:40:4e:11:1c:21:01:00:6a:49:c9:f2:57:28:
d8:5d:c3:1d:86:74:ee:df:a5:18:6a:35:68:88:ff:b5:ac:87:
02:06:07:cb:67:65:36:6f:16:35:8d:d7:2f:4d:12:35:f3:53:
91:21:dc:8b:8a:72:d5:14:a7:24:c5:57:ca:12:a6:74:25:fd:
27:ee:22:8c:21:f9:40:ec:8e:61:29:1d:19:97:84:fe:e3:21:
59:e6:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org