Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/vLDh6ie8fMOn9qfU1f5dlfsGk1w.roa
File: vLDh6ie8fMOn9qfU1f5dlfsGk1w.roa (raw, json)
Hash identifier: 9sOkA8t5P/279XnttQgOb6rO+yqmZW39slI2Q0dkIls=
Subject key identifier: BC:B0:E1:EA:27:BC:7C:C3:A7:F6:A7:D4:D5:FE:5D:95:FB:06:93:5C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/vLDh6ie8fMOn9qfU1f5dlfsGk1w.roa
Signing time: Thu 15 Sep 2022 02:39:47 +0000
ROA not before: Thu 15 Sep 2022 02:39:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.63.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BCB0E1EA27BC7CC3A7F6A7D4D5FE5D95FB06935C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:d0:e6:b4:bd:c4:b5:fd:32:60:8b:b8:59:
16:a8:74:27:b8:7a:90:98:34:49:48:c4:04:fd:8a:
85:74:7d:14:83:b8:44:ee:a9:d6:a9:9a:42:d8:af:
24:82:f3:4a:ca:7f:ac:69:4b:3a:ac:03:28:1a:8e:
94:34:dd:95:3d:a7:cb:2e:1a:19:e9:c9:a8:de:f7:
57:72:8c:4c:1e:1a:c7:83:80:29:f2:95:31:91:32:
47:c6:0a:30:6f:01:9f:cd:9e:8c:cd:f0:b0:cf:be:
2b:05:cf:3b:b5:14:a1:dc:76:d4:00:37:9d:a9:da:
92:3d:65:b5:57:08:7c:4e:59:6e:da:9b:27:83:85:
b4:16:63:a5:60:7b:c5:8a:b5:01:b1:c6:49:2c:6e:
a0:63:25:b7:c2:b7:a2:4a:32:a4:be:92:db:7b:e1:
b2:8c:b6:a7:8f:75:72:95:e5:3d:0b:ea:2d:e1:d6:
9b:52:66:4e:31:e6:7d:1c:d4:52:18:77:b4:be:cd:
63:1d:a8:87:58:63:b9:9a:25:6c:a2:af:c6:b4:f2:
b2:64:88:c9:8e:b3:05:27:87:61:2d:1e:84:1f:76:
c3:91:41:05:82:a9:de:5f:4d:30:b7:e4:2c:14:5d:
a5:91:98:b3:63:7f:b0:29:cc:93:45:d2:7c:00:73:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:E1:EA:27:BC:7C:C3:A7:F6:A7:D4:D5:FE:5D:95:FB:06:93:5C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/vLDh6ie8fMOn9qfU1f5dlfsGk1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fb:eb:0e:74:9a:d8:9d:40:22:27:8d:da:d9:9a:27:16:77:
ae:66:20:9a:f2:88:54:07:44:37:c7:5d:9f:2e:99:64:15:95:
88:89:83:be:1b:6c:fa:7f:ff:dd:48:98:5b:5a:df:20:1a:7c:
5d:11:d8:dd:d3:2a:4a:36:61:99:bd:1a:3d:58:ed:11:fb:0c:
7e:02:e7:3f:bf:11:14:c4:b9:d5:14:29:7f:51:60:1e:4e:4b:
a0:a9:c0:4a:c5:8d:9e:b4:6c:df:6e:44:ba:db:43:4f:95:b4:
67:59:30:cf:33:c8:1b:94:57:ec:4d:91:b3:50:65:f7:74:57:
bc:e9:a2:f2:8c:49:95:6f:34:20:85:fe:5d:8a:c5:d4:aa:9e:
66:90:d1:cc:11:23:22:0d:85:d1:9a:e0:1d:d0:a1:c2:46:e7:
e6:b9:07:fb:cc:1c:7b:ce:ec:db:f2:22:cd:d6:aa:a3:01:22:
4b:4f:26:72:a1:f9:d9:0f:f3:e9:f8:43:8c:95:f5:cc:33:7f:
02:01:2d:20:0f:9b:7e:64:a2:5c:43:f0:74:72:cd:24:88:9d:
37:50:b9:b4:68:4d:bf:d2:96:6b:29:8e:c9:52:ee:1d:25:35:
fb:26:56:8f:8b:f9:2b:75:6a:5c:6a:bb:2b:58:9c:ac:5c:e9:
f7:26:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org