Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wq_aapUYNtVwYKA5GSri6DaLJDA.roa
File: wq_aapUYNtVwYKA5GSri6DaLJDA.roa (raw, json)
Hash identifier: WU2YaqVeQ10EulCDRyURp63/DeFxnCHMz9R28sowfXk=
Subject key identifier: C2:AF:DA:6A:95:18:36:D5:70:60:A0:39:19:2A:E2:E8:36:8B:24:30
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10A4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wq_aapUYNtVwYKA5GSri6DaLJDA.roa
Signing time: Tue 16 May 2023 08:36:26 +0000
ROA not before: Tue 16 May 2023 08:36:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.200.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4260 (0x10a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:26 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2AFDA6A951836D57060A039192AE2E8368B2430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:01:63:da:5a:08:39:9c:50:23:e0:fb:c8:
38:1f:79:3d:7a:23:57:8e:8e:48:26:21:b5:ea:5d:
55:64:5a:f0:41:3a:00:80:9f:bb:42:87:fa:8f:36:
e6:17:12:23:b1:55:b8:77:96:64:81:70:4b:e3:dc:
a1:30:94:5d:c8:12:8f:63:f6:5c:ed:a8:c4:97:c9:
46:5c:f8:01:ed:07:d5:89:31:19:06:06:4f:34:ed:
f7:c3:04:93:7f:20:f4:71:99:8b:5c:d6:93:0e:bc:
13:04:76:ce:c4:86:a1:51:00:ec:1b:49:8d:09:3f:
39:e2:8e:28:28:fa:f5:7f:8c:d4:77:06:7e:1d:21:
2d:3c:58:99:14:2d:52:96:37:00:58:fd:2c:8a:43:
3c:76:9c:5b:d9:be:9f:39:29:e9:63:4a:82:0f:7a:
ff:c7:43:77:11:d9:aa:d8:e6:1b:a0:14:4e:8e:8a:
6c:ed:38:a7:9e:34:a6:15:71:6e:47:1e:66:69:13:
16:22:7d:0f:b0:b9:9e:9e:6e:05:8e:2b:a6:07:69:
7b:da:bd:ff:ce:79:a6:2d:56:e9:62:bd:03:b2:a9:
ca:d2:fb:9d:8e:05:72:91:1d:84:20:e4:3c:fb:e0:
70:bb:98:e0:95:33:87:df:5b:c5:59:c5:27:f5:f2:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:DA:6A:95:18:36:D5:70:60:A0:39:19:2A:E2:E8:36:8B:24:30
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wq_aapUYNtVwYKA5GSri6DaLJDA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:82:da:80:09:3e:5b:4f:49:b6:88:94:16:37:d9:35:8d:dd:
43:35:45:7c:9a:fc:b0:45:1e:f5:25:63:5a:a4:4b:66:d0:3f:
2b:08:ee:73:ba:b0:07:83:af:55:03:2e:49:7e:e9:95:85:64:
d4:4a:be:c9:dc:b1:1f:a5:8e:f9:04:7c:ab:0b:76:cb:cd:46:
c5:2e:35:ae:1b:35:5b:ea:50:f0:3c:bc:f8:60:a2:f1:5b:42:
3a:5a:37:32:07:8a:ad:48:17:8b:be:be:94:bd:76:48:cb:25:
9e:2b:69:b0:6f:0b:d0:60:69:7a:ec:97:70:5f:95:03:c6:ab:
37:d1:27:c9:82:9e:ff:19:e3:e1:ef:48:83:5b:bc:71:41:6c:
5d:e5:e7:8f:18:06:57:54:fa:a2:a0:6f:56:1b:9c:c2:60:66:
f0:1e:8b:36:68:af:fb:f6:e5:f8:68:33:bd:c9:9c:59:23:ab:
77:f2:65:11:71:02:2e:3e:fa:02:d3:91:44:a3:5c:d4:23:32:
ce:b5:9e:ca:19:3b:b0:7b:01:90:af:60:ad:e0:41:1e:21:d9:
8a:58:ea:30:e6:6b:66:99:c5:3a:9b:aa:58:f3:3a:9a:b5:76:
7b:35:7c:5f:f9:58:53:10:89:4b:63:75:7b:ab:c1:5f:10:5f:
66:6a:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:19 2023 by rpki-client on console-ams.rpki-client.org