Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/y6NTvHj4HdE4_eBc9vSjJtD_S-0.roa
File: y6NTvHj4HdE4_eBc9vSjJtD_S-0.roa (raw, json)
Hash identifier: uIrDblHKClYFdvsgV7+aoDC1KVXZtYMxza9zTGOHDiI=
Subject key identifier: CB:A3:53:BC:78:F8:1D:D1:38:FD:E0:5C:F6:F4:A3:26:D0:FF:4B:ED
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F7D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/y6NTvHj4HdE4_eBc9vSjJtD_S-0.roa
Signing time: Mon 17 Oct 2022 06:39:48 +0000
ROA not before: Mon 17 Oct 2022 06:39:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.96.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3965 (0xf7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Oct 17 06:39:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CBA353BC78F81DD138FDE05CF6F4A326D0FF4BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:40:52:fb:f0:98:3d:28:b4:ff:d9:3c:d9:
d6:57:e6:03:70:ee:eb:64:40:6a:a4:b7:15:a5:29:
e7:52:73:10:cf:9e:3f:8b:aa:67:22:19:34:5e:58:
f3:33:1d:74:bc:d8:7d:83:e9:ba:14:ca:20:44:83:
1a:35:cd:8d:e3:20:f0:30:77:80:ab:e4:ae:4d:f8:
6a:fc:75:b8:a6:f1:84:6c:6e:a3:23:ab:54:91:41:
22:e2:aa:b5:00:86:e9:11:db:8f:97:27:d0:38:04:
b4:92:64:0b:f2:91:13:e3:bb:0d:ba:4c:0b:38:8c:
d4:99:d9:f1:5f:c8:bb:de:ce:56:33:2c:3e:d2:66:
ca:8c:f3:2a:ed:72:22:45:41:64:2d:b3:43:f9:fa:
db:38:cd:39:04:17:07:f9:da:d2:15:cc:ed:8f:dc:
85:21:06:8e:be:8a:3e:5c:f2:91:e6:e2:da:32:e1:
b4:c5:91:69:cb:71:b5:b0:90:ad:00:5c:9b:2e:fe:
46:91:b1:99:13:44:f4:c1:aa:58:1f:61:54:e4:7a:
3c:99:f1:f1:c6:2a:3d:4f:78:de:89:c9:58:9a:42:
8b:78:cd:6e:8e:51:a0:e7:bf:cd:15:b4:5a:aa:65:
42:4b:32:68:fe:ee:72:d9:74:fb:77:42:05:51:25:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:53:BC:78:F8:1D:D1:38:FD:E0:5C:F6:F4:A3:26:D0:FF:4B:ED
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/y6NTvHj4HdE4_eBc9vSjJtD_S-0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ed:d4:19:8f:7a:9a:fb:57:97:da:6c:aa:e0:60:c9:36:45:
2a:d0:5e:25:1d:1f:1b:1e:84:b4:47:70:98:96:0f:af:84:ca:
f7:69:34:f9:1c:2f:aa:b3:1b:dc:1c:5a:13:ca:cd:0a:a4:f3:
64:54:cf:aa:94:6b:2b:e0:12:0e:a9:2d:85:47:14:e5:d7:c4:
fe:dd:30:c3:32:0a:67:38:10:28:f9:95:20:b1:10:a8:12:47:
e1:b3:ce:8b:af:aa:41:6a:a5:0c:72:bc:35:39:e8:dd:b4:83:
76:f0:7b:13:44:77:e9:3c:e4:07:2e:ea:b7:ca:e3:70:af:4e:
1f:f1:07:23:f7:e6:e2:a3:3e:97:51:7a:b2:60:61:79:64:18:
e7:80:1f:ec:13:7f:34:47:47:9a:af:ef:2f:0e:51:99:81:f9:
13:86:8f:d7:34:f6:74:eb:75:05:ac:93:76:05:d7:1e:9e:70:
69:1f:80:1d:9b:e0:6c:8d:a1:43:8e:da:7b:03:49:7d:ac:41:
4e:24:f7:1a:f4:dc:12:e0:e8:f1:5e:52:5e:2d:a0:f7:d4:11:
74:73:83:cb:87:37:2f:6c:b9:38:c1:bd:ef:95:23:7a:f5:7c:
55:73:a2:26:a8:cd:fd:a6:cd:d0:4e:f9:37:71:04:8f:cd:2d:
07:30:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:46 2023 by rpki-client on console-ams.rpki-client.org