Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/WKru8X_zKjJbDWxhAecF-s9yWps.roa
File: WKru8X_zKjJbDWxhAecF-s9yWps.roa (raw, json)
Hash identifier: 0TvO1n9BklW9FLfTMaEgLMVW8V2a486bo3AOBhF2eQY=
Subject key identifier: 58:AA:EE:F1:7F:F3:2A:32:5B:0D:6C:61:01:E7:05:FA:CF:72:5A:9B
Certificate issuer: /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial: 07
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/WKru8X_zKjJbDWxhAecF-s9yWps.roa
Signing time: Fri 09 Dec 2022 02:36:27 +0000
ROA not before: Fri 09 Dec 2022 02:36:27 +0000
ROA not after: Tue 05 Dec 2023 15:30:09 +0000
asID: 131657
IP address blocks: 2400:c9e0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Validity
Not Before: Dec 9 02:36:27 2022 GMT
Not After : Dec 5 15:30:09 2023 GMT
Subject: CN=58AAEEF17FF32A325B0D6C6101E705FACF725A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e0:7a:3f:da:0f:0e:b7:2a:e3:81:75:96:41:
e8:6a:4d:d3:69:cb:15:f3:96:01:b4:50:56:04:d7:
bf:a0:dc:86:52:6c:87:97:3d:73:7f:41:80:cc:e1:
74:08:e2:89:e9:0f:b3:9a:4d:fc:f8:86:67:7a:f7:
a8:7a:0f:d5:9a:2b:16:98:b7:5c:73:4f:95:38:f0:
7f:45:38:a4:be:3e:6b:47:32:fa:86:65:f3:c4:c6:
14:03:da:35:e1:63:1c:9d:f2:be:81:ea:33:2e:1b:
9c:7c:1f:1f:35:77:bf:3a:03:30:45:fa:58:a7:5f:
5c:8a:c8:ba:eb:5e:61:20:9a:42:cd:62:88:90:23:
9b:60:51:bc:e5:89:7c:34:ec:f1:a0:b5:6c:05:99:
b0:02:4b:51:9b:b9:61:86:d5:7f:af:c6:ad:b5:75:
7f:65:11:bb:58:53:48:00:a4:e0:94:33:39:30:3a:
9b:16:d8:1a:5a:63:5c:5b:bc:ca:a4:f2:34:c5:8c:
d1:23:d7:7a:25:53:47:5c:44:15:f4:73:8d:34:43:
6e:f0:a9:2e:f1:11:70:58:34:a8:37:d4:d1:ad:20:
d0:e4:84:57:67:4f:00:9b:8f:89:5b:ca:0a:cf:f2:
ac:be:f8:20:a3:30:7f:22:29:99:64:14:d5:49:fe:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:EE:F1:7F:F3:2A:32:5B:0D:6C:61:01:E7:05:FA:CF:72:5A:9B
X509v3 Authority Key Identifier:
keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/WKru8X_zKjJbDWxhAecF-s9yWps.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:c9e0::/32
Signature Algorithm: sha256WithRSAEncryption
17:46:d2:c0:ce:26:b4:a5:f6:fd:30:70:7c:5b:48:08:f4:1c:
70:e5:6a:ff:89:aa:24:6a:5b:11:9f:14:7e:22:dc:26:83:ec:
b8:c5:12:0d:71:76:d9:f1:4c:40:cf:3a:25:d0:a5:ce:2b:f1:
86:6a:8d:04:12:7c:7e:23:43:2e:61:f5:5d:a3:a6:3b:53:7a:
b3:8f:d7:fb:76:40:30:a7:3e:6c:cf:5b:d0:04:04:76:6a:c7:
9c:dc:57:c9:44:67:58:51:7c:fd:6a:43:0d:b3:41:68:ee:fb:
28:62:fa:59:a0:0c:f0:13:57:11:6c:7b:07:ff:1d:3a:5a:6c:
1f:e6:32:0d:2f:34:92:1b:65:d0:a2:de:f7:15:e6:2b:24:a9:
a0:71:d0:95:02:6e:50:90:ed:0e:55:9d:2a:ad:f5:4d:74:d6:
1a:d6:65:42:dd:29:a6:35:b2:81:b7:02:d2:d0:91:5a:02:3f:
bd:c2:b9:60:47:eb:bc:32:5e:5b:3b:bb:95:c8:64:1a:a3:fd:
4e:18:e7:86:1d:f7:e6:7c:1b:c2:06:e0:b3:7a:ae:98:1f:d7:
c2:87:78:be:12:36:21:3a:8f:c5:9d:e3:af:5d:9a:7e:29:fc:
b0:23:ca:52:f5:96:31:37:2d:6e:93:dd:89:2c:2d:29:a3:d2:
b6:85:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 16:25:36 2023 by rpki-client on console-fra.rpki-client.org