Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATVISP/PXVVd0mt8GNHcU3YvTIn0daDKiU.roa
File: PXVVd0mt8GNHcU3YvTIn0daDKiU.roa (raw, json)
Hash identifier: IolXQKEw3Z718/4Gt+E7YusMm0fodnpXYfvcGcy7l7Y=
Subject key identifier: 3D:75:55:77:49:AD:F0:63:47:71:4D:D8:BD:32:27:D1:D6:83:2A:25
Certificate issuer: /CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Certificate serial: 09E6
Authority key identifier: BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/PXVVd0mt8GNHcU3YvTIn0daDKiU.roa
Signing time: Thu 15 Sep 2022 02:50:54 +0000
ROA not before: Thu 15 Sep 2022 02:50:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18046
IP address blocks: 43.248.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Validity
Not Before: Sep 15 02:50:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3D75557749ADF06347714DD8BD3227D1D6832A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:82:35:c8:45:b7:a9:71:38:ea:c3:ed:9b:
75:eb:ba:09:26:a8:3b:c1:9e:f0:d4:39:1c:80:4c:
09:d8:e5:bd:ee:77:d5:42:7e:ed:94:3f:f2:4c:ef:
81:08:d1:59:0a:49:09:7f:2e:57:da:00:6a:ed:1b:
24:d4:60:92:6f:08:15:09:da:68:eb:6a:fa:9b:78:
58:cb:b7:cc:c3:74:8d:d1:e0:13:f7:a1:b4:2b:d3:
24:c4:d2:fd:54:cf:d8:ce:b4:77:84:a7:7d:da:c3:
2b:7a:a4:76:4e:bc:63:d4:ef:b3:36:3d:49:d7:2a:
3f:9a:4e:c7:43:14:2d:44:ff:c5:c1:ed:64:cc:3c:
aa:b8:66:21:88:c5:65:27:79:ee:4e:90:e6:0c:99:
4a:88:25:79:32:1e:a0:ed:cc:9b:a0:87:cc:4c:d6:
fb:38:f9:1c:17:8a:a3:7e:44:0e:25:60:25:cc:f6:
6b:91:9f:b5:97:8a:02:44:ea:eb:1b:d5:1e:d3:87:
c3:58:e3:ac:08:38:98:57:bd:50:9b:72:0c:98:2b:
34:e2:59:75:07:12:9f:63:62:cf:b4:f9:b3:10:88:
58:0e:02:dc:e4:da:a9:ed:66:a5:98:d5:bc:55:a1:
d1:42:c4:ec:0c:a7:fe:b5:66:94:45:30:69:10:5f:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:75:55:77:49:AD:F0:63:47:71:4D:D8:BD:32:27:D1:D6:83:2A:25
X509v3 Authority Key Identifier:
keyid:BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/PXVVd0mt8GNHcU3YvTIn0daDKiU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.16.0/22
Signature Algorithm: sha256WithRSAEncryption
57:e7:6c:44:4e:46:93:79:c9:cc:e9:11:85:da:05:9a:c3:7b:
0a:5c:70:01:ed:c2:c5:8f:c4:f6:8b:a9:6c:09:33:06:6f:19:
ce:8d:03:5f:a1:7d:5f:fc:d8:e7:0f:ce:31:89:bd:86:ed:b1:
0e:17:c2:67:48:09:7d:ac:7a:be:b9:5b:85:27:85:b2:48:77:
9f:3b:0e:20:08:08:5e:f0:e9:d2:4a:28:76:ef:8b:c0:8a:b2:
ac:60:84:5c:43:dd:10:8e:48:e7:fe:57:e2:f0:93:5a:21:86:
59:a1:39:35:e0:b8:f7:ec:e9:76:73:54:7e:bf:50:80:fa:04:
50:fc:0b:30:86:d6:44:e7:f3:6a:11:e1:63:0c:14:14:2f:0e:
7f:34:6e:53:f3:75:23:a0:6e:44:f3:d7:2d:ab:73:f4:e6:59:
08:ec:50:76:76:0f:37:0c:a8:46:39:73:64:ed:ac:d8:56:9f:
bc:9d:0b:d0:44:c8:a8:f3:e5:ff:dc:fd:51:f0:af:1c:e2:20:
5b:07:99:b5:0a:86:8a:11:0f:f5:c7:be:1b:5c:85:b1:c9:fb:
fd:98:4f:d7:d2:7d:a1:f7:be:1a:02:9b:e7:21:01:b5:1b:d3:
ce:75:90:ba:1a:2b:c9:b7:b8:79:ef:24:a2:90:cf:a0:71:39:
1d:45:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:14 2023 by rpki-client on console-fra.rpki-client.org