Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/3jLRYoVzySe_V0GEtSj24YfX8-E.roa
File: 3jLRYoVzySe_V0GEtSj24YfX8-E.roa (raw, json)
Hash identifier: L7K0+vmFnmyGuWY9b9ePkqlGAeFIz90GVzNYHhJPu58=
Subject key identifier: DE:32:D1:62:85:73:C9:27:BF:57:41:84:B5:28:F6:E1:87:D7:F3:E1
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0AEB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/3jLRYoVzySe_V0GEtSj24YfX8-E.roa
Signing time: Thu 15 Sep 2022 02:49:26 +0000
ROA not before: Thu 15 Sep 2022 02:49:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 124.155.172.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 15 02:49:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DE32D1628573C927BF574184B528F6E187D7F3E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:d9:e1:3a:df:77:69:51:d4:b4:b1:de:95:
ee:8b:08:29:d8:a9:21:5f:d2:14:bf:53:be:6a:90:
f9:e1:ee:6d:49:22:3e:4c:a8:c7:a8:09:c2:b1:68:
d4:e9:51:0f:90:1f:72:ed:da:74:b5:4a:45:83:af:
b5:58:36:ff:29:26:56:65:58:11:9e:ae:7a:48:f2:
76:3c:a3:00:7d:a1:37:93:09:72:8a:1b:a2:e3:61:
18:b1:0b:94:85:a1:6f:d8:1e:82:08:1c:d3:c9:81:
e9:ec:53:8d:ae:2c:b0:e1:b2:4b:7b:88:2f:96:98:
aa:35:da:dc:1d:3d:0d:8f:99:c2:ed:58:0c:a2:ae:
f8:cc:cc:c1:53:a3:e9:ca:0f:28:7c:3f:35:0c:88:
c0:74:67:2e:e5:03:47:c3:39:63:02:92:5e:b3:5f:
dc:c5:9c:fd:43:3b:a4:93:57:c4:bc:9a:0f:6d:fa:
cd:e1:47:d9:77:c7:fd:40:60:bf:2f:30:3b:3a:a9:
b8:32:4f:d3:0b:01:c0:00:0c:29:1a:1d:21:cd:97:
c1:c6:53:ce:5d:63:32:8a:80:64:b8:b7:f2:59:3d:
59:0d:fd:ee:f2:73:bf:80:72:80:25:54:4d:d6:61:
15:5a:91:a4:bf:29:68:67:9e:c1:a8:44:85:2f:c8:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:32:D1:62:85:73:C9:27:BF:57:41:84:B5:28:F6:E1:87:D7:F3:E1
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/3jLRYoVzySe_V0GEtSj24YfX8-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.172.0/23
Signature Algorithm: sha256WithRSAEncryption
56:ec:47:50:a7:11:95:dd:b8:db:a1:5e:55:74:64:f2:f1:1f:
8c:9b:60:57:63:45:6b:04:8a:a0:8d:e0:e4:0a:ff:c0:f0:c0:
2b:6b:58:e3:16:4d:31:4f:3d:e2:55:5c:d2:a3:f5:95:3f:2a:
f7:15:26:19:20:af:dc:39:06:f0:e3:16:42:5a:0f:b9:f4:ec:
47:76:a7:0b:09:84:2a:37:67:79:a6:ca:0f:24:fb:78:59:19:
70:33:be:57:f6:b1:ec:77:91:a5:57:c7:05:cc:ff:80:e1:29:
af:7d:72:a3:3e:ad:5f:09:03:b6:05:d1:18:7d:42:fb:9f:b7:
77:fe:2b:05:b6:0c:cf:13:b3:65:a4:38:74:66:38:b7:bf:6d:
e9:2c:fa:48:0b:96:bb:d1:f6:de:13:67:10:04:09:b6:4e:95:
7e:bf:f9:86:8d:db:f3:cf:33:d5:2f:c1:23:59:c8:9b:a4:5d:
bc:89:27:83:e5:db:d0:f8:15:f6:6f:15:0b:c5:ba:1a:a3:f3:
85:4b:62:6a:57:0b:96:bd:13:ad:85:45:80:b0:ad:fd:46:19:
f4:c5:4e:cb:4a:4a:27:c1:da:c8:71:b0:7c:6f:ee:76:16:98:
c0:13:94:fd:25:bc:d5:ff:6a:4b:60:30:2e:90:63:65:e2:f2:
84:77:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:47 2023 by rpki-client on console-ams.rpki-client.org