Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/5_JGmiaVmfWq5ZN-GS--KnuSjLQ.roa
File: 5_JGmiaVmfWq5ZN-GS--KnuSjLQ.roa (raw, json)
Hash identifier: BlvS00f39gR0HXfPRJGMxPc2p6jG6JGZagckRPfcnvo=
Subject key identifier: E7:F2:46:9A:26:95:99:F5:AA:E5:93:7E:19:2F:BE:2A:7B:92:8C:B4
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B4F
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/5_JGmiaVmfWq5ZN-GS--KnuSjLQ.roa
Signing time: Thu 15 Dec 2022 02:56:57 +0000
ROA not before: Thu 15 Dec 2022 02:56:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 123.50.40.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2895 (0xb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:56:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E7F2469A269599F5AAE5937E192FBE2A7B928CB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:f3:9f:d0:9e:ae:19:71:06:6e:b8:bb:67:
78:32:20:04:b6:80:d9:e7:98:e7:4b:e2:29:d1:85:
5f:09:9e:1f:7f:c9:c9:13:b9:c2:e7:59:90:ba:7e:
9f:c7:3d:06:79:45:20:6d:e8:0a:65:07:d3:cd:54:
b8:3a:b6:b4:c7:45:bb:84:17:b2:30:ce:8a:53:78:
fa:06:a9:9c:95:0e:13:b3:f7:80:4f:7d:89:3e:57:
63:b7:65:fa:33:fe:11:f8:fd:4c:4c:b6:89:4a:8f:
97:4b:cd:97:27:3a:e2:5b:77:2e:49:71:a2:4a:6d:
24:f9:9c:ff:da:b5:e2:56:84:da:0e:be:8d:09:fc:
f1:f9:63:7f:1b:a7:6d:b1:bb:78:8a:63:1d:05:76:
ba:9d:76:7d:cc:9f:c2:e1:96:7f:db:7a:02:f4:83:
57:18:15:3a:d3:d8:cd:65:42:01:d1:c6:9d:35:57:
b7:92:f3:d1:93:66:ed:38:f5:6c:e6:fa:71:c8:31:
85:e4:5c:40:1d:55:67:39:cc:34:99:f2:33:45:81:
50:b1:73:0f:27:17:5e:d1:f7:78:29:4c:83:83:40:
de:56:26:38:6e:93:81:cf:f2:df:e7:cb:c4:91:63:
71:95:90:8b:af:ca:d5:11:fb:3e:c3:57:10:8a:58:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F2:46:9A:26:95:99:F5:AA:E5:93:7E:19:2F:BE:2A:7B:92:8C:B4
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/5_JGmiaVmfWq5ZN-GS--KnuSjLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.40.0/21
Signature Algorithm: sha256WithRSAEncryption
04:6f:b0:fc:fb:e5:c0:64:d5:43:3b:b1:e2:63:83:bf:78:56:
88:ec:fd:4a:1f:53:6e:92:57:df:74:7e:99:e8:78:c5:f6:b5:
2c:f8:84:18:ba:72:f7:f5:dc:b7:0f:6b:a5:bb:5e:4e:86:9b:
a5:67:05:e6:53:e1:22:f6:17:ce:13:db:8c:71:fb:99:3d:b0:
a0:92:dc:f9:ad:a3:37:ea:42:50:8e:79:a3:5a:5f:70:8b:33:
11:a5:23:91:81:fb:6e:7b:a8:8f:91:1a:e0:db:52:32:54:b6:
75:b0:ac:ea:e9:59:f0:7d:f6:cb:c8:74:78:7c:0c:2e:29:a7:
b2:0b:33:72:d7:da:cc:08:31:45:42:66:62:18:f2:2e:f0:f1:
7f:c4:5c:df:26:7d:76:7c:2a:1f:38:7e:55:9f:8b:f1:6d:f6:
f5:3c:8e:71:39:2b:78:9f:08:d2:b4:7c:5a:16:36:bf:44:7e:
04:a2:c8:58:c6:a6:05:01:89:86:b7:bf:44:39:be:d8:2d:40:
28:46:cf:e9:6c:5e:0f:8e:87:0d:11:8a:c1:2b:f0:c4:a0:08:
39:c2:6f:a2:45:e4:52:d4:be:d6:c9:fa:fc:26:70:2d:10:5b:
bd:de:f3:e2:86:35:8c:6d:fa:dd:81:c2:84:94:62:88:b3:50:
58:e5:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:36 2023 by rpki-client on console-ams.rpki-client.org