Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/5wNRRYHW0XjHlSTjcKZUKeRF2U0.roa
File: 5wNRRYHW0XjHlSTjcKZUKeRF2U0.roa (raw, json)
Hash identifier: TGsT7O0+UhMpp/13hpjmm1CJu3a9C+zkiYh1mhy1Crc=
Subject key identifier: E7:03:51:45:81:D6:D1:78:C7:95:24:E3:70:A6:54:29:E4:45:D9:4D
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0AEB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/5wNRRYHW0XjHlSTjcKZUKeRF2U0.roa
Signing time: Thu 15 Sep 2022 02:49:27 +0000
ROA not before: Thu 15 Sep 2022 02:49:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 61.57.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 15 02:49:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E703514581D6D178C79524E370A65429E445D94D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5e:ee:af:97:04:77:26:b4:65:48:fa:23:28:
b3:65:8e:b6:b3:4b:c4:b0:f0:23:a4:cb:d9:fa:00:
f8:15:eb:4c:14:e6:33:81:8b:57:bb:63:c7:d5:2c:
26:05:f3:4c:62:1b:81:82:c8:5e:9c:95:14:16:fb:
e1:49:47:74:ad:e8:4c:44:1c:f0:7e:56:56:81:34:
04:8f:ca:de:fa:b3:66:74:4e:f8:7e:6e:62:27:bc:
da:e9:9d:70:ff:75:03:50:36:d7:af:d0:af:bd:08:
ab:6e:b3:d5:49:7c:b9:43:56:b9:97:92:a1:d2:1a:
f9:3f:46:7f:3f:f4:16:a2:1c:42:b1:2a:23:ee:31:
6b:46:a6:72:58:1b:c6:0d:7d:26:18:b1:a4:50:1f:
43:d7:11:79:10:1f:89:69:cc:cb:e7:de:0f:ee:72:
e0:e1:ba:c0:b8:bd:24:f7:d2:18:02:df:4f:17:d0:
55:7c:fb:2d:03:c5:a4:4a:68:e0:59:2e:7b:d9:70:
1f:9a:59:ca:6c:5e:1b:08:a0:07:26:9b:ae:48:45:
7a:d3:56:dd:29:e5:54:e6:73:36:69:d6:08:ae:7d:
81:13:d5:fb:dd:8b:c1:84:44:b3:48:0c:f0:e3:ae:
4b:38:f5:c5:0c:40:88:7c:a8:1f:f2:d2:75:7d:dc:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:51:45:81:D6:D1:78:C7:95:24:E3:70:A6:54:29:E4:45:D9:4D
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/5wNRRYHW0XjHlSTjcKZUKeRF2U0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.156.0/22
Signature Algorithm: sha256WithRSAEncryption
99:ba:51:7b:b5:a0:94:be:1f:ca:98:62:26:ba:07:84:a9:11:
63:ee:3f:ed:cc:01:d0:4e:65:5e:9b:3a:41:c6:2b:68:5d:73:
a5:10:d0:b2:65:49:4a:04:37:29:13:9e:59:7b:ad:57:7d:dc:
0f:04:d4:d5:7e:23:1f:f0:ec:84:60:1e:8f:97:fa:77:e3:fc:
75:a6:a4:0d:05:89:95:20:7d:59:a4:f5:cd:23:a2:2d:b0:b0:
93:33:fa:62:8d:ff:f3:64:14:66:95:df:54:02:b9:e1:98:f8:
b2:ae:df:c4:ab:d6:d5:b0:65:bf:01:71:ff:20:fd:e3:f3:b9:
25:19:50:9c:fd:1e:97:6b:33:4e:1e:50:1d:e3:c8:ea:d8:a8:
bf:bc:51:96:79:f2:75:c1:2d:b0:c9:bf:31:1e:8f:22:a8:17:
be:b4:b2:80:88:6f:09:ea:bf:94:5c:c0:aa:1b:d7:b3:f3:0b:
0b:a7:c6:22:25:a8:99:6f:b0:61:61:e6:59:3f:48:70:26:3e:
13:2b:23:e7:5f:e7:7f:ff:63:49:5c:8b:57:6c:c6:a4:05:a0:
7d:49:e5:40:dc:e8:3f:1e:79:cc:54:54:dd:51:33:6c:e3:07:
ab:51:c2:55:2d:c3:07:3b:68:74:b3:49:cc:bf:4a:37:8e:cc:
a0:99:e6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:57 2023 by rpki-client on console-fra.rpki-client.org