Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/gbW_C6ZGz2KkeAMaelpLRpfbklQ.roa
File: gbW_C6ZGz2KkeAMaelpLRpfbklQ.roa (raw, json)
Hash identifier: snVOy9E41Ta31KnAKX/xOHoJnHXifjBtfxmoIv/+dlk=
Subject key identifier: 81:B5:BF:0B:A6:46:CF:62:A4:78:03:1A:7A:5A:4B:46:97:DB:92:54
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B60
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gbW_C6ZGz2KkeAMaelpLRpfbklQ.roa
Signing time: Thu 15 Dec 2022 02:57:04 +0000
ROA not before: Thu 15 Dec 2022 02:57:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 123.50.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2912 (0xb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:57:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=81B5BF0BA646CF62A478031A7A5A4B4697DB9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:9f:f4:7e:f1:4c:2d:d7:05:63:d5:d0:b3:
e5:bb:5d:88:cd:40:76:f9:95:17:18:be:83:f3:68:
a6:8a:df:43:db:97:0c:f3:5e:2f:00:8e:70:75:39:
9f:df:cd:8f:a6:31:b1:7f:52:29:08:49:3c:e1:bb:
d2:f9:26:8a:54:2d:62:0b:3e:d8:ed:ed:75:e2:cf:
8b:1c:86:91:7c:59:aa:06:d4:a7:b7:b5:e4:8b:50:
85:60:d3:ae:0f:60:33:ad:0e:8e:a7:35:a2:ad:b5:
70:75:2e:f5:ff:f8:16:a6:1a:27:99:e3:3c:ac:5b:
fd:ad:f2:e3:05:f8:16:31:ea:94:a8:b1:e4:63:f5:
4e:1a:2d:32:89:ba:a5:17:86:f9:49:74:98:76:91:
15:31:d2:a5:ca:d4:7a:d0:d9:27:97:f3:a1:dd:9d:
64:23:15:d9:99:a8:65:88:29:43:d3:95:e8:ba:44:
35:2c:15:72:44:29:29:c4:d0:09:18:a5:1e:0f:88:
d8:e2:1f:52:14:04:6d:32:43:5d:5f:e6:1d:a1:71:
21:a7:f9:5b:5a:5a:c3:29:73:46:90:aa:6f:d9:52:
d4:a8:7e:44:36:00:2d:e5:75:0b:1f:7f:88:e0:a3:
49:0d:c0:08:ec:6f:0f:ae:9a:36:e7:96:69:ec:26:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:BF:0B:A6:46:CF:62:A4:78:03:1A:7A:5A:4B:46:97:DB:92:54
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gbW_C6ZGz2KkeAMaelpLRpfbklQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.61.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b5:58:9b:6c:4e:10:7e:72:ba:fe:62:44:3f:44:e4:6f:51:
8d:c0:74:aa:5d:77:cf:b3:a2:be:b1:bc:8e:94:b9:c3:1b:c9:
fe:b3:12:41:2c:82:d1:f5:4c:89:a9:92:47:52:f6:6e:e2:c0:
73:52:6d:26:ee:59:23:5c:d4:b6:76:71:3a:22:e4:e1:9b:a2:
29:6e:b5:92:41:96:d6:1f:fd:6a:a6:ef:39:16:a0:1c:cd:fa:
6b:71:4c:bd:62:66:b3:94:39:ff:70:56:fa:c1:7d:8a:b3:ce:
52:c0:91:fa:a2:bc:4f:0b:eb:4f:27:2b:a7:ca:52:a7:b4:89:
7e:36:80:8f:aa:1f:49:79:13:9d:81:40:d3:05:f2:89:ea:0c:
e5:df:70:74:d3:b5:b3:8c:15:e2:86:7d:35:1c:60:11:fe:5d:
4c:71:71:ad:f8:db:7f:03:c7:22:d5:68:d0:7f:28:b7:84:36:
25:90:b4:0a:98:c7:ef:59:8f:75:fb:7f:45:78:d5:ed:c0:ad:
d9:aa:d9:0c:0a:65:f3:20:2c:12:f7:d4:39:a1:49:7c:f4:78:
e6:57:54:b9:5c:86:09:fd:a8:1d:b8:7e:b5:e5:8b:72:85:a9:
82:ee:92:a5:37:78:4c:25:dd:9d:7f:98:9d:02:19:f9:17:60:
bf:54:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:36 2023 by rpki-client on console-ams.rpki-client.org