Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/r5C5NlNdW9JrgGXtnK3U03X7kMA.roa
File: r5C5NlNdW9JrgGXtnK3U03X7kMA.roa (raw, json)
Hash identifier: aSbcpC8t2LUb5JQcXVMwnrUO5w+31PachJjNnoFnc4E=
Subject key identifier: AF:90:B9:36:53:5D:5B:D2:6B:80:65:ED:9C:AD:D4:D3:75:FB:90:C0
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0AEB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/r5C5NlNdW9JrgGXtnK3U03X7kMA.roa
Signing time: Thu 15 Sep 2022 02:49:27 +0000
ROA not before: Thu 15 Sep 2022 02:49:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 27.147.0.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 15 02:49:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF90B936535D5BD26B8065ED9CADD4D375FB90C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:45:f1:73:f1:7a:72:9e:50:1a:2e:b9:de:
d5:4e:d4:ed:be:27:05:5c:72:cc:92:8a:9d:ef:98:
9b:a8:4a:a0:54:53:57:a5:bb:fe:6f:06:56:b8:39:
23:bf:00:48:0d:d9:1b:11:07:a6:8d:c3:59:3d:0b:
8c:34:62:ba:f7:29:c7:87:8b:da:a6:dd:c1:2d:7d:
89:d9:0f:2b:7f:15:a9:0d:be:d8:8c:44:1d:6d:fb:
34:0d:87:ff:ba:56:cb:45:e5:73:4e:d6:85:f5:ba:
93:71:76:47:0c:af:dc:dc:df:12:29:52:14:3b:2f:
42:3e:75:75:83:b9:5e:13:54:a8:08:ee:1b:1f:5e:
4f:02:b3:4f:96:14:51:3e:e5:5b:bf:f4:6a:0e:68:
74:bf:8a:46:41:04:dc:8c:5e:a6:fe:a5:0e:84:10:
4c:cd:5c:4d:6e:90:08:1b:b7:c3:39:71:33:57:f0:
67:11:09:43:c9:a6:7a:9e:72:0d:af:cf:31:da:00:
59:27:cf:92:0e:74:4c:05:e5:10:11:c2:ce:03:79:
ce:a0:a7:f9:8d:b4:8c:19:ad:95:8c:11:52:70:8b:
74:35:d0:2f:2e:2b:f9:b0:d4:51:a1:5e:86:a5:d0:
31:1a:79:03:dd:8e:d0:79:6c:43:2e:d9:d6:c9:38:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:90:B9:36:53:5D:5B:D2:6B:80:65:ED:9C:AD:D4:D3:75:FB:90:C0
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/r5C5NlNdW9JrgGXtnK3U03X7kMA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.0.0/21
Signature Algorithm: sha256WithRSAEncryption
54:64:f0:57:72:de:4e:3d:14:ee:81:5c:de:0e:a2:cc:ed:e3:
37:18:9b:bf:4b:4d:4e:ec:99:49:f2:58:31:fb:70:24:c0:23:
fd:4a:5f:a5:0d:84:7f:08:89:60:71:5c:ce:54:e6:14:8a:b1:
4a:b5:ce:d0:4a:04:a4:19:7d:a2:19:ce:e3:e9:82:88:bd:42:
2f:01:69:72:55:92:1a:ef:e3:14:3d:d3:c8:7c:db:95:90:b2:
fc:eb:1e:25:ea:b8:49:a4:99:c7:a5:61:bd:5b:c4:0e:80:90:
81:bf:61:05:df:04:fb:db:a0:27:c1:e0:a9:e3:09:7a:51:02:
5f:3b:6c:a6:6f:2a:e1:37:a6:a6:b4:20:c2:e2:4e:53:fc:e2:
b4:69:2e:2d:b2:ad:29:be:81:00:91:9c:ad:28:7c:3f:9c:cb:
07:c2:b6:ef:f2:7d:3f:0b:c4:a7:be:17:41:02:9f:ee:23:7f:
8c:22:fc:c6:37:fa:77:7c:45:a1:14:3d:b8:0d:75:b1:7f:11:
56:67:56:3e:eb:d4:81:31:dc:42:b9:4c:74:4a:35:0f:82:36:
d4:e2:0f:72:c1:1a:ad:e5:1d:9f:44:72:6c:b6:95:56:e2:e1:
8d:88:fa:e4:d6:22:0c:c1:28:3c:fd:27:88:54:3b:c4:ba:b2:
14:5b:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:57 2023 by rpki-client on console-fra.rpki-client.org