Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ItBVI8f_KhBw9AzW3hoidqS3Kq0.roa
File: ItBVI8f_KhBw9AzW3hoidqS3Kq0.roa (raw, json)
Hash identifier: 3STB8h5HngX8m4kXlt+oraD89M1Btu2M9pAIc2PHO8o=
Subject key identifier: 22:D0:55:23:C7:FF:2A:10:70:F4:0C:D6:DE:1A:22:76:A4:B7:2A:AD
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DF7
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ItBVI8f_KhBw9AzW3hoidqS3Kq0.roa
Signing time: Thu 29 Dec 2022 09:32:05 +0000
ROA not before: Thu 29 Dec 2022 09:32:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 203.163.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3575 (0xdf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=22D05523C7FF2A1070F40CD6DE1A2276A4B72AAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:7f:7c:87:a8:c2:7e:b9:50:6f:c2:5e:97:
e6:ff:a8:a2:1f:c5:01:f3:5c:ba:da:23:ed:03:49:
13:2f:97:0e:6d:4a:26:a4:74:25:6a:d4:12:2a:55:
0c:96:f6:b3:b9:d7:23:ed:57:6f:70:ae:b8:b0:47:
74:15:02:4b:ef:4f:d1:7c:ce:fc:1b:55:76:56:e7:
06:d9:a5:6a:a5:1b:5b:35:3b:f6:9c:a1:a7:26:6d:
52:89:43:a1:77:17:3c:e4:81:68:4d:31:fc:3d:00:
f1:34:07:0c:c4:fd:94:18:3d:af:fd:69:c8:10:9c:
a9:40:69:d9:e0:3b:e3:b9:ac:d9:c2:60:23:7b:53:
55:39:b1:d5:50:a2:e1:79:12:24:e7:66:24:97:ea:
09:45:7e:32:2b:db:ef:38:4a:c9:6d:17:2e:21:c4:
60:ee:eb:86:5e:f6:d2:35:77:6c:e4:55:36:4f:25:
d2:1c:0c:15:d7:b3:a5:5e:53:f5:2e:d9:c9:a6:22:
a4:03:04:df:a1:d8:d3:e5:0f:a6:5e:e3:14:02:54:
cb:ce:5b:20:50:97:ac:50:6b:4f:a6:cc:31:b1:61:
ab:e8:78:e4:a0:ab:83:7c:dc:19:4d:85:e3:fd:d0:
d5:41:90:80:88:19:51:b6:e7:aa:8b:2c:63:15:b8:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D0:55:23:C7:FF:2A:10:70:F4:0C:D6:DE:1A:22:76:A4:B7:2A:AD
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ItBVI8f_KhBw9AzW3hoidqS3Kq0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.214.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9a:d9:71:ea:c4:19:87:64:0c:0b:68:ab:c0:8a:b7:93:78:
cd:e6:5d:16:26:ec:66:3d:77:99:22:48:a8:31:59:9f:6d:30:
a7:31:0c:38:2d:38:02:b7:d8:74:79:13:2f:c3:3e:ae:36:6c:
c9:4e:4e:b6:3e:9a:86:49:14:10:c1:54:22:bf:e6:c0:57:2c:
d0:ef:75:7a:89:4f:eb:4c:28:7a:63:ff:10:68:0e:c2:33:99:
38:48:a4:86:30:80:0a:b4:ec:d4:4e:8f:ab:56:62:c0:15:8e:
1c:bb:07:7b:ee:3d:c7:dc:02:d3:2c:a6:d3:ef:d3:79:db:44:
af:f3:cb:e7:75:b9:63:98:06:57:f1:1f:da:6c:ee:f3:60:0c:
b7:e1:43:bc:bf:22:5f:fe:48:83:76:db:4a:d7:cb:99:0a:17:
15:b7:31:1d:24:ea:0f:11:ab:64:66:e6:1a:c7:47:0e:8f:42:
e7:7b:3a:07:27:8c:cc:ec:8c:6d:1e:94:f2:85:93:4a:b5:5d:
e2:c4:c5:5e:b0:05:b5:43:a2:29:74:25:e7:fd:b0:e4:ef:f2:
df:6c:a6:ce:75:32:4a:88:92:e8:b8:a6:be:4d:26:8c:07:96:
28:b7:1b:d8:15:5e:5e:d7:18:72:c8:5e:19:78:50:b9:02:c3:
93:76:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:37 2023 by rpki-client on console-ams.rpki-client.org