Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JWQ2Jiy5t2RkrKpOGUUq2q-q_jY.roa
File: JWQ2Jiy5t2RkrKpOGUUq2q-q_jY.roa (raw, json)
Hash identifier: upeDEoi3l2Ovdb9FT+QLok2EQ9cSdtef9oM11DJ70Fw=
Subject key identifier: 25:64:36:26:2C:B9:B7:64:64:AC:AA:4E:19:45:2A:DA:AF:AA:FE:36
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JWQ2Jiy5t2RkrKpOGUUq2q-q_jY.roa
Signing time: Thu 15 Sep 2022 02:39:15 +0000
ROA not before: Thu 15 Sep 2022 02:39:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131607
IP address blocks: 150.117.80.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=256436262CB9B76464ACAA4E19452ADAAFAAFE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:5f:d6:03:d8:77:d7:6d:9d:92:c0:74:a7:
27:82:a5:cc:08:88:f8:a7:11:6c:f2:d6:a9:34:90:
de:04:cf:ea:2d:d8:81:ce:a6:82:0c:9b:86:42:cb:
95:ac:18:22:a0:fd:b7:00:67:14:d3:ee:5a:18:68:
9b:a6:5e:72:58:a3:74:d2:04:1d:e0:14:ac:5b:e3:
f5:1c:f6:9f:81:8f:b6:62:60:d3:e0:9a:cb:47:da:
6a:84:ea:6f:66:e3:ca:60:ec:4e:5b:e3:e1:6e:cc:
50:38:ba:72:b4:75:dd:e4:7a:02:d5:cb:f7:1b:cf:
50:0d:e0:18:69:b6:f9:97:35:77:af:3b:dc:1e:dd:
30:14:57:27:c0:c8:14:48:4d:40:46:e0:f5:34:e9:
2c:be:ef:bc:c0:8f:aa:1f:e7:37:8d:6c:87:0a:76:
d9:f1:75:49:4b:c3:61:21:cc:05:1d:17:f4:8b:e6:
60:98:88:07:b1:ff:a9:a8:f9:48:2e:f5:c2:fe:be:
06:da:cf:24:21:84:3d:e4:cb:23:0d:1f:ae:7e:f5:
e9:4e:c9:6d:36:ec:3a:a0:32:19:db:e2:01:db:f5:
6e:11:22:81:0e:b7:01:7a:0e:1a:62:a8:0e:72:db:
03:45:d0:f7:6e:6f:aa:d4:77:08:43:79:96:f4:44:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:64:36:26:2C:B9:B7:64:64:AC:AA:4E:19:45:2A:DA:AF:AA:FE:36
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JWQ2Jiy5t2RkrKpOGUUq2q-q_jY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.80.0/20
Signature Algorithm: sha256WithRSAEncryption
22:1e:b3:aa:93:d9:d0:c5:95:e6:71:a5:b0:5c:80:b4:64:45:
53:84:6a:d4:b1:3f:a4:c5:32:80:50:ab:45:ff:be:b3:3a:28:
78:0d:09:30:aa:36:de:7a:66:c8:7f:29:48:4e:23:ae:7e:0d:
cf:66:7e:84:ab:6d:23:46:54:64:0c:0c:4c:94:2f:98:82:dd:
fa:ed:03:86:52:4c:fd:fc:08:a4:c4:c6:72:da:56:0f:12:9f:
1a:83:cc:06:bf:b0:71:09:c3:45:0d:b0:bb:7d:56:1f:73:b4:
04:2f:21:94:10:5c:01:9f:4a:06:1d:96:4a:dc:d4:d2:db:ab:
83:f9:1d:69:1f:cb:8b:bb:34:41:d0:fc:23:f9:aa:a9:02:b8:
58:33:f7:f2:40:40:ca:de:ab:81:f6:73:8d:6b:d7:21:c0:89:
1a:cd:c7:f6:4a:38:4f:8c:06:99:b0:3d:69:34:f0:62:b7:6b:
fc:0c:79:cd:2a:fe:3d:1f:13:4f:c5:79:97:6e:80:b8:79:80:
3e:5d:58:5d:4e:1c:11:23:98:ef:52:c6:7a:aa:43:0f:c2:7b:
1e:e2:74:df:6a:00:62:a7:95:33:e7:cc:52:81:02:94:97:15:
21:37:7f:57:37:65:57:ac:b3:e9:86:cf:4d:bf:aa:2d:f8:c8:
cd:be:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:48 2023 by rpki-client on console-ams.rpki-client.org