Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JtRz727L0LcMlhcG7BFrPZ677Rs.roa
File: JtRz727L0LcMlhcG7BFrPZ677Rs.roa (raw, json)
Hash identifier: grnYmVlEu/NbhCQPVtbRll625mezh/IH0fwgzu0sSw0=
Subject key identifier: 26:D4:73:EF:6E:CB:D0:B7:0C:96:17:06:EC:11:6B:3D:9E:BB:ED:1B
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E12
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JtRz727L0LcMlhcG7BFrPZ677Rs.roa
Signing time: Thu 29 Dec 2022 09:32:12 +0000
ROA not before: Thu 29 Dec 2022 09:32:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63199
IP address blocks: 150.116.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3602 (0xe12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=26D473EF6ECBD0B70C961706EC116B3D9EBBED1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:58:f6:52:ea:6f:5c:09:e0:d7:03:98:10:
a5:9f:3c:8c:27:9e:70:1e:3b:58:3b:8e:61:9a:af:
9c:7f:1a:b7:2b:5b:6f:bb:e8:e4:2f:ef:2b:4c:76:
bc:34:17:7a:d2:6d:67:cb:99:e0:87:3a:7a:75:95:
d1:8e:d7:4a:a0:49:4c:3b:cd:e1:a3:1d:7b:60:b0:
3a:50:98:e6:14:19:37:c2:cb:e9:5f:3a:80:f8:ac:
a0:08:5d:ed:dd:a9:56:3e:6a:50:84:a4:33:7a:09:
f0:5d:a5:ec:c6:8f:04:5e:9b:91:99:1d:80:75:1f:
ef:ed:ec:0e:da:54:5e:9e:aa:0d:33:7d:38:f3:9a:
f9:63:17:83:bd:e0:bb:e3:ef:65:a7:5e:0e:04:e4:
d1:39:67:12:5c:38:42:cd:88:64:74:d3:04:6b:eb:
86:dc:c7:66:cf:df:b8:3c:ad:83:e8:7e:c8:05:5b:
da:73:bd:55:a1:81:bf:5c:fa:09:e7:03:02:45:8f:
79:10:e0:ec:fa:41:57:ca:c8:40:72:41:12:c5:0e:
b4:0d:f9:60:ac:7c:d6:1d:1c:e8:f1:5b:b1:67:ef:
67:2f:24:47:90:04:e3:b6:1b:4f:44:58:97:83:86:
c5:4f:d6:98:16:d0:67:62:7a:f3:f7:37:3f:63:40:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D4:73:EF:6E:CB:D0:B7:0C:96:17:06:EC:11:6B:3D:9E:BB:ED:1B
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JtRz727L0LcMlhcG7BFrPZ677Rs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.3.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ef:e4:7f:21:1a:e3:3d:70:95:c2:0d:ac:51:83:13:dc:83:
c2:f5:74:0a:b1:8e:3f:0d:b4:ae:1b:44:ac:af:1c:f4:50:5d:
93:35:83:4c:d8:ed:f9:6b:b7:21:e4:93:1c:74:a1:21:88:24:
af:ec:25:fc:6c:ca:7e:93:4d:1c:90:3c:e8:cd:74:cd:96:9e:
f1:fe:1b:d2:a0:3c:14:09:e6:dd:fb:84:d6:06:96:4d:7c:ce:
b9:93:2c:32:0c:3c:59:0d:b1:3f:9e:ed:15:b9:52:72:ea:34:
1d:ff:5d:1d:bf:a9:b3:3c:56:db:a2:d2:af:75:39:86:b9:91:
6d:a1:9f:f5:c4:0d:05:dd:c9:c1:ea:2e:22:b4:b6:68:09:ef:
aa:a8:d4:5b:b3:e3:e6:25:99:49:55:76:c3:33:fa:18:09:8b:
8d:8d:b2:68:bd:e8:59:74:61:f0:8e:90:ca:79:58:36:42:90:
66:41:4b:e7:16:a5:34:9b:da:a4:bf:41:ff:17:8a:c4:d3:75:
2b:8b:52:16:82:3c:f4:23:13:a0:23:53:fb:10:f1:05:5b:d5:
63:57:41:cc:db:a4:96:ab:86:c2:8a:f4:6f:aa:c4:23:56:35:
cc:42:e8:79:d8:99:c2:af:09:b7:f8:12:f9:45:38:a6:69:c7:
b7:bf:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:14 2023 by rpki-client on console-fra.rpki-client.org